Privacy policy

Revloy (“Revloy”, “we”, “us”) provides reporting for Twilio messaging and voice activity at revloy.com. This policy explains what we collect, why, and the choices you have. If you have a question, email [email protected].

What we collect

Your Revloy account. Your name, email address, and a securely hashed password. If you turn on two-factor authentication or passkeys, we store what’s needed to verify them.

Your Twilio credentials. The Account SID and the Auth Token or API key you connect. Secrets are encrypted at rest and are never displayed again after you save them.

Twilio activity metadata. To build your reports, we read the following from Twilio’s API and store it:

• Message and call identifiers, from and to numbers, and timestamps
• Direction, delivery or call status, and error codes
• Message segment and media counts, and call durations
• Prices, currencies, and daily usage and spend totals
• Names and statuses of your Twilio accounts and subaccounts

What we never collect. We do not store the content of your messages (message bodies), MMS media, or call recordings and transcripts.

Billing details. Payments are handled by Stripe. We never see or store your full card number. We keep your Stripe customer ID, your subscription status, and the card brand and last four digits that Stripe shares with us.

Technical data. Like most websites, our servers record basic request logs (such as IP address and browser type) to keep the service secure and working.

How we use your data

• To provide your reports and keep them in sync with Twilio
• To run your free trial and subscription, and to send account and billing emails
• To answer support requests
• To protect the service against abuse and keep it secure

We do not sell your data, and we do not use it for advertising.

Who we share it with

We share data only with service providers that help us run Revloy, such as Stripe for payments, our hosting provider, and our email delivery provider, and only as much as they need to do that job. We may also disclose data if the law requires it.

How long we keep it

We keep your data while your account exists. Disconnecting a Twilio account deletes the activity we synced from it. Deleting your Revloy account from your settings deletes your account and all of your synced Twilio data. Stripe keeps its own records of payments as required by law.

Cookies

We use only the cookies needed to keep you signed in and to protect forms against cross-site request forgery. Your light or dark appearance preference is stored in your browser. We don’t use advertising or tracking cookies.

Security

All traffic to Revloy is encrypted with HTTPS, Twilio secrets are encrypted at rest, and Revloy only reads from Twilio. It never sends messages, places calls, or changes your Twilio account.

Your choices and rights

You can update your profile, disconnect Twilio accounts, or delete your Revloy account at any time from inside the app. To request a copy of your data, or for any other privacy request, email [email protected].

Changes to this policy

If we make meaningful changes, we’ll update the date at the top of this page and, where appropriate, let you know by email.