REVCOM · TRUST & TRANSPARENCY
Privacy & GDPR notice
Updated 13 October 2026
Who handles your information
RevCom (Pty) Ltd is the controller for the platform information described here. Our location is Gaborone, Botswana; privacy and rights requests can be sent to team@revcom.cloud. GDPR rights apply where the regulation applies to our processing; this notice is not a certification of compliance.
What we collect
Account details include your name, company, work email, region, workspace preference, verified email status and accepted terms version and time, seller agreement snapshots, acceptance method, verified email and email-receipt status. We also process listings, prices, media, evidence, saved assets, support and viewing requests, replies and activity records. Historical waitlist registrations retain the accepted LOI and consent records. Security processing includes hashed session tokens, sign-in challenges and hashed connection identifiers used for rate limits.
Why and on what basis
We process account, listing and enquiry information to provide requested services and take steps towards an agreement. We use legitimate interests, subject to applicable law and balancing of rights, for fraud prevention, service security and operational support. We may retain information for applicable legal obligations and legal claims. Optional marketing and saved browser preferences rely on separate consent. Refusing those optional choices does not prevent registration.
Who can see it
Accepted listing media and approved asset information can appear publicly. Private evidence papers, accounts, enquiries and requests are accessible to their owner and authorised staff. Hosting and storage providers process platform records, and Resend processes email delivery and optional marketing. Google reCAPTCHA v3 assesses browser and interaction signals on registration and sign-in pages to help detect abuse. We send a security response token for server verification and do not supply private inventory or due-diligence documents to reCAPTCHA. Provider processing may take place outside your country. Where GDPR applies, transfers require an applicable legal mechanism and appropriate safeguards; contact us for details of the safeguards relevant to your information.
Revvy assistant
Revvy currently uses approved company answers. When AI mode is configured, your question and recent questions are sent to OpenAI to select approved answers. Private account records, evidence and support tickets are not supplied to that AI service. RevCom does not store chat text in its database; it stays in the open page until cleared or the page is left. Provider operational retention policies may still apply. Do not put passwords, bank details or private documents in chat.
Retention
Account and platform records are kept while needed for the service, due diligence, disputes, security or applicable legal requirements, then reviewed for deletion or anonymisation. Account sessions expire; old sign-in challenges and expired sessions are cleaned up during sign-in processing. Cookie choices expire after six months. Historical accepted LOIs and transaction evidence may need to be retained separately from active accounts. A deletion request is reviewed rather than automatically destroying records that may be required by law.
Your rights
Where applicable, you may request access, correction, deletion, restriction, portability and object to processing. You may withdraw consent for optional preferences or marketing without affecting prior lawful processing. Download your account data in My account, submit a privacy request there, or email team@revcom.cloud. We verify identity and assess applicable exceptions before acting. Where GDPR applies, you may complain to the relevant supervisory authority and we handle requests within its applicable deadlines.
Cookies and security
A Secure, HttpOnly, SameSite session cookie supports sign-in. Essential browser storage supports sign-in and remembers your cookie choice. Region and motion preferences are saved only if you allow preferences. No analytics or advertising trackers are installed by this release. Security controls reduce risk but cannot guarantee that every threat is prevented.