Privacy Policy

1. Information We Collect

We collect the following categories of information to provide and operate Inrevos:

• Account information — your name, email address, phone number, and password (stored as a secure hash).
• Business information — your company name, industry, and organization details provided when you sign up.
• Meta / Facebook data — OAuth access tokens, Page and ad account identifiers, and lead data retrieved when you connect Meta Ads or Facebook Messenger to your account.
• WhatsApp Business data — your WhatsApp Business phone number ID, WhatsApp Business Account ID, and access tokens, along with the content of messages sent and received through your connected number.
• Lead data — names, phone numbers, email addresses, and other details of the leads and contacts you manage in your CRM, whether entered manually, imported, or received from connected channels.
• Usage data — log-in activity, IP address, browser type, and similar technical information collected automatically when you use the platform.

2. How We Use Your Information

We use the information we collect to:

• Provide core CRM functionality, including lead management, pipelines, tasks, and workflow automation.
• Send and receive messages on your behalf through WhatsApp Business API and Facebook Messenger.
• Import and synchronize leads from connected Meta Ads accounts and Lead Gen Forms.
• Authenticate your account and keep your data secure.
• Send service-related notifications and respond to support requests.
• Maintain, monitor, and improve the reliability and performance of the platform.

3. Third-Party Services

Inrevos integrates with the following third-party services to deliver its features. Each provider processes data in accordance with its own privacy policy and terms.

• Meta / Facebook — when you connect Meta Ads or Facebook Messenger, Inrevos accesses your Pages, ad accounts, and lead gen forms via the Meta Graph API, governed by Meta's Platform Terms and Data Policy.
• WhatsApp Business API — messaging is delivered through Meta's WhatsApp Business Platform; message content and delivery status pass through Meta's infrastructure.
• Supabase — our database provider, which stores your CRM data (accounts, leads, conversations, and messages) in a managed PostgreSQL database.
• Hosting providers — our application is hosted on infrastructure providers (such as Render and Vercel) that may process data in transit as part of delivering the service.

4. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide you with the Inrevos service. Specifically:

• Account and lead data is retained until you delete it or close your account.
• Meta and WhatsApp access tokens are deleted immediately when you disconnect the corresponding integration.
• Upon a verified account deletion request, we permanently delete your personal data within 30 days, except where we are required to retain certain records by law.
• Backups containing deleted data are purged on a rolling basis as part of routine backup rotation.

You can request deletion of your data at any time — see our Data Deletion page for step-by-step instructions.

5. How We Protect Your Data

We apply industry-standard technical and organizational measures to protect your information:

• Encryption in transit — all traffic is served over HTTPS/TLS with valid certificates.
• Encryption at rest — data is stored in a managed database with encryption at rest.
• Access control — role-based access limits who can view or manage data within an organization, and access tokens are scoped and stored securely.
• Isolation — each organization's data is logically separated so tenants cannot access one another's records.
• Auditing & monitoring — administrative actions are logged, and infrastructure is monitored for availability and abuse.
• Least-privilege secrets — API keys and credentials are held in restricted server configuration, never exposed to the browser or committed to source control.

6. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your account and associated personal data.
• Export — request your data in a portable, machine-readable format.
• Withdraw consent — disconnect any connected Meta or WhatsApp integration at any time from your account settings.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable timeframe and in accordance with applicable law.

7. Contact Us

If you have questions about this Privacy Policy or how Inrevos handles your data, reach out to us: