Reva Privacy Policy

About this policy

This Privacy Policy applies to the Reva website, Reva accounts, onboarding, customer support, Meta and WhatsApp integrations, and information processed through the Reva product. It applies specifically to Reva and does not automatically apply to every other product or service that Ritava Labs LLC may develop or operate.

A signed customer agreement, pilot agreement, subscription agreement, order form, or data-processing agreement may provide additional terms. When another agreement applies, it should be read together with this policy.

1. Information provided by customers and users

Reva may process names, business email addresses, phone numbers, company names, user roles, login and authentication information, support requests, onboarding information, configuration choices, and files or records uploaded by authorized users.

Customers may also import contact and relationship records or provide other business information that they are authorized to use with Reva. The customer decides which eligible records, sources, and users to connect.

2. Customer conversations and communication data

Reva may process information from business communications that an authorized customer connects or provides. Depending on the features enabled, this may include WhatsApp Business messages, sender and recipient identifiers, customer phone numbers, timestamps, delivery status, media, attachments, voice notes, call metadata, call recordings where enabled and lawfully collected, call transcripts, user-created call summaries, internal notes, and collaboration threads.

Reva does not gain access to business communications merely because someone visits the website. Reva does not automatically access private personal Facebook messages. Access is limited to authorized business assets, integrations, permissions, and information supplied by the customer.

Customers are responsible for having the rights, notices, consents, and other authority required to collect, record, connect, and provide their communications and recordings.

3. Meta and WhatsApp platform data

Reva may connect to Meta and WhatsApp business services after an authorized business user grants the relevant permissions and completes the required setup. Information processed may include business-account identifiers, WhatsApp Business Account identifiers, phone-number identifiers, authorized message content and metadata, webhook events, integration configuration, and delivery information.

Ritava Labs LLC uses this information to provide and support the functionality requested by the customer. Meta Platform data is handled subject to applicable Meta terms and developer policies.

Removing an integration may stop future access through that integration, but it may not automatically erase information already retained for legitimate contractual, legal, security, backup, or record-keeping purposes. Deletion requests should follow the Reva Data Deletion Instructions.

4. Usage and technical information

Reva may collect or generate technical information such as IP address, device and browser information, login times, pages and product features used, referring URLs, error logs, security logs, integration status, and performance or diagnostics information.

Reva may use cookies or similar technologies where needed for authentication, security, preferences, or other product functions. The technologies used may change as the service develops. This policy does not claim that a particular analytics or advertising provider is used unless that provider is actually configured for Reva.

5. How Reva uses information

Ritava Labs LLC may use information to:

• Provide, operate, and maintain Reva.
• Authenticate users and maintain authorized integrations.
• Organize conversations, calls, relationship records, and internal collaboration.
• Generate search results, summaries, analysis, and source-backed answers.
• Provide onboarding, customer support, and service notices.
• Improve reliability, usability, and product performance.
• Detect security issues, abuse, fraud, or errors.
• Enforce customer agreements and protect legal rights.
• Comply with law and protect customers, users, Ritava Labs LLC, and third parties.

Ritava Labs LLC does not sell Reva customer-message content and does not use connected WhatsApp content for third-party advertising. Model and infrastructure providers may process information as needed to provide their services, subject to applicable agreements, controls, and their own legally applicable obligations.

6. AI processing

Reva may use AI systems to summarize authorized communications, extract or organize business context, find relevant records, generate suggested answers or analysis, and identify possible follow-ups, conflicts, or patterns.

AI output can be incomplete, inaccurate, or outdated. Authorized users should review important conclusions and source information before acting. Reva is not a substitute for professional legal, financial, tax, employment, or compliance advice.

Service providers may process information as needed to provide model and infrastructure services, subject to applicable agreements and controls. Customers should review any additional data-processing terms that apply to their account.

7. Customer and processor roles

A business customer generally decides what customer and communication data it connects to Reva. Ritava Labs LLC generally processes that information to provide Reva on the customer's behalf. The customer remains responsible for lawful collection, required notices and consent, recording rules, employee access, and communication with its own customers.

Ritava Labs LLC may independently determine how to handle limited account, billing, security, support, website, and compliance information. Legal classifications vary by jurisdiction and context, so these descriptions do not determine every party's formal role under every law.

8. How information is shared

Ritava Labs LLC may share information only as reasonably necessary with:

• Hosting and cloud infrastructure providers.
• Database and storage providers.
• AI and software-service providers.
• Communications and integration providers.
• Security and error-monitoring vendors.
• Payment providers.
• Professional advisers.
• Government or legal authorities when required.
• A successor involved in a merger, financing, restructuring, acquisition, or asset transaction.

Providers receive information only as reasonably necessary for their role and subject to applicable agreements, confidentiality duties, or platform restrictions.

9. Data retention

Information is retained for as long as reasonably necessary to provide Reva, satisfy customer agreements, maintain security and business records, comply with law, resolve disputes, and enforce rights. Retention may depend on customer settings, contract terms, integration status, the type of record, and legal obligations.

Deleted or disconnected information may remain temporarily in backups, logs, fraud-prevention systems, tax records, accounting records, or disaster-recovery systems. Restricted information kept for these purposes is not returned to ordinary product use unless needed for recovery, security, or a legal obligation.

10. Data security

Ritava Labs LLC uses reasonable safeguards appropriate to the service, which may include access controls, authentication, encryption in transit where supported, restricted access, logging and monitoring, secret-management practices, and vendor security controls.

No system is completely secure, and Ritava Labs LLC cannot guarantee absolute security. Customers and users should protect credentials, restrict account access, and report suspected unauthorized activity promptly.

11. International processing

Information may be processed in the United States and other countries where service providers operate. Where required, Ritava Labs LLC uses applicable legal and contractual protections for those transfers.

12. Customer controls and choices

• Authorized administrators may manage user access.
• Customers may disconnect integrations.
• Customers may request export, correction, or deletion where available and applicable.
• Individuals may need to contact the relevant business customer first when that business controls the relevant customer record.
• Direct requests to Ritava Labs LLC may be submitted through the data-deletion page or by email at support@ritavalabs.com.

Operational and service emails may still be sent when necessary to administer an account, maintain security, or provide requested functionality.

13. California privacy information

Ritava Labs LLC does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are commonly understood under California privacy law.

California residents may have rights depending on the applicable law and the nature of their relationship with Reva or a Reva customer. Requests may be directed to support@ritavalabs.com. This section does not state that every California privacy statute necessarily applies to Ritava Labs LLC or every Reva interaction.

14. Children

Reva is intended for businesses and authorized adult users. It is not directed to children under 13, and Ritava Labs LLC does not knowingly offer Reva accounts to children under 13.

15. Third-party services

Meta, WhatsApp, Google, and other connected services have their own terms and privacy practices. Ritava Labs LLC does not control those services and encourages customers and users to review the terms that apply to the accounts and integrations they choose to use.

16. Changes to this policy

Ritava Labs LLC may update this Privacy Policy as Reva, applicable law, or business practices change. The revised policy will be posted on this page with an updated date. Material changes may also be communicated through the service or by another reasonable method.

17. Contact

Questions, privacy requests, and concerns about this policy may be directed to: