Privacy Policy

1. Introduction

Revue ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at userevue.com (the "Service").

By using Revue, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (hashed), and any profile information you provide
• Content: Documentation, code, and files you upload or review through the Service
• Communication: Messages, feedback, and support requests you send to us
• Payment Information: Billing details processed through secure third-party payment processors (Stripe)

2.2 Information We Collect Automatically

• Usage Data: Information about how you use the Service, including review history, features accessed, and time spent
• Technical Data: IP address, browser type, device information, operating system, and access times
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analyze usage patterns

2.3 Third-Party Services

• Git Providers: When you connect GitHub, GitLab, or Bitbucket, we access repository information, PRs, and files you authorize
• Sandbox Services: We use E2B sandboxes for code execution (see Section 5 for details)
• AI Services: We use Google Gemini API for AI-powered reviews and recommendations

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your reviews and execute code in secure sandboxes
• Send you service-related communications and updates
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Use
• Send you marketing communications (with your consent, which you can opt out of at any time)
• Analyze usage patterns to improve our Service

4. Data Storage and Retention

4.1 Account Data

We retain your account information for as long as your account is active or as needed to provide the Service. You can delete your account at any time, and we will delete your personal information within 30 days of account deletion, except where we are required to retain it by law.

4.2 Review Data

Review history and results are stored in our database and associated with your account. You can delete individual reviews or request deletion of all your review data at any time.

4.3 Sandbox Data

Important: Code execution occurs in isolated E2B sandboxes. All sandbox data, including executed code, files, and environment state, is automatically deleted after 30 minutes. We do not retain any code or files from sandbox executions beyond this period.

Review results and summaries are stored in our database, but the actual code and files from sandbox executions are permanently deleted after the 30-minute sandbox expiration period.

5. E2B Sandbox Services

Revue uses E2B (e2b.dev) to provide secure, isolated sandbox environments for code execution. When you use Revue to review documentation with code examples:

• Your code is executed in isolated, secure E2B sandboxes
• Each sandbox is completely isolated from other users and the internet (unless explicitly configured)
• All sandbox data, including code, files, and execution results, is automatically deleted after 30 minutes
• We do not access or store code or files from sandbox executions beyond the 30-minute period
• Sandbox executions are logged for security and debugging purposes, but actual code content is not retained

E2B's privacy policy and terms apply to sandbox services. For more information, please visit e2b.dev/privacy.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

6.1 Service Providers

• E2B: For sandbox execution services (data deleted after 30 minutes)
• Google Gemini: For AI-powered review generation
• Stripe: For payment processing (we do not store full payment card details)
• Resend: For email delivery services
• Hosting Providers: For infrastructure and hosting services

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or others.

6.3 Business Transfers

If Revue is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email of any such change in ownership or control.

7. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request restriction of processing of your personal data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing of your personal data for certain purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at hello@userevue.com. We will respond to your request within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing (bcrypt) for account authentication
• Regular security assessments and vulnerability scanning
• Access controls and authentication requirements
• Isolated sandbox environments for code execution
• Automatic deletion of sandbox data after 30 minutes

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amounts of data that may include an anonymous unique identifier.

Types of cookies we use:

• Essential Cookies: Required for the Service to function (authentication, session management)
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer personal data from the EEA to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

11. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected information from a child under 16, we will delete that information promptly.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

We will also notify you of any material changes via email to the address associated with your account. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: