Privacy Policy

Last updated February 2026

This policy explains what RevFound collects, why we collect it, and the control you have over it. It is written to be read, not to be survived.

Information you provide

Account information: your name, email address, and organization details you enter during setup (business name, industry, revenue band, and the systems you use).

Business records: files and data you upload or import — invoices, jobs and work orders, labor and material records, rate sheets, contracts, and related documents — along with the records RevFound derives from them.

Communications: information you send us when you request a revenue scan or contact support.

Information collected automatically

We record limited product usage events (for example, that a scan was run or an opportunity was verified) to understand whether the product is working. These events are tied to your organization, not to individual behavioral profiles, and we do not use third-party advertising trackers.

How we use your information

To operate RevFound: analyzing your records to identify potential billing discrepancies, presenting evidence for those findings, and tracking verification and recovery.

To support you, secure the service, prevent abuse, and comply with legal obligations.

We do not sell your data. We do not share your business records with other customers, and we do not use your business records to train third-party AI models.

AI processing

Some optional features — such as column-mapping suggestions and the assistant that answers questions about your data — send relevant portions of your records to an AI provider to generate a response. Financial conclusions are produced by RevFound's deterministic reconciliation engine using your confirmed pricing rules, not by an AI model.

Service providers

We rely on infrastructure providers for hosting, managed database and authentication, file storage, and AI inference. They process data on our behalf under their own security obligations and only to deliver the service.

Data retention and deletion

We retain your data while your organization is active. You can export your organization's data at any time from Settings, and an organization owner can request deletion. On deletion we remove your organization's records and uploaded files, retaining only what we must for legal or accounting obligations.

Security

Access to your data is scoped to your organization and enforced at the database level. Documents are stored privately. See our Security page for details, including what we do not currently claim.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Email privacy@revfound.co and we will respond.

Changes

If we make material changes to this policy, we will notify organization owners by email or in the product before the changes take effect.