1. Introduction
Welcome to Revenue Atlas. This privacy policy explains how we use personal information collected by getrevenueatlas.com and app.getrevenueatlas.com. Please read this privacy policy before using the site or submitting any personal information.
2. Consent
By using our site and service, you consent to this privacy policy.
3. Information We Collect
Data you provide
We collect data only when you voluntarily provide it, for instance when you:
- enter your email address at checkout (collected by Stripe to deliver a payment receipt and passed to us so that we can email you the report);
- submit a feature request through the form on our home page (email address and the message you write).
Your Stripe API key is also data you provide. It is described separately below.
Your Stripe API key
Revenue Atlas accepts Stripe API keys in two distinct contexts. How we handle the key depends on which one you use:
- One-time report (public tool on our home page): your API key is encrypted, used only to generate that single report, and permanently deleted as soon as the report is ready (or the job fails). We do not retain it, log it or reuse it.
- Connected account in your dashboard: if you create an account and connect a Stripe API key inside the dashboard, the key is encrypted at rest and stored for as long as the connection remains active, so that we can synchronize data on your behalf. You may disconnect at any time from the dashboard, which deletes the stored key.
Data offered by your browser
User-Agent string.
Your IP address
Your IP address may be transiently processed by our rate-limiting system to detect and prevent abuse. It is not stored beyond the active request window.
When an application error occurs, our error-monitoring provider, Sentry, captures technical context about the failed request — including the client IP address, user-agent and the URL that triggered the error — in order to help us diagnose and resolve issues. See section 6 for details on Sentry as a third-party processor.
Legal basis: legitimate interest in maintaining the security, stability and reliability of the service (GDPR Art. 6(1)(f)).
Transaction data
We process transaction data from your connected payment processor for the sole purpose of generating your reports.
Analytics
We use Plausible, an open-source analytics platform installed on our own servers, to understand how our website is being used. Plausible is designed to prioritize user privacy and does not store any personally identifiable information, including your IP address. It may transiently process your IP address solely to determine approximate geographic location, after which it is discarded. For details on how Plausible processes data, please refer to Plausible Analytics’ privacy policy: Plausible Analytics Privacy Policy.
We also use Rybbit, a privacy-first analytics platform, to understand how our website and application are being used. Rybbit does not use cookies and does not store IP addresses. Collected data is anonymous and includes pages visited, session duration, device type and approximate geographic location (country / region).
Additionally, Rybbit’s session replay feature may record mouse movements, clicks and scrolls to help us improve user experience. Sensitive form fields (passwords, API keys, payment data) are automatically masked. All recordings are anonymized and do not identify individual users.
4. Where Your Data Is Stored
Personal data collected by Revenue Atlas is stored on servers operated by Revenue Atlas and on servers operated by our trusted infrastructure partners. Sensitive fields are encrypted at rest while they are stored. Your data may be transferred across international borders if a server resides in a different country from you.
How we secure your data
Revenue Atlas utilizes industry-standard practices for safeguarding your private data, including encrypting your data at rest and in transit (TLS). Although we do not guarantee its security, we ensure our partners follow best practices for safeguarding your data as well. For instance, you can review our payment processor Stripe’s security procedures here: https://stripe.com/docs/security/stripe.
However, due to the nature of the Internet, we cannot guarantee that your personal information will always be secure during transmission or from unauthorized access during storage.
Despite our reasonable efforts to protect your personal information, we cannot ensure or warrant the security of any information transmitted to us.
Please contact us should you become aware or have reason to believe that there has been any unauthorized use of your personal information in connection with the service.
5. Use of Information
Website analytics
Data collected by Plausible and Rybbit (both self-hosted on our own servers — no third party has access) is used solely for:
- analyzing aggregate website traffic patterns;
- improving the functionality and usability of our service;
- compiling non-identifying statistics about usage of the service.
Technical request data
Your IP address and user-agent, as described in section 3, are used for:
- detecting and preventing fraud, abuse and intrusion attempts;
- diagnosing application errors through Sentry (see section 6).
6. Third-Party Disclosure
We do not sell, trade or otherwise transfer to outside parties your personally identifiable information, except in cases where we are required to communicate with other services in order to deliver the service. For example:
- we send API requests to Stripe using the API key you provide in order to retrieve your transaction data and generate your report;
- we use Stripe to process the one-time payment for the report;
- we use a third-party email delivery provider (Resend) to send you the report and other transactional emails;
- we use Sentry (operated by Functional Software, Inc., USA) for error monitoring. When an error occurs in our application, technical context about the request — including your IP address, user-agent and the URL visited — is sent to Sentry and stored according to Sentry’s standard retention policy (typically 30 days for error events). Transfers to the United States are made under the EU-U.S. Data Privacy Framework, to which Sentry is certified.
7. Your Rights
Subject to the conditions and limitations set out in applicable data protection law (in particular the EU General Data Protection Regulation, where applicable to you), you have the following rights in relation to your personal data:
- Right of access — to obtain confirmation of whether we process data about you and to receive a copy of that data (GDPR Art. 15);
- Right to rectification — to have inaccurate data corrected (GDPR Art. 16);
- Right to erasure — to have your data deleted, where the applicable legal grounds apply (GDPR Art. 17);
- Right to restriction — to limit how we process your data in certain circumstances (GDPR Art. 18);
- Right to data portability — to receive your data in a structured, machine-readable format (GDPR Art. 20);
- Right to object — to object to processing based on our legitimate interests (GDPR Art. 21);
- Right to lodge a complaint with your national supervisory authority (GDPR Art. 77).
To exercise these rights, please contact us at [email protected]. To help us locate the data that relates to you, please include, where applicable, the email address you used at checkout.
Important limitation. Some of the data we process is not linked to any identifier that would allow us to associate it with you individually. This applies in particular to our self-hosted website analytics (Plausible and Rybbit), which use rotating anonymous identifiers and do not store your IP address. For such data, we are not in a position to identify you, and the rights of access, rectification, erasure, restriction and portability cannot technically be exercised. This is consistent with Article 11(2) GDPR, which provides that those rights do not apply where the controller is not able to identify the data subject, unless you provide us with additional information that enables identification.
8. International Data Transfer
Revenue Atlas may transfer user data across international borders if our servers or trusted partners reside in a different country from you. By using the service, you consent to such transfers.
9. Changes to Our Privacy Policy
We reserve the right to make changes to this privacy policy at any time. All updates will be posted on this page, and the “Last Updated” date above will be revised accordingly.
10. Contact Information
If you have any questions or concerns about our privacy policy, please contact us at [email protected].