Last updated: September 7, 2026
This policy describes what information Revecta collects, how it's used, who it's shared with, and the choices available to you.
This Privacy Policy describes how Revecta collects, uses, and discloses information in connection with the Revecta service, used by specialty-contractor businesses ("Companies") and their authorized users. It should be read together with the Terms of Service. Revecta is currently operated by its founder, trading as "Revecta," not through a separate incorporated legal entity.
Account information you provide: name, email address, and password (stored as a one-way hash; Revecta cannot view your actual password).
Company information you provide: company name, primary trade, and team member roles.
Project and field data you provide: project details, customer and contact information you enter for the purpose of sending approval requests, field notes, photographs, voice notes, labor/material/equipment records, T&M ticket and change-order content, and pricing.
Customer-response data, recorded when your customer uses a Revecta-generated approval link: their typed name, the action taken (approved/rejected/questioned), and a server timestamp. IP address and browser/device information are not currently captured on this specific flow.
Billing information: if you start a paid subscription, our payment processor, Stripe, collects your payment card details directly -- Revecta does not receive or store your full card number. Revecta receives and stores billing-related metadata from Stripe, such as subscription status, plan, and billing dates.
Usage and audit information: records of significant actions taken in the system (for example, status changes on T&M tickets and change orders, team invitations) are logged with the acting user, timestamp, and company, for your own account's audit trail.
Email delivery metadata: when Revecta sends a transactional email (such as a team invitation), delivery status and related metadata are recorded.
Support and feedback information: anything you submit through the in-app feedback form or by emailing support@revectahq.com.
Standard web server and hosting logs may record technical information such as IP address and browser information as part of normal infrastructure operation -- this is inherent to serving any web application over HTTPS. Revecta does not currently operate any separate analytics, advertising, or tracking script. Revecta uses browser local storage and IndexedDB only for functionality that is strictly necessary for the service to work -- for example, remembering your display preferences and queuing field-capture records you create while your device is offline, so they can sync once connectivity returns. Revecta does not use these mechanisms for advertising or cross-site tracking.
Revecta uses information to provide and operate the service; generate the documents and Recovery findings described in the Terms of Service; process billing and payments; send transactional communications (such as invitations and, when your Company enables them, reports); provide support; and maintain the security and integrity of the service.
Revecta uses the following third-party infrastructure providers to operate the service. Each processes information only as necessary to provide its underlying service to Revecta, not for its own independent purposes:
Each of these providers has its own privacy practices governing information it processes on Revecta's behalf; their respective privacy policies are available on their websites.
Revecta has optional AI-assisted features described in the Terms of Service. "Ask Revecta," an in-product support assistant, is active in production. No other AI-assisted feature is currently active, and no Company project, customer, or financial data is sent to any AI service by those inactive features.
Revecta uses Anthropic (the maker of Claude) as its AI provider. For Ask Revecta specifically, only the following is sent to Anthropic to generate a response: the text of your question, the page you're currently on, and -- if you're signed in -- your role and your Company's plan name. Revecta does not send full project, customer, or financial records to the AI provider for this feature. Questions and answers may be logged for a limited time to operate rate limiting and improve support-answer quality; this log is not used to train any AI model. This section will be updated before any AI feature is activated for real accounts if what is sent changes.
Revecta does not sell personal information, and does not share Company data with third parties for their own marketing or advertising purposes. As described above, information is shared only with the infrastructure and payment providers necessary to operate the service, or as described in the Legal Disclosures and Business Transfers sections below.
Revecta may disclose information where required to comply with applicable law, legal process, or a valid governmental request, or to protect the rights, property, or safety of Revecta, its users, or others.
If Revecta is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a successor policy that will be communicated to affected accounts.
Each Company's data is isolated at the database level, so another Company has no path to access your projects, pricing, or records. Within a Company, access to sensitive information such as pricing and financial data is restricted by role, enforced on the server -- not only hidden in the interface.
You determine what project, customer, and personnel information you enter into Revecta, and are responsible for having the appropriate authority and legal basis to do so, including with respect to any third-party information you upload (for example, a customer's contact details or an employee's field notes and photographs).
Revecta uses measures including HTTPS encryption in transit, database-level tenant isolation, role-based access controls, and private (non-publicly-readable) storage for uploaded photos and documents. No system is completely secure, and Revecta does not claim its systems cannot be breached. If Revecta becomes aware of a security incident affecting your data, we will notify affected account administrators as required by applicable law.
Revecta retains Company data for as long as your account remains active, or as needed to provide the service, comply with legal obligations (including billing and tax records), resolve disputes, and enforce agreements. Revecta does not currently have a fixed, published retention schedule; this section will be updated if and when one is adopted. Routine backups may retain copies of data for a limited period after it is deleted from the live system.
You can export your Company's own data at any time through the in-app export feature. Revecta does not currently offer a fully self-serve delete-my-account feature. To request access to, correction of, or deletion of your information, contact support@revectahq.com; requests will be evaluated and completed within a reasonable time, subject to the retention needs described above (for example, records Revecta must keep for tax or legal-compliance purposes).
Revecta is a business tool for construction-industry professionals and is not directed to, or intended for use by, children. Revecta does not knowingly collect personal information from children.
Depending on where you or your business are located, applicable state privacy law may provide additional rights regarding your information, such as the right to know what information is held about you or to request its deletion. Revecta primarily processes business (not consumer) information in a B2B context, which may affect which specific statutory rights apply. Requests can be directed to support@revectahq.com, and will be evaluated based on the request and applicable law. Revecta will take reasonable steps to verify a request before acting on it.
Revecta is currently operated for, and oriented toward, businesses based in the United States, and its infrastructure providers process data within the United States. Revecta does not currently have processes tailored to non-U.S. data-protection regimes (such as the EU General Data Protection Regulation); if you are located outside the United States, please contact Revecta before entering personal data of individuals in a jurisdiction with specific cross-border transfer requirements.
Revecta may update this Privacy Policy from time to time. Material changes will be noted with an updated "Last updated" date, and, where practical, communicated to account administrators.
Questions about this policy, or requests regarding your data, should be sent to support@revectahq.com.