Privacy Policy

Summary

This policy explains how Revvast Labs collects, uses, and protects data.

Revvast Labs ("we", "us", "our") is a software platform for businesses and agencies to manage advertising workflows. The platform is operated by COMPASS QUALITATIVE RESEARCH, INC. (7 Waterbury Ct, Little Rock, AR 72223, United States), which acts as the data controller for the personal data described in this policy. We process personal data in a lawful, transparent, and proportionate manner.

1. What Data We Collect

• User accounts: name, email, encrypted credentials, role, and workspace membership.
• Workspace data: team settings, membership records, and audit-relevant activity context.
• Campaign workflow data: campaign, ad group, ad setup inputs, and associated notes.
• Creative assets: uploaded image/video files and related metadata.
• Analytics data: performance metrics displayed in reporting dashboards.

2. Account Connection Data

When you connect an advertising account on a supported platform — such as TikTok or Meta (Facebook) — we process account-linking data (such as advertiser identifiers, business and page identifiers, and authorization tokens) to associate workspace operations with the correct advertiser context.

• Purpose: enable campaign workflow features and account-scoped reporting.
• Scope: access is limited to permissions granted during authorization.
• Control: you remain responsible for account-level permissions on connected platforms.

3. Data Received from Meta (Facebook)

If you sign in with Facebook or connect a Meta advertising account, we may receive the following data from Meta Platforms, Inc. via the Facebook Login and Marketing API products:

• Basic profile: your app-scoped user ID, name, and email address — used to identify your account in our platform.
• Advertising data: ad account, business, page, and pixel identifiers, campaign structure, and performance metrics — used to provide campaign management and reporting features you request.

We use this data only to provide the services described above. We do not sell it or share it with third parties, and we handle it in accordance with the Meta Platform Terms.

4. Uploaded Assets and Storage

Uploaded creative assets and metadata are stored in infrastructure operated for service delivery. We apply reasonable technical and organizational controls to protect data against unauthorized access and misuse.

5. Lawful Use and Data Protection

We process personal data based on applicable legal grounds (such as contract performance, legitimate interests, and legal obligations). We implement safeguards appropriate to the nature of processed data.

6. Cookies and Session Use

• Session cookies are used to keep authenticated users signed in securely.
• Essential cookies are required for core platform operation and security controls.
• You can manage browser cookie settings, but disabling cookies may impact functionality.

7. User Rights

Depending on local law, users may request access, correction, deletion, portability, or restriction of processing.

8. Data Deletion

You can request deletion of your personal data, including any data received from Meta (Facebook), at any time:

• Email us at support@revvast.com from the address associated with your account with the subject "Data deletion request".
• If you signed in with Facebook, you can also remove the Revvast app in your Facebook settings under Settings & Privacy → Settings → Apps and Websites, which revokes our access to your Facebook data.

Upon receiving a request, we will delete your account data, connected-platform tokens and identifiers, and associated workspace data within 30 days, except where retention is required by law. See also our Data Deletion Instructions.

9. Retention

We retain data for as long as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type.

10. Contact

For privacy questions, contact us at support@revvast.com or via the contact page.