January 2025

Privacy policy

Introduction

This Privacy Policy outlines how Reviy ("we", "us", "our"), as the Data Controller, collects, uses, discloses, and protects your personal information when you interact with our web application. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

This policy also details the role of PostHog, Inc. ("PostHog") as our Data Processor for certain analytics and functionality enhancement purposes.

Data controller and data processor

  • Data controller: Reviy (matteo.beltrame@reviy.app)

    Responsible for determining the purposes and means of processing your personal data.

  • Data processors:

    Processes personal data on behalf of Depthlog for specific purposes (analytics, backend), based on our instructions.

Information we collect

We collect information to provide and improve our service. The legal basis for processing depends on the specific context:

PostHog analytics & enhancement

We use PostHog to collect data about how you interact with our application. This processing relies on different legal bases depending on the cookie/data category:

  • Device Information: (e.g., device type, operating system, browser type)
  • Usage Data: (e.g., features used, pages visited, interaction patterns, session duration, anonymous click tracking via $autocapture, anonymous session recordings)

Legal basis:

  • For strictly necessary technical data required for PostHog to function minimally: Legitimate Interest.
  • For Performance & Analytics cookies/data: Your explicit Consent obtained via our cookie banner.
  • For Functional Enhancement & Personalization cookies/data (e.g., session recordings): Your explicit Consent obtained via our cookie banner.

How we use your information

We use your information based on the legal bases outlined above for the following purposes:

  • To provide and improve our application: delivering features, fixing bugs, enhancing usability.
  • To analyze user behavior and trends: understanding how the application is used via analytics to improve features and performance.
  • To personalize your experience: using data (potentially including insights from PostHog features like A/B testing, if implemented) to tailor the service.
  • To comply with legal requirements: fulfilling legal or regulatory duties.

Sharing your information

We only share your information under specific circumstances:

  • Service providers (Data processors)
    • Firebase: used for backend services and data storage. See their policy at Firebase Privacy and Security.
    • PostHog, Inc.: used for analytics and application usage insights as described above. They process data based on our instructions.
    • Google: for authentication purposes if you use Google sign-in.
  • Search engines: for indexing public users data, based on your consent.
  • Law Enforcement or Regulatory Authorities: if required by law or to protect rights, property, or safety (Basis: Legal Obligation).
We do not sell your personal information.

Cookies and Similar Technologies

What are cookies?

Cookies are small text files stored on your device. We also use similar technologies like localStorage which might be employed by services like PostHog. These help our website function and provide insights.

Cookies & technologies we use

We categorize the cookies and technologies used as follows:

Performance & analytics

  • Purpose: help us understand how visitors use our website by collecting anonymous data about:
    • Pages visited
    • Time spent on site
    • Navigation paths
    • Anonymous clicks tracking
    • Device/Browser information
    • Geographic location (approximate)
    • Duration: up to 12 months
  • Provider: PostHog, Inc.
  • Legal basis: your explicit Consent.

Functional enhancement & personalization

  • Purpose: Allow us to improve usability and potentially tailor your experience using PostHog features like:
    • Anonymous session recordings: to understand user interaction patterns and identify usability issues.
    • A/B Testing/Feature Flags: to test new features or personalize content.
  • Provider: PostHog, Inc.
  • Legal basis: your explicit Consent.

Your choices regarding cookies

  • You can accept or decline cookies/technologies via our cookie banner when you first visit, or change your preferences anytime through the link in the footline of the website.
  • You can also control cookies through your browser settings (blocking, deleting), though this may affect site functionality.

Data security

We implement technical and organizational security measures reasonably designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. This includes using secure services like Firebase for data storage and PostHog for analytics processing

However, no method of transmission over the internet or electronic storage is 100% secure.

Data processed by PostHog on our behalf is stored within the European Economic Area (EEA).

Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account activity, and as required for legal, accounting, or reporting requirements.

  • Analytics data collected via PostHog is typically retained according to PostHog's configuration for up to 12 months or until you withdraw consent.
  • Account information and logs are retained until you delete your account or request erasure, subject to legal obligations.

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

We encourage you to review this policy periodically.

Contact us

If you have any questions about this Privacy Policy or our practices, please write at