RevCert / privacy

Privacy notice.

How information is handled on our website and in the private workspace.

Who operates RevCert?

The legal operator identity and address have not yet been finalized for publication. These are required before accepting customer data or presenting this notice as final. For privacy questions, email khuranah.fp@gmail.com.

Information used in the app

RevCert stores supplier invoice records, supplier names and available email addresses, invoice context, notes, prepared responses, supporting documents, proposed terms, responses, and activity history that the owner imports or supplies.

When configured and authorized, the QuickBooks integration reads company information, bills, vendor records, and bill-payment records. The app uses these to support invoice review; its current implementation does not write to QuickBooks.

Storage and access

The private workspace is hosted through Sites on Cloudflare Workers. Application records and encrypted connection tokens use D1; uploaded documents use R2. Authentication is provided by the hosting platform. Supplier previews exclude internal context and attachments and currently still require private Site access.

The separate marketing website has no lead form, advertising trackers, or analytics scripts added by RevCert. Hosting providers may process request and operational logs. Their exact retention, processing locations, and applicable terms must be documented before this notice is finalized.

Response preparation and AI

Live AI response generation is not activated. Editable templates are available. The optional implementation sends the selected supplier name, invoice number, issue, context, and status to OpenAI when a response is requested. Files are not automatically extracted or sent for response generation. Any activation requires an updated disclosure and review of contractual data-use permissions.

Disconnecting and deleting

QuickBooks disconnection stops future access after successful revocation. Imported records, history, prepared responses, and attachments are retained separately. Automatic expiry and a self-service deletion flow are not implemented. Retention periods, backup handling, deletion procedures, and a verified request process must be agreed before customer onboarding.

Remaining decisions

Before this notice becomes effective, confirm the operator, purposes, complete service-provider inventory, retention criteria, applicable privacy rights, international transfers, business-customer roles, and how changes will be communicated.

For privacy questions, email khuranah.fp@gmail.com. Do not include sensitive records; we will agree a suitable channel and verify your authority first.