Effective date: July 24, 2026 Last updated: July 24, 2026
This Privacy Policy explains how REVOPUSH LTD ("Revopush", "we", "us", or "our") collects and uses personal data when you visit revopush.org, create or use a Revopush account, communicate with us, or otherwise interact with our cloud services, software, documentation, and support (collectively, the "Services").
REVOPUSH LTD is a private limited company registered in England and Wales under company number 16237196, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Revopush acts as a controller when we decide why and how personal data is used for our website, customer accounts, billing, sales, support, security, and business operations.
When a business customer uses Revopush to distribute over-the-air updates and Revopush processes personal data contained in customer-provided content or technical request metadata on that customer's behalf, the customer is the controller and Revopush acts as its processor. That processing is governed by our Data Processing Agreement and the customer's instructions. If you are an end user of a customer's application, requests about that customer's processing should normally be directed to the application provider.
This Policy does not apply to third-party websites, services, or applications that have their own privacy practices.
The data we collect depends on how you interact with the Services.
| Category | Examples | Source |
|---|---|---|
| Account and identity data | Name, business email address, company name, account identifiers, role, and information received from a selected Google, Microsoft, or GitHub sign-in provider | You, your employer, or the selected identity provider |
| Customer configuration data | Application names, deployment and release identifiers, service settings, API-key identifiers, and team membership | You and authorised users |
| Billing and transaction data | Billing contact, billing address, plan, invoice and payment status, and limited payment-method metadata | You and Stripe; full payment card details are submitted directly to Stripe |
| Service and technical data | IP address, browser or device information, operating system, app and SDK version, request timestamps, deployment or release identifier, OTA request and delivery logs, diagnostic data, and security events | Collected automatically when the Services are used |
| Customer content | JavaScript bundles, source maps or related assets, support attachments, and other content a customer chooses to upload | Customers and authorised users |
| Communications data | Support requests, demo enquiries, feedback, survey responses, and other messages | You |
| Website and preference data | Pages viewed, referral information, consent choices, and analytics or advertising data where optional tracking has been accepted | Your browser or device |
Please do not provide special-category data, health information, payment card data, government identifiers, or other highly sensitive personal data through the Services unless Revopush has expressly agreed in writing to process it.
| Purpose | Data commonly used | Lawful basis where UK or EU data protection law applies |
|---|---|---|
| Create and administer business accounts | Account, identity, and customer configuration data | Performance of a contract; legitimate interests in operating a business service |
| Provide OTA update delivery and related features | Customer configuration, customer content, service and technical data | Performance of a contract; for Customer Personal Data, processing on the controller's instructions |
| Process subscriptions and keep financial records | Account, billing, and transaction data | Performance of a contract; compliance with legal obligations |
| Secure, monitor, troubleshoot, and improve the Services | Service, technical, diagnostic, and security data | Legitimate interests in maintaining secure and reliable Services |
| Respond to support, sales, and other communications | Account and communications data | Performance of a contract; legitimate interests in responding to business enquiries |
| Send product or marketing communications | Account, communications, and preference data | Consent where required; otherwise legitimate interests in measured business-to-business marketing |
| Measure website performance and advertising | Website, device, referral, and preference data | Consent for optional cookies, tags, and similar technologies |
| Establish, exercise, or defend legal claims and prevent misuse | Relevant account, transaction, content, communications, and security data | Legitimate interests; compliance with legal obligations |
Where we rely on legitimate interests, we consider whether the processing is necessary and whether your rights and interests override those interests. You may object to processing based on legitimate interests as described below.
We use CookieYes to manage cookie consent choices. Google and LinkedIn advertising or measurement technologies are optional and are controlled through the CookieYes consent settings.
You can change or withdraw your choice using the CookieYes consent controls. See our Cookie Policy for more information.
We disclose personal data only where reasonably necessary for the purposes described in this Policy, including to:
Our current providers that may process Customer Personal Data on our behalf are listed on the Subprocessors page.
Revopush does not sell personal data for money. We do not use Customer Personal Data for independent advertising or sell it to third parties.
Revopush is established in the United Kingdom and uses service providers that may process data in the United Kingdom, European Economic Area, United States, or other countries where they operate.
Where applicable law restricts an international transfer, we use a recognised transfer mechanism, such as an adequacy regulation or decision, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another legally permitted safeguard. You may contact us for information about the safeguard relevant to your data.
We retain personal data only for as long as reasonably necessary for the relevant purpose. The criteria we apply include:
| Category | Retention criteria |
|---|---|
| Account and customer records | While the account or contract is active and afterwards for a reasonable period needed for account closure, dispute resolution, and legal compliance |
| Billing and transaction records | For the period required by tax, accounting, anti-fraud, and other applicable laws |
| Support and business communications | For as long as needed to respond, maintain an appropriate business record, and resolve disputes |
| Service, security, and diagnostic logs | For a limited period appropriate to security, troubleshooting, abuse prevention, and service operation |
| Customer Personal Data | In accordance with the customer agreement and DPA, including deletion or return at the end of the Services, subject to legal requirements and normal backup expiry cycles |
| Consent records | For as long as needed to demonstrate and respect the recorded choice; the website asks for a renewed choice after the consent cookie expires |
When data is no longer required, we delete or anonymise it, or securely isolate it until deletion is possible.
We maintain administrative, technical, and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. No system is completely secure, and this Policy does not guarantee absolute security.
For an overview of our practices, see the Revopush Security Statement.
Depending on applicable law and the circumstances, you may have the right to:
You have an unconditional right to object to the use of your personal data for direct marketing.
To exercise a right, email [email protected]. We may request information reasonably necessary to verify your identity and authority. Some rights are subject to exemptions and may not apply in every situation.
If Revopush processes your data only as a processor for a customer, we may direct your request to that customer and assist it as required by our DPA.
You may complain to the UK Information Commissioner's Office or another competent supervisory authority. We would appreciate the opportunity to address your concern first.
You can unsubscribe from marketing emails using the link in the message or by contacting us. We may still send non-marketing service communications, such as security, billing, or account notices.
The Services are business services and are not directed to children. Revopush does not knowingly collect personal data directly from anyone under 18 through account registration. Customers are responsible for determining whether their applications are directed to children and for meeting any additional legal requirements before instructing Revopush to process children's data.
Revopush does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
We may update this Policy to reflect changes to the Services, our practices, or applicable law. We will post the updated version here, change the "Last updated" date, and provide additional notice where required.
For privacy questions or requests, contact:
REVOPUSH LTD Company number 16237196 71-75 Shelton Street, Covent Garden London, WC2H 9JQ United Kingdom [email protected]