Privacy Policy

Effective date: July 2, 2026 · Last updated: July 2, 2026

    RevEcho is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we use and protect it.
  

1. Who We Are

RevEcho ("we," "us," "our") operates the review management platform available at www.getrevecho.com. For privacy-related inquiries, contact us at hello@getrevecho.com.

2. Data We Collect

Data Type	Examples	Source
Account data	Name, email, business name, phone number	You, at registration
Payment data	Billing address, payment method (tokenized)	Paddle (our payment processor)
Customer contact data	Your customers' phone numbers, WhatsApp IDs	You, when uploading contacts
Message data	WhatsApp message content, timestamps, delivery status	WhatsApp Business API
Review data	Ratings, feedback text, platform routing outcomes	Your customers, via the platform
Usage data	Log data, IP address, browser type, pages visited	Automatically collected

3. How We Use Your Data

To provide, operate, and improve the RevEcho service
To send WhatsApp messages on behalf of your business to your customers
To route customer feedback to the appropriate platform or inbox
To process payments and manage subscriptions via Paddle
To send you transactional and product-related communications
To comply with legal obligations
To detect fraud, abuse, or violations of our Terms of Service

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contract performance – to deliver the service you subscribed to
Legitimate interests – to improve our platform and prevent misuse
Legal obligation – to comply with applicable laws
Consent – where explicitly obtained (e.g., marketing emails)

5. Your Customers' Data

You are the data controller for your customers' personal data uploaded to RevEcho. RevEcho acts as a data processor on your behalf. You are responsible for:

Obtaining valid consent from your customers before contacting them via WhatsApp
Complying with local data protection laws (GDPR, CCPA, Israeli Privacy Protection Law, etc.)
Responding to your customers' data requests

We process this data only as instructed by you and in accordance with our Data Processing Agreement (DPA), available on request.

6. Data Sharing

We do not sell your data. We share data only with trusted third parties necessary to operate the Service:

Paddle – payment processing and tax compliance
Meta / WhatsApp Business API – message delivery
Google, Booking.com, Trustpilot – review platform routing (via links, no data transfer)
Cloud infrastructure providers – hosting, storage, and security
Analytics tools – aggregated, anonymized usage analysis

All third-party processors are bound by data processing agreements and applicable privacy laws.

7. Data Retention

We retain your account data for as long as your account is active, plus 90 days after cancellation to allow for reactivation. After that, data is permanently deleted. Message logs are retained for up to 12 months. You may request earlier deletion at any time.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Request a portable copy of your data
Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, email hello@getrevecho.com. We will respond within 30 days.

9. Cookies

We use essential cookies to operate the Service and optional analytics cookies to understand usage patterns. You can manage your cookie preferences in your browser settings or through our cookie banner on first visit.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No method of transmission is 100% secure; we cannot guarantee absolute security but take all reasonable steps to protect your data.

11. International Transfers

RevEcho is based in Israel, which the European Commission has recognized as providing adequate data protection. Where we transfer data outside Israel or the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

12. Children

RevEcho is a B2B service and is not directed at individuals under the age of 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 14 days before they take effect.

14. Contact

For any privacy-related questions or requests:
hello@getrevecho.com
RevEcho · www.getrevecho.com