Privacy Policy

Last Updated: June 20, 2026

This Privacy Policy ("Policy") describes how RevenueLoom ("we," "us," or "our") collects, uses, discloses, and protects information in connection with your use of the RevenueLoom website (https://revenueloom.ai), the RevenueLoom platform, and related services (collectively, the "Services"). In this Policy, "Personal Information" means any information relating to an identified or identifiable individual.

By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the Services.

1. Personal Information We Collect

Information You Provide Directly

• Contact and Account Information: Name, email address, company name, job title, phone number, and other details you provide when submitting a contact form, requesting a demo, or when your organization is onboarded to the platform.
• Payment Information: If you subscribe to a paid plan, we collect billing information (including credit card details) through our third-party payment processor. We do not store complete payment card numbers.
• Communications: When you contact us via email, support, or other channels, we collect your contact details and the content of your messages.

Information from Connected Services

• CRM and Integration Data: When you authorize connections to third-party services (such as Salesforce, HubSpot, Snowflake, BigQuery, or Stripe), we may access and process data from those services as necessary to provide our platform capabilities. This data may include account information, contact details, opportunity data, and other business data accessible through those services' APIs.
• Customer Revenue Data: Transaction records, subscription metrics, churn indicators, and other business data necessary to generate revenue intelligence insights.

Information Collected Automatically

• Usage and Log Data: IP address, browser type and version, operating system, device identifiers, pages visited, features used, time and date of access, and referring URLs.
• Cookies and Tracking Technologies: We use cookies and similar technologies as described in Section 8 of this Policy.

Information from Third Parties

• We may receive information about you or your company from third-party sources, such as business data providers and publicly available sources, to supplement contact information and improve our ability to provide the Services.

2. How We Use Personal Information

Providing and Operating the Services

• Creating and managing accounts
• Processing transactions and sending related notices
• Onboarding your organization and configuring your dedicated environment
• Generating revenue predictions, churn analysis, conversion scoring, and recommended next-best actions
• Enabling integrations with Connected Services
• Providing customer support and responding to inquiries

Improving and Developing the Services

• Analyzing usage trends and patterns to improve functionality
• Developing new features and services
• Conducting internal research and analytics using de-identified and aggregated data

Communications

• Sending service-related communications, account notifications, and security alerts
• Sending marketing communications about products, features, and events (you can opt out at any time)

Safety, Security, and Compliance

• Detecting, preventing, and addressing fraud, abuse, and security incidents
• Enforcing our Terms of Service and other agreements
• Complying with legal obligations, legal process, and government requests

3. How We Share Personal Information

We do not sell Personal Information. We share Personal Information only in the following circumstances:

• Service Providers: We share Personal Information with third-party service providers who perform services on our behalf, such as cloud hosting (AWS), payment processing, analytics, email delivery, and customer support. These providers are contractually obligated to use Personal Information only as necessary to provide their services to us.
• Connected Service Providers: When you authorize integrations, information is shared with Connected Services as necessary to enable the integration, subject to those services' own privacy policies.
• Legal and Safety: We may disclose Personal Information if we reasonably believe disclosure is necessary to: (i) comply with applicable law, regulation, or legal process; (ii) protect the rights, property, or safety of RevenueLoom, our customers, or others; (iii) detect, prevent, or address fraud or security issues; or (iv) enforce our agreements.
• Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, Personal Information may be transferred as part of such transaction. We will notify you of any such change in ownership.
• With Your Consent: We may share Personal Information with third parties when you have provided your consent.

De-Identified and Aggregated Data: We may disclose de-identified and aggregated data that cannot reasonably be used to identify any individual without restriction.

4. Data Security

We maintain commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Information from unauthorized access, disclosure, alteration, and destruction. These include:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• SOC 2 Type II certification
• GDPR-compliant data processing
• ISO 27001-aligned security practices
• Continuous security monitoring and incident response procedures

No system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials. In the event of a data breach that affects your Personal Information, we will notify affected individuals in accordance with applicable law.

5. Data Retention

• Account Information: Retained for the duration of your Account and for a reasonable period thereafter for legal, tax, and audit purposes.
• Customer Data: Retained while your Account is active. Upon Account deletion, Customer Data is deleted within thirty (30) days, except that backup copies may persist for up to ninety (90) days before permanent deletion.
• Usage and Log Data: Retained for twelve (12) months for analytics and security purposes.
• De-Identified and Aggregated Data: May be retained indefinitely, as it cannot be associated with any individual.

6. Your Rights and Choices

Depending on your location and applicable law, you may have some or all of the following rights:

• Access and Portability: Request confirmation of whether we process your Personal Information, obtain a copy, or receive it in a portable format.
• Correction: Request correction of inaccurate or incomplete Personal Information.
• Deletion: Request deletion of your Personal Information, subject to certain legal exceptions.
• Restriction and Objection: Request that we restrict processing, or object to certain types of processing based on legitimate interests.
• Marketing Opt-Out: Unsubscribe from marketing emails using the link provided in each email. You will continue to receive transactional and service-related communications.
• Global Privacy Control: We honor Opt-Out Preference Signals, including GPC signals, where applicable.

You will not be discriminated against for exercising your rights. To exercise any of these rights, contact us at privacy@revenueloom.ai. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

7. International Data Transfers

The Services are hosted in the United States. If you are located outside the United States, your Personal Information may be transferred to and processed in the United States or other countries where RevenueLoom or its service providers operate. These jurisdictions may have different data protection laws than your own.

Where required by applicable law, we implement appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs) adopted by the European Commission. For more information about the safeguards we use, please contact us at privacy@revenueloom.ai.

8. Cookies and Tracking Technologies

We use cookies and similar technologies (including pixel tags, local storage, and web beacons) to operate the Services, remember your preferences, understand usage, and support analytics.

• Essential Cookies: Required for the Services to function, including authentication, security, and access control.
• Analytics Cookies: Help us understand how the Services are used so we can improve them.
• Functional Cookies: Enable enhanced features and personalization, such as remembering your settings.

Most browsers allow you to manage cookie preferences through browser settings. Please note that disabling certain cookies may affect the functionality of the Services.

Do Not Track:We do not currently respond to "Do Not Track" signals from web browsers, but we do honor Global Privacy Control (GPC) signals where applicable.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what categories and specific pieces of Personal Information we have collected about you, the sources, the business or commercial purposes, and the categories of third parties with whom we share it.
• Right to Delete: The right to request deletion of your Personal Information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate Personal Information.
• Right to Opt-Out of Sale/Sharing: RevenueLoom does not sell Personal Information for monetary consideration. We do not "share" Personal Information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination: The right not to be discriminated against for exercising your privacy rights.
• Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes that would require an opt-out right under CCPA/CPRA.

Categories of Personal Information Collected (Past 12 Months): Identifiers (name, email, IP address); commercial information (purchase history, transaction data); internet or electronic network activity information; professional or employment-related information; and inferences drawn from the above.

To exercise your California privacy rights, contact us at privacy@revenueloom.ai.

10. Other U.S. State Privacy Rights

Residents of certain U.S. states (including Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) may have additional privacy rights under their applicable state laws. These rights may include:

• Right to know whether we are processing your Personal Information
• Right to access and obtain a copy of your Personal Information
• Right to correct inaccuracies in your Personal Information
• Right to request deletion of your Personal Information
• Right to opt out of targeted advertising or profiling
• Right to non-discrimination for exercising your rights

To exercise any of these rights, please contact us at privacy@revenueloom.ai. We will respond within the timeframes required by your state's applicable law.

11. European Privacy Rights (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland:

• Data Controller: RevenueLoom is the data controller for Personal Information processed in connection with the Services.
• Legal Bases: We process Personal Information under the following legal bases: Contract (performing our obligations to you), Legitimate Interests (improving Services, security, analytics, fraud prevention), Consent (marketing communications), and Legal Obligation (compliance with law).
• Supervisory Authority: If you believe our processing of your Personal Information violates applicable law, you have the right to lodge a complaint with your local supervisory authority.

12. Children's Privacy

The Services are not directed to children under the age of 18. We do not knowingly collect Personal Information from children. If we become aware that we have collected Personal Information from a child under 18, we will take steps to delete such information and terminate the associated Account. If you believe a child has provided us with Personal Information, please contact us at privacy@revenueloom.ai.

13. Third-Party Services

The Services may contain links to or integrate with third-party websites and services. Any information you provide to third-party services is subject to their own privacy policies. We encourage you to review the privacy policies of any third-party services before providing them with information. We are not responsible for the privacy practices of third parties.

14. Changes to This Privacy Policy

We may update this Policy from time to time. For material changes, we will notify you by posting the updated policy on our website and, where required, by email or through the Services. The "Last Updated" date at the top indicates when it was most recently revised. Your continued use of the Services after any changes take effect constitutes your acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@revenueloom.ai
Website: https://revenueloom.ai/privacy

Please allow a reasonable time for us to respond to your inquiry. We will respond to verifiable data subject requests within the timeframes required by applicable law.