Privacy Policy
Last updated: March 2026
1. Controller
The controller of personal data processed within the Revagent platform is the entity operating the service, indicated on the site or documentation. For privacy questions, use the provided contact channel.
2. Data We Collect
- Account and authentication data: email, name, and identifiers provided upon registration or via identity provider (e.g., Clerk).
- Usage data: platform usage (pipelines, executions, usage metrics), IP address, browser type, and access logs necessary for operation and security.
- Data you enter: secrets and API keys are stored encrypted (AES-256-GCM) and are not used for purposes other than executing the service you configure.
3. Purpose of Processing
We use data to: provide and improve the Service; comply with legal and contractual obligations; ensure security (including abuse detection and policy compliance); and, when applicable and with a legal basis, send product communications. We do not sell your personal data.
4. Retention
We keep data for the time necessary for the described purposes or required by law. Account data and logs may be retained for periods defined internally for support, audit, and security. After account closure, data may be anonymized or deleted according to our retention policy.
5. Security
We adopt technical and organizational measures to protect data, including secrets encryption (AES-256-GCM), access control, security headers (CSP, HSTS when applicable), and secure development practices. Access to personal data is restricted and logged when relevant.
6. Sharing
We may share data with: (a) authentication (e.g., Clerk) and payment (e.g., Stripe) providers, as necessary to operate the Service; (b) cloud infrastructure and operations tools; (c) authorities when required by law. Contracts with processors include confidentiality and security obligations compatible with this policy.
7. International Transfer
If data is processed outside your country, we will ensure adequate safeguards (standard contractual clauses or recognized mechanisms) when required by applicable law.
8. Your Rights
According to applicable law (including LGPD and GDPR), you may have the right to: access, correction, deletion, portability, restriction of processing, and objection. To exercise these rights, contact us through the indicated channel. You may also lodge a complaint with the competent data protection authority.
10. Changes
We may update this Privacy Policy. Relevant changes will be communicated via email or notice on the Service. The "Last updated" date indicates the effective date of the current version.
11. Contact
For privacy questions or to exercise your rights: use the contact channel indicated on the site or in the Revagent documentation.