Privacy Policy

1. Introduction

RevoFi, LLC ("RevoFi," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Raven AI platform and related services (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Authentication credentials (managed via AWS Cognito)
• Account preferences and settings

2.2 Device Telemetry

For users participating in the RevoFi device network, we collect:

• Device identifiers and hardware specifications
• Network connectivity status and performance metrics
• Compute resource utilization (CPU, GPU, memory)
• Geographic location (city-level, for network optimization)

2.3 AI Session Data

When you interact with Raven AI agents, we collect:

• Conversation transcripts and prompts
• Generated responses and outputs
• Session metadata (timestamps, duration, agent used)
• User feedback and ratings

2.4 Usage Data

We automatically collect:

• Browser type and version
• Operating system
• Pages visited and features used
• Time and date of access
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate users and manage access
• Improve AI agent performance and accuracy
• Process compute jobs and manage device networks
• Communicate with you about updates, security alerts, and support
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Data Processing and Storage

4.1 AWS Cognito

User authentication is handled by Amazon Web Services (AWS) Cognito. AWS acts as a data processor on our behalf and is subject to AWS's security and compliance standards. AWS Cognito is SOC 2 Type II certified and complies with GDPR, HIPAA, and other regulatory frameworks.

4.2 Data Location

Your data is primarily stored in AWS data centers located in the United States. Some data may be processed at edge locations within the RevoFi device network for performance optimization.

4.3 Team Member vs. Customer Data

RevoFi distinguishes between:

• Team Members: RevoFi employees and contractors with administrative access. Team member data is subject to additional security controls and access logging.
• Customers: End users of the Raven platform. Customer data is isolated and accessible only to authorized personnel for support purposes.

5. Data Sharing

We do not sell your personal information to third parties.

We may share your information with:

• Service Providers: Third-party vendors who assist in operating the Service (e.g., AWS, analytics providers)
• Legal Requirements: When required by law, subpoena, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

6. Data Retention

We retain your information as follows:

• AI Session Data: 90 days from creation, unless you request earlier deletion
• Account Data: For the duration of your active account, plus 30 days after account closure
• Device Telemetry: 12 months for performance analytics
• Usage Logs: 12 months for security and audit purposes

7. Your Rights

7.1 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

7.2 GDPR Rights (European Residents)

If you are a resident of the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability (receive your data in a structured format)
• Object to processing based on legitimate interests
• Withdraw consent at any time

7.3 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Multi-factor authentication for administrative access
• Regular security audits and penetration testing
• Access controls and logging

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: