Security, Privacy and Your Data
Who sees your chat messages, which AI companies process them, Revnu's compliance status (DPA, subprocessors, SSO, SOC 2), what it stores and where, how it uses your mailbox and LinkedIn, what to send your security or procurement team, and how to get your data deleted.
In short:
Stored: Revnu keeps your chats with it, what you connect and the work it does for you, encrypted. It never sells them or shows them to another customer.
Processed: AI models from Anthropic and OpenAI read what's needed to do the work, and they don't train on your data.
Your control: your first sequence waits for your yes, and after that Settings > Agent decides what asks first. Replies to prospects and spending money always wait. You can disconnect any tool in Connections.
The full detail is in the privacy policy and the data processing agreement.
Who sees my chat messages?
Revnu stores your messages to it, in Slack, iMessage or the dashboard, with the rest of your account. Three kinds of reader can see them:
The AI models that do the work. Anthropic and OpenAI process your messages to write Revnu's replies and do the work. The privacy policy lists both as subprocessors and says they don't train on your data.
Revnu's team, when it's needed to run the service and fix problems. On Pro, Revnu also reviews how its agents perform across accounts and turns what works into general improvements. Only general lessons carry over, and no customer sees another's content. On Managed, your data is used only for your account.
Your teammates on the same Revnu account, in the dashboard and in your Slack channel.
On iMessage, your messages and your phone number also pass through the messaging delivery provider that connects Revnu's number to iMessage. If you'd rather keep that provider out of it, talk to Revnu in Slack or the dashboard chat instead. See Talk to Revnu.
In Slack, Revnu reads only channels you add it to. See What does Revnu do in Slack?
Which AI does Revnu use?
Revnu runs on AI models from Anthropic and OpenAI, the two AI providers named in the privacy policy. Pro and Managed run on different models. Managed's is the one that did best in Revnu's tests on research and bulk list work. Neither provider trains on your data. See Pro vs Managed.
Compliance status
What Revnu has today, and where to check it:
| Status | |
|---|---|
| Data processing agreement (DPA) | Yes. UK and EU GDPR, with the Standard Contractual Clauses and the UK Addendum. Read it at revnu.com/dpa. |
| Subprocessors | Listed by name and purpose in the privacy policy. The full list is shared under a confidentiality agreement. |
| Where data is processed | Revnu is run by IT5 Inc. in the United States, and most subprocessors process data in the United States. Transfers from the UK and EU rely on the Standard Contractual Clauses. See the privacy policy's International transfers section. |
| Encryption | In transit and at rest. Connection tokens are stored encrypted. |
| SSO or SAML | In progress with our team. Today you sign in with Google or an emailed code. |
| Roles and permissions inside an account | In progress with our team. Today every teammate can use the whole dashboard, and only the owner manages the team list. See Add teammates. |
| SOC 2 report | In progress with our team. Email support@revnu.com for where it's at. |
| Penetration test report, data residency choice, custom retention terms | Email support@revnu.com. |
| Security contact | support@revnu.com with "security" in the subject. |
If you need a security questionnaire answered, send it to support@revnu.com.
For your security or procurement team
Forward this section, or send them these links:
Legal entity. IT5 Inc. (d.b.a. Revnu), a Delaware corporation in the United States, as named in the terms and the DPA.
Subprocessors. Listed by name and purpose in the privacy policy. The full list is shared under a confidentiality agreement. Email support@revnu.com to get that list.
DPA. Read it at revnu.com/dpa. To sign, email support@revnu.com with your company's legal name, address and a data protection contact, and you get a countersigned copy. If you have your own DPA, send it and Revnu reviews it.
Questionnaires. Send them to support@revnu.com. People reply by email, with no set response time. Security vulnerability reports are answered within one working day.
Billing and invoices. Pro is billed monthly by card through Stripe. On Managed, invoices can come from our team. For company details on invoices or other billing documents, email support@revnu.com. See Change your card and download invoices.
In progress with our team: SSO or SAML, a SOC 2 report, and roles and permissions for your team. A choice of data region and a published uptime commitment aren't offered yet, and the terms provide the service "as is". For a penetration test report or custom retention terms, ask support@revnu.com.
What does Revnu do with my mailbox?
When you connect Gmail or Outlook in Connections > Reach People, Revnu uses it to:
Send the emails you approved, or that your approval settings let go out
Read the replies, so they show in Inbox and Revnu can draft an answer
Replies to prospects always wait for your approval. To stop sending, say "pause" in chat, which also cancels email still in the send queue. To cut the connection, press Disconnect on the mailbox in Connections.
What does Revnu do with my LinkedIn?
When you connect LinkedIn, Revnu sends connection requests, messages and InMail as you, and reads your LinkedIn messages so replies show in Inbox. It paces every action to keep your account safe. See LinkedIn limits and account safety.
To stop all LinkedIn sending without disconnecting, open Settings > Agent, find LinkedIn Sending and turn its switch off. Revnu then only reads.
What does Revnu do in Slack?
Revnu reads messages only in channels you add it to. It acts on messages that mention @Revnu, and on replies in a thread that started with one. It doesn't read direct messages and doesn't export your channel history.
How do I stay in control?
Approvals. Settings > Agent > What Needs Your Approval sets six kinds of work to Ask Me First or Just Do It. Spending money, replies to prospects and your first sequence always wait. See What Revnu asks before it acts.
Never Say. Revnu reads the claims in Settings > Memory > Never Say every time it works. It also checks them when you approve a sequence, before an email sends and before a post publishes. One-off LinkedIn messages aren't checked that way, so review those yourself if a claim matters.
Block list. Emails, domains and LinkedIn profiles in Settings > Agent > Block List are never researched or contacted. Unsubscribes are added automatically. See Keep people off your outreach.
Spend goes to your own accounts. Ad spend is billed by the ad platform to your own ad account, never through Revnu.
Pause. Say "pause" in chat at any time. See Pause or stop everything.
What does Revnu store?
Your account details, what you connect, the work Revnu does for you (leads, drafts, posts, ads and results) and your conversations with it. Connection tokens are stored encrypted. The privacy policy lists each kind of data and how long it's kept.
Revnu never sells your data, never shows your content to another customer, and never trains shared AI models on your content.
How long data is kept: for as long as your account is active, and for a limited time afterwards where it's needed to run the service or meet legal obligations. Disconnecting an integration stops Revnu using it straight away. For specific retention terms, email support@revnu.com.
Who processes my data?
The privacy policy lists the subprocessors that run Revnu, by name and purpose. The full list is shared under a confidentiality agreement. Email support@revnu.com to ask for it.
How do I sign a data processing agreement?
Revnu's DPA covers UK and EU GDPR and includes the Standard Contractual Clauses and the UK Addendum. For your outreach, you are the controller and Revnu is your processor.
Email support
Write to support@revnu.com and say you want to sign the DPA.
Include your company details
Give your company's legal name, its address, and a contact for data protection. If you have your own DPA, attach it and Revnu reviews it.
Get your countersigned copy
Revnu sends back a countersigned copy.
Questions about access and compliance
Is there SSO or a SOC 2 report?
SSO. In progress with our team. Today you sign in with Google or an emailed code, with no passwords.
SOC 2. In progress with our team. Email support@revnu.com for where it's at.
Can I limit what a teammate can do?
Roles and per-person permissions are in progress with our team. Today every teammate on an account can use the whole dashboard. To keep control, set the switches in Settings > Agent > What Needs Your Approval to Ask Me First, and write any limits for Revnu in Memory, for example "don't run any ads for us". See What Revnu asks before it acts.
How do I get my data exported or deleted?
Email support@revnu.com and say what you want exported or deleted. Requests are answered within 30 days. To close your account and delete everything, see Delete your account and data. Disconnecting an integration in Connections stops Revnu using it straight away.
A prospect who wants to know what Revnu holds about them, or wants it deleted, can email support@revnu.com too. Once deleted, they're left out of every customer's lead searches.
How do I report a security problem?
Email support@revnu.com with "security" in the subject. Revnu replies within one working day.
Next step
Frequently Asked Questions
Revnu connects to your mailbox to send the emails you approved and to read the replies to them, which show in Inbox. Replies to prospects always wait for your approval before they go. You can disconnect the mailbox in Connections at any time.