Trust, Privacy & Security
RevYou is built to let businesses collect feedback and manage it in an orderly way, with transparency about the information we collect and how it is managed.
Updated: September 18, 2026
This page gathers all the documents and policies concerning trust, privacy and security in the RevYou service. Each document stands on its own, and all of them are updated as the service changes.
Security
How access to the system is protected: sign-in, permissions, encryption, infrastructure and action logging. Read the full page
Privacy Policy
What information is collected, how we use it, who it may be disclosed to, and your rights regarding it. Read the full page
Data & deletion requests
How to submit a request to review, correct or delete information, and how the request is handled. Read the full page
Data Processing Agreement (DPA)
The terms under which RevYou processes information on behalf of businesses, for business customers. Read the full page
Subprocessors
The list of providers RevYou relies on to operate the service. Read the full page
Cookie Policy
Which cookies and browser storage are used, and for what purpose. Read the full page
Acceptable Use Policy
What is not allowed on the service, including the rules concerning Google reviews. Read the full page
Reporting a security vulnerability
Found a vulnerability? Here is how to report it to us responsibly. Read the full page
Frequently asked questions
Does RevYou support different permissions for employees?
Yes. The system has roles - owner, administrator, manager and staff - and each role’s permissions are enforced on the server side, not only in the interface.
Does a manager see only their own business?
Yes. Separation between businesses is enforced at the database level, so each user can access only the information of the business they were set up for.
Is an action history kept?
Yes. Important administrative actions in the system - such as team and permission changes, feedback handling and settings changes - are recorded in an activity log.
How does RevYou handle a data deletion request?
Submit a request using the form on the data requests page (/en/data-request). Before performing the deletion we verify the identity of the requester, and the request is handled in accordance with the law.
Where can I read about security at RevYou?
On the security page (/en/security), which describes the security measures in place in the service: sign-in, permissions, encryption, infrastructure and action logging.
Does RevYou have a Data Processing Agreement (DPA)?
Yes. The data processing agreement is available to business customers at /en/dpa, and sets out the terms under which RevYou processes information on behalf of the business.
Does RevYou use AI?
Yes. Some features use AI to transcribe, process and analyse text. Use depends on the feature and is described in the Privacy Policy (/en/privacy) and the sub-processors list (/en/subprocessors).