Skip to content

Legal

Privacy notice

Last updated 25 September 2026

This document is a working draft published for transparency about how the product is built. It has not completed legal review and is not a contract. The executed agreement for your account is the one you sign.

What this covers

This notice describes how Revactio handles data in the course of running a revenue engagement platform. It covers the marketing website you are reading and the product at https://app.revactio.com.

The marketing website sets no analytics or advertising cookies, runs no third-party tags and holds no account data. It is static content served from a CDN.

Two different roles

For the prospects and customers your motions engage, you are the controller and we are the processor. We process their data on your behalf, under the audiences, policies and authority you configure.

For the salespeople and administrators on your team who hold a login, we are the controller of their account data.

If somebody your agent contacted asks what is held about them, that request goes to you. We cannot disclose it to them on your behalf.

What the product processes

Commercial activity: motions, opportunities, next actions, qualification answers, stages, objections and outcomes.

Engagement: emails sent and received on the threads in scope, call audio and transcripts, meetings and the notes captured from them.

Context read from systems you connect: customer records, website behaviour, acquisition source, approved content, invoices and payment status, service case status, roles and approval authority, and consent states.

Account data about your own team: names, roles, logins and what each person did.

Call recordings and transcripts

Where you enable recording, audio and transcripts are stored under the retention period you set. They are treated as customer-confidential and are excluded from model training entirely.

Recording notice requirements differ by country. The platform plays the notice you configure; determining what is required in each market you call is your responsibility.

What it does not do

It does not use your conversations, transcripts, customer records or commercial data to train models made available outside your account. That is a contractual commitment, not a preference, and it binds our providers.

It does not share data between customer accounts. Cross-organisation reads are not a permission anybody can be granted, including us.

It does not monitor your team. No view ranks people by emails sent, calls made or activity volume, and no such report exists to be enabled. Agents read roles and approval authority — never salary, performance or assessment data.

It does not score the people you contact in ways you cannot inspect. Priority is stated as evidence, and there is no hidden rating of an individual.

It does not contact anybody whose consent state does not permit the channel, and there is no configuration that makes it.

It does not make you compliant with anything. No configuration of any software does that.

Content from outside is data, not instruction

Replies, attachments and event payloads are treated as data. An instruction inside a prospect's email cannot change what an agent may offer, who it may contact or what policy applies to it.

This is stated here as well as in the security documentation because it is a processing commitment rather than only a technical one.

Consent

Consent states are read from your consent system at the point of use, per contact and per channel. Nothing is cached here and no consent is recorded here.

An absent or unreadable state is treated as a refusal. Failing open is not a configuration option, and a withdrawal takes effect at the next read rather than on a schedule.

Retention and deletion

Retention is set per category, because the obligations genuinely differ between engagement records, call recordings, transcripts, commercial activity and attribution records.

Call recordings usually warrant the shortest period of anything here and the platform defaults accordingly. Records of consequential commercial actions are append-only for their retention period, and records under legal hold are retained regardless, with the hold visible and attributed.

Contact

Write to [email protected] with any question about this notice.

If an agent belonging to a company that uses Revactio contacted you and you want to know what they hold about you, or you want them to stop, ask them — and they must act on it. They are the controller of that data. If you cannot reach them and believe something has gone wrong, write to us and we will take it seriously.

Make sure every opportunity gets a next action.

Let AI handle the repetitive engagement, keep follow-up moving, and bring your team in when a customer needs a real conversation.

Agents identify themselves on every call · Nothing commits without you · [email protected]