Privacy Policy

Revoye is an AI service provider and router for apps and developers, made by Degird (“we”, “us”). This policy covers revoye.com, the Revoye API, Revoye Cloud and the Revoye Desk app, and we are responsible for the personal data described here.

• Account: your email address, a one-way hash of your password (never the password), and an optional display name and time zone.
• Plan and billing: the plan you bought, its status and renewal date, and the licence and purchase references Freemius sends us. We never receive your card or bank details.
• API keys: a hash of each key and its first few characters, so you can tell keys apart. We never store the key itself.
• Devices and settings: the devices where you connected Revoye Desk, and your routing preferences, limits and other settings.
• API requests: the text of the requests you send, the responses, timings, token usage, and whether a request was processed on Revoye Cloud or Revoye Desk.
• Security records: sign-ins, active sessions, the IP address and browser or app used, and changes to your keys and devices.

• The password or sign-in for the AI account you use with Revoye Desk — it stays on your device.
• Your card or bank details — Freemius handles payments.
• Request or response text on your device — Revoye Desk does not keep it.
• Analytics, advertising or tracking data. The site loads no third-party tracking scripts.

Only to run Revoye:

• to process your requests, return the responses, and show your request history and usage;
• to manage your plan, apply its limits and keep billing records;
• to keep accounts secure and prevent abuse, including rate limits;
• to send service emails — email verification, password resets, purchase and security notices;
• to answer you when you contact us, and to meet legal obligations.

We do not sell your data, share it for advertising, or use your requests and responses to train AI models.

Revoye Cloud: the text of a request is processed by the AI model providers Revoye Cloud uses to produce responses. They receive the request text only, not your account details, and process it on our behalf to return the response.

Revoye Desk: a request is processed on your device with an AI account you own and sign in to yourself. The service that account belongs to receives the request under its own terms and privacy policy, which we do not control — please read them.

We use two strictly necessary cookies. The checkout, which Freemius provides, may set its own cookies to complete a purchase.

• revoye_session keeps you signed in.
• revoye_csrf protects your account against forged requests.

Only with services that help us run Revoye, and only what they need:

• our hosting provider, which runs the servers your data is stored on;
• Freemius, our reseller and payment partner, which processes your purchase and payments;
• the AI model providers Revoye Cloud uses, which receive the text of Cloud requests to produce responses;
• our email delivery service, which sends your service emails;
• Have I Been Pwned, when you choose a password — we send only the first five characters of a one-way hash to check it against known breaches, never the password.

We may also disclose data if the law requires it, or to a successor if Revoye is sold or merged — in which case this policy continues to protect it.

• Request and response text: 30 days by default. Choose anything from 0 to 365 days in Settings, or delete a request at any time.
• Request records without the text: 180 days.
• Security records: about 13 months.
• Sign-in sessions: they end after 30 days of inactivity, and after 90 days at most.
• Plan and billing records: as long as the law requires us to keep them.
• Your account: until you delete it.

Everything travels over HTTPS. Passwords and API keys are stored only as one-way hashes, and API keys are shown to you once. Only devices you have connected can receive your requests for Revoye Desk, and you can disconnect any of them at once. No system is perfectly secure, so keep your password and API keys private and tell us straight away if you suspect misuse.

In your dashboard you can update your profile, change how long request text is kept, delete requests, revoke API keys, disconnect devices, manage your subscription and delete your account. Deleting your account removes its data; a minimal security record and the billing records the law requires, no longer used for anything else, may remain for their normal retention period.

Depending on where you live, you may also have the right to access, correct, export or erase your data, to object to its use, and to complain to your data protection authority. Use our contact page and we will respond as soon as we can.

Revoye is not meant for anyone under 16, and we do not knowingly collect their data.

Your data may be stored and processed in countries other than your own, including by the services listed above. Wherever it is, we protect it as this policy describes.

When we change this policy we update the date at the top. If a change materially affects how we use your data, we will tell you by email or on this site before it takes effect.