# Security, Privacy and Your Data > Who sees your chat messages, which AI companies process them, Revnu's compliance status (DPA, subprocessors, SSO, SOC 2), what it stores and where, how it uses your mailbox and LinkedIn, what to send your security or procurement team, and how to get your data deleted. Canonical: https://revnu.com/docs/security-and-data Last updated: 2026-10-18 In short: - **Stored:** Revnu keeps your chats with it, what you connect and the work it does for you, encrypted. It never sells them or shows them to another customer. - **Processed:** AI models from Anthropic and OpenAI read what's needed to do the work, and they don't train on your data. - **Your control:** your first sequence waits for your yes, and after that **Settings > Agent** decides what asks first. Replies to prospects and spending money always wait. You can disconnect any tool in **Connections**. The full detail is in the [privacy policy](/privacy) and the [data processing agreement](/dpa). ## Who sees my chat messages? Revnu stores your messages to it, in Slack, iMessage or the dashboard, with the rest of your account. Three kinds of reader can see them: - **The AI models that do the work.** Anthropic and OpenAI process your messages to write Revnu's replies and do the work. The privacy policy lists both as subprocessors and says they don't train on your data. - **Revnu's team,** when it's needed to run the service and fix problems. On Pro, Revnu also reviews how its agents perform across accounts and turns what works into general improvements. Only general lessons carry over, and no customer sees another's content. On Managed, your data is used only for your account. - **Your teammates** on the same Revnu account, in the dashboard and in your Slack channel. **On iMessage,** your messages and your phone number also pass through the messaging delivery provider that connects Revnu's number to iMessage. If you'd rather keep that provider out of it, talk to Revnu in Slack or the dashboard chat instead. See [Talk to Revnu](/docs/talk-to-revnu). **In Slack,** Revnu reads only channels you add it to. See [What does Revnu do in Slack?](#what-does-revnu-do-in-slack) ## Which AI does Revnu use? Revnu runs on AI models from Anthropic and OpenAI, the two AI providers named in the [privacy policy](/privacy). Pro and Managed run on different models. Managed's is the one that did best in Revnu's tests on research and bulk list work. Neither provider trains on your data. See [Pro vs Managed](/docs/plans). ## Compliance status What Revnu has today, and where to check it: | | Status | |---|---| | Data processing agreement (DPA) | Yes. UK and EU GDPR, with the Standard Contractual Clauses and the UK Addendum. Read it at [revnu.com/dpa](/dpa). | | Subprocessors | Listed by name and purpose in the [privacy policy](/privacy). The full list is shared under a confidentiality agreement. | | Where data is processed | Revnu is run by IT5 Inc. in the United States, and most subprocessors process data in the United States. Transfers from the UK and EU rely on the Standard Contractual Clauses. See the privacy policy's International transfers section. | | Encryption | In transit and at rest. Connection tokens are stored encrypted. | | SSO or SAML | In progress with our team. Today you sign in with Google or an emailed code. | | Roles and permissions inside an account | In progress with our team. Today every teammate can use the whole dashboard, and only the owner manages the team list. See [Add teammates](/docs/teammates). | | SOC 2 report | In progress with our team. Email support@revnu.com for where it's at. | | Penetration test report, data residency choice, custom retention terms | Email support@revnu.com. | | Security contact | support@revnu.com with "security" in the subject. | If you need a security questionnaire answered, send it to support@revnu.com. ## For your security or procurement team Forward this section, or send them these links: - **Legal entity.** IT5 Inc. (d.b.a. Revnu), a Delaware corporation in the United States, as named in the [terms](/terms) and the [DPA](/dpa). - **Subprocessors.** Listed by name and purpose in the [privacy policy](/privacy). The full list is shared under a confidentiality agreement. Email support@revnu.com to get that list. - **DPA.** Read it at [revnu.com/dpa](/dpa). To sign, email support@revnu.com with your company's legal name, address and a data protection contact, and you get a countersigned copy. If you have your own DPA, send it and Revnu reviews it. - **Questionnaires.** Send them to support@revnu.com. People reply by email, with no set response time. Security vulnerability reports are answered within one working day. - **Billing and invoices.** Pro is billed monthly by card through Stripe. On Managed, invoices can come from our team. For company details on invoices or other billing documents, email support@revnu.com. See [Change your card and download invoices](/docs/billing-and-invoices). In progress with our team: SSO or SAML, a SOC 2 report, and roles and permissions for your team. A choice of data region and a published uptime commitment aren't offered yet, and the terms provide the service "as is". For a penetration test report or custom retention terms, ask support@revnu.com. ## What does Revnu do with my mailbox? When you connect Gmail or Outlook in **Connections > Reach People**, Revnu uses it to: - Send the emails you approved, or that your approval settings let go out - Read the replies, so they show in **Inbox** and Revnu can draft an answer Replies to prospects always wait for your approval. To stop sending, say "pause" in chat, which also cancels email still in the send queue. To cut the connection, press **Disconnect** on the mailbox in **Connections**. ## What does Revnu do with my LinkedIn? When you connect LinkedIn, Revnu sends connection requests, messages and InMail as you, and reads your LinkedIn messages so replies show in **Inbox**. It paces every action to keep your account safe. See [LinkedIn limits and account safety](/docs/linkedin-limits). To stop all LinkedIn sending without disconnecting, open **Settings > Agent**, find **LinkedIn Sending** and turn its switch off. Revnu then only reads. ## What does Revnu do in Slack? Revnu reads messages only in channels you add it to. It acts on messages that mention @Revnu, and on replies in a thread that started with one. It doesn't read direct messages and doesn't export your channel history. ## How do I stay in control? - **Approvals.** **Settings > Agent > What Needs Your Approval** sets six kinds of work to **Ask Me First** or **Just Do It**. Spending money, replies to prospects and your first sequence always wait. See [What Revnu asks before it acts](/docs/approvals). - **Never Say.** Revnu reads the claims in **Settings > Memory > Never Say** every time it works. It also checks them when you approve a sequence, before an email sends and before a post publishes. One-off LinkedIn messages aren't checked that way, so review those yourself if a claim matters. - **Block list.** Emails, domains and LinkedIn profiles in **Settings > Agent > Block List** are never researched or contacted. Unsubscribes are added automatically. See [Keep people off your outreach](/docs/exclude-contacts). - **Spend goes to your own accounts.** Ad spend is billed by the ad platform to your own ad account, never through Revnu. - **Pause.** Say "pause" in chat at any time. See [Pause or stop everything](/docs/pause-revnu). ## What does Revnu store? Your account details, what you connect, the work Revnu does for you (leads, drafts, posts, ads and results) and your conversations with it. Connection tokens are stored encrypted. The [privacy policy](/privacy) lists each kind of data and how long it's kept. Revnu never sells your data, never shows your content to another customer, and never trains shared AI models on your content. How long data is kept: for as long as your account is active, and for a limited time afterwards where it's needed to run the service or meet legal obligations. Disconnecting an integration stops Revnu using it straight away. For specific retention terms, email support@revnu.com. ## Who processes my data? The privacy policy lists the [subprocessors](/privacy) that run Revnu, by name and purpose. The full list is shared under a confidentiality agreement. Email support@revnu.com to ask for it. ## How do I sign a data processing agreement? Revnu's [DPA](/dpa) covers UK and EU GDPR and includes the Standard Contractual Clauses and the UK Addendum. For your outreach, you are the controller and Revnu is your processor. ### 1. Email support Write to support@revnu.com and say you want to sign the DPA. ### 2. Include your company details Give your company's legal name, its address, and a contact for data protection. If you have your own DPA, attach it and Revnu reviews it. ### 3. Get your countersigned copy Revnu sends back a countersigned copy. ## Questions about access and compliance **Is there SSO or a SOC 2 report?** - **SSO.** In progress with our team. Today you sign in with Google or an emailed code, with no passwords. - **SOC 2.** In progress with our team. Email support@revnu.com for where it's at. **Can I limit what a teammate can do?** Roles and per-person permissions are in progress with our team. Today every teammate on an account can use the whole dashboard. To keep control, set the switches in **Settings > Agent > What Needs Your Approval** to **Ask Me First**, and write any limits for Revnu in Memory, for example "don't run any ads for us". See [What Revnu asks before it acts](/docs/approvals). ## How do I get my data exported or deleted? Email support@revnu.com and say what you want exported or deleted. Requests are answered within 30 days. To close your account and delete everything, see [Delete your account and data](/docs/delete-account). Disconnecting an integration in **Connections** stops Revnu using it straight away. A prospect who wants to know what Revnu holds about them, or wants it deleted, can email support@revnu.com too. Once deleted, they're left out of every customer's lead searches. ## How do I report a security problem? Email support@revnu.com with "security" in the subject. Revnu replies within one working day. ## Next step [What Revnu asks before it acts](/docs/approvals): every approval setting, and what always waits. ## Frequently asked questions ### Can Revnu read my whole inbox? Revnu connects to your mailbox to send the emails you approved and to read the replies to them, which show in Inbox. Replies to prospects always wait for your approval before they go. You can disconnect the mailbox in **Connections** at any time. ### Does Revnu have a DPA? Yes. The DPA at revnu.com/dpa covers UK and EU GDPR and includes the Standard Contractual Clauses and the UK Addendum. Email support@revnu.com with your company's legal name, address and a data protection contact, and you'll get a countersigned copy. ### Does Revnu support SSO? SAML SSO is in progress with our team. Today you sign in to Revnu with Google or an emailed one-time code. ### Is Revnu SOC 2 compliant? SOC 2 is in progress with our team. Revnu already encrypts data in transit and at rest and fills in security questionnaires on request; email support@revnu.com for where SOC 2 is at or for a questionnaire. ### Where is my data stored? In the United States. Revnu is run by IT5 Inc. in the United States, and most of its subprocessors process data there. Email support@revnu.com if you need a specific region or arrangement. ### Is Never Say checked on everything Revnu sends? Never Say is checked when you approve a sequence, before every email sends and before every post publishes. For one-off LinkedIn messages, read the draft yourself when a claim matters. ### Who can read my messages to Revnu? The AI models from Anthropic and OpenAI that do the work, Revnu's team when it's needed to run the service and fix problems, and your teammates on the account. On iMessage, the messaging delivery provider behind Revnu's number also carries your messages and phone number. Use Slack or the dashboard chat if you'd rather avoid that. ### Which AI model does Revnu use? Models from Anthropic and OpenAI, the AI providers named in the privacy policy. Pro and Managed run on different models, and neither provider trains on your data. ### Who is Revnu's legal entity for a vendor form? IT5 Inc. (d.b.a. Revnu), a Delaware corporation. Send other vendor-form questions to support@revnu.com. ### Does Revnu train AI models on my data? No. Revnu doesn't train shared AI models on your content, and its AI providers don't train on it either. On Pro, Revnu reviews how agents perform across accounts and turns what works into general improvements, without one customer's content reaching another. On Managed, your data is used only for your account.