Privacy Policy

RevCollect is operated by Nextgrid Digital ("RevCollect", "we", "us"). We provide accounts-receivable collections follow-up software for small and mid-size businesses. When you use RevCollect, you are the data controller for your clients' information; we act as your data processor.

Privacy contact: privacy@revcollect.app

• Contact information— names, email addresses, and phone numbers of your customers' clients.
• Financial data — invoice amounts, payment history, outstanding balances, and aging status (synced from QuickBooks, Xero, or similar).
• Communication content — email subjects, bodies, and attachments sent or received through RevCollect.
• Behavioral metadata — when recipients respond, reply classification, and payment patterns used to prioritize follow-ups.
• Account data — your workspace name, team member names and emails (via Clerk), and billing information (via Stripe).

We process personal data solely to provide the collections follow-up service you signed up for: syncing invoices, drafting and sending follow-up emails, classifying replies, and surfacing account context. Lawful basis under GDPR: contractual necessity (Article 6(1)(b)).

RevCollect uses large language models (Anthropic Claude and/or OpenAI GPT) to classify inbound replies and draft collection emails. Data is sent to these providers for a single inference request per action; it is not used to train or improve their models under our commercial API agreements.

Under Australia's Privacy Act amendments, we disclose that substantially automated decision-making is used for reply classification, draft generation, and risk prioritization. You may contact us to request human review of a specific decision.

We share data with service providers who process it on our behalf. See our sub-processor list for the current registry, including hosting (Vercel, Supabase), authentication (Clerk), email delivery (Resend or Postmark), payments (Stripe), and AI inference (Anthropic, OpenAI).

• Active subscription: data retained for the duration of service.
• After cancellation: all personal data deleted within 30 days.
• Email bodies: automatically purged after 24 months unless you opt to retain longer in workspace settings.

Depending on your location, you and your clients may have rights to access, correct, delete, or export personal data, and to object to certain processing. EU/UK controllers should use our Data Processing Agreement. Submit requests to privacy@revcollect.app — we respond within 30 days.

RevCollect does not sell, rent, or share personal information with third parties for their marketing or commercial purposes.

See our Security Practices page. If a breach affects your data, we will notify you and relevant authorities within 72 hours where required by law.