Skip to content
Privacy policy

How RevPapa handles business information.

Last updated July 21, 2026. This policy covers customer data, target-account research, professional contact information, data sources, disclosures, and privacy choices.

Scope and who we are

This Privacy Policy explains how RevPapa ("RevPapa," "we," or "us") collects, uses, discloses, and protects personal information through our website, workspaces, target-account and stakeholder research, reports, deliverables, integrations, and related services (collectively, the "Service").

The Service is designed for business customers. This policy applies both to people who interact directly with RevPapa and to professionals whose business information appears in research we prepare for customers. It does not govern a customer's independent outreach, systems, or privacy practices.

Our privacy roles

RevPapa's role depends on the processing. We act as a controller or business when we determine why and how to handle website, account, service, source, provider, and business-contact information. We may act as a processor, service provider, or contractor when handling Customer Materials only on a customer's documented instructions. Customers remain responsible for their own sales records, outreach decisions, and compliance. An applicable Order or data-processing agreement may describe these roles in more detail.

Information we collect

  • Account and relationship information, such as name, business contact details, organization, title, login information, billing details, contract records, and support communications.
  • Customer Materials, such as target criteria, customer and prospect lists, CRM records, closed-won and lost-opportunity details, sales notes, recordings, transcripts, campaign information, instructions, and connected-system data.
  • Target-account information, such as company name, location, industry, size, website, services, technology, advertising, reputation, hiring, market activity, and other qualification evidence.
  • Stakeholder information, such as name, business title, employer, professional profile, role in a potential decision, business email, business phone or direct dial, and related source or verification information.
  • Derived information, such as account-fit explanations, stakeholder relevance, confidence labels, priority recommendations, possible buying context, and quality-control findings.
  • Website and service information, such as IP address, browser, device, pages viewed, referring page, timestamps, feature activity, logs, and security events.

Where information comes from

  • Directly from customers, users, design partners, prospects, and people who contact us.
  • Customer-authorized systems and accounts, including CRMs, sales tools, recordings, data-provider accounts, and workflow platforms.
  • Public and professional sources, including company websites, professional profiles, public directories, registries, news, reviews, job postings, technology indicators, and other publicly available sources.
  • Third-party business-data, enrichment, verification, research, and technology providers.
  • Our own research, review, matching, classification, and quality-control processes, which may generate derived information from the sources above.

How we use information

  • Define and calibrate customer target profiles and qualification criteria.
  • Research, enrich, deduplicate, verify, organize, and refresh target accounts and stakeholder records.
  • Explain why an account fits, map people involved in a decision, and recommend where a customer should focus.
  • Deliver reports, datasets, evidence, exports, integrations, and related support to customers.
  • Operate accounts, contracts, billing, provider access, communications, and customer relationships.
  • Monitor quality, correct errors, improve methods and product features, and develop aggregated or de-identified insights.
  • Secure the Service, prevent misuse, investigate incidents, enforce agreements, and comply with law.

Automation and AI-assisted processing

We may use software, automation, and AI-assisted providers to help search, extract, classify, summarize, match, score, and check information. These methods can generate account-fit, stakeholder-relevance, confidence, and priority inferences. We use quality controls appropriate to the engagement and label material uncertainty where practical.

RevPapa does not use the Service to make solely automated legal, credit, employment, housing, insurance, medical, or similarly significant eligibility decisions about individuals. Customers may not use our deliverables for those purposes.

How information is disclosed

  • To the customer for whom we prepare target-account, stakeholder, source, contact, and priority intelligence.
  • To vendors that support hosting, storage, data sourcing, enrichment, verification, AI-assisted processing, analytics, security, communications, billing, and support.
  • To customer-authorized CRMs, workflow tools, data providers, and other connected systems at the customer's direction.
  • To professional advisers, auditors, insurers, financing sources, and transaction counterparties subject to appropriate protections.
  • To courts, regulators, law enforcement, or other parties when required by law or reasonably necessary to protect rights, safety, security, and the integrity of the Service.

Business-contact intelligence and privacy choices

RevPapa does not rent personal information for consumer advertising or use stakeholder intelligence for cross-context behavioural advertising. The Service does include providing customers with company and professional contact intelligence compiled from Customer Materials, public sources, provider data, and our research. Some privacy laws define a "sale" broadly enough that providing business contact information for value may be treated as a sale even when nobody pays for a specific person's record.

Where applicable law gives you a right to opt out of sale, sharing, profiling, or direct-marketing use, email [email protected] with "Privacy Choice" in the subject line. Tell us the business email, phone number, professional profile, or other details needed to locate the record. We may retain a minimal suppression record so your choice continues to be respected.

Website analytics and cookies

We may use essential storage and analytics tools, including product and website analytics, to operate the site, remember preferences, understand usage, diagnose problems, and improve the Service. Depending on configuration, these tools may use cookies, local storage, IP addresses, or similar technologies. You can control many of these technologies through browser settings and any privacy controls we make available. Blocking essential storage may affect functionality.

Retention and deletion

We retain information only as long as reasonably needed for the purposes described in this policy, including delivering and refreshing intelligence, maintaining source and verification evidence, correcting records, honoring suppression choices, operating accounts, securing the Service, resolving disputes, enforcing agreements, and meeting legal, tax, and audit obligations. Retention depends on the data type, source restrictions, customer instructions, sensitivity, accuracy needs, and applicable law. We may keep information in backups for a limited period and retain de-identified information where it cannot reasonably identify a person.

Security

We use administrative, technical, and organizational safeguards designed for the nature of the information and the Service. These may include access controls, authentication, encryption in transit, vendor review, logging, backups, and incident response. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. Customers are responsible for protecting credentials and managing access to their systems and exported deliverables.

International processing

RevPapa and its providers may process information in Canada, the United States, and other countries where we or they operate. Those countries may have different privacy laws, and information may be accessible to courts, law enforcement, or regulators under local law. Where required, we use contractual or other approved safeguards for international transfers.

Your privacy rights

Depending on your location and our role, you may have rights to know whether we hold information about you; access it; learn its categories, sources, purposes, and recipients; correct inaccurate information; request deletion or portability; withdraw consent; object to or restrict processing; opt out of sale, sharing, profiling, or direct marketing; appeal a decision; and receive equal service without unlawful discrimination for exercising a right.

Submit a request to [email protected] or through the contact page. Describe the right you want to exercise and provide enough information to locate the record. We may verify identity or authority, and legal exceptions may apply. If we process the information only for a customer, we may direct the request to that customer and support its response. You may also use an authorized agent where permitted and complain to your local privacy regulator.

Sensitive information and children

The Service is not designed to collect sensitive consumer information such as government identifiers, personal financial credentials, precise personal location, health information, biometric templates, or information about children. Do not provide that information unless an Order expressly requires it and appropriate legal and security measures are in place. The Service is for adults acting in a business capacity and is not directed to anyone under 18. Contact us if you believe we received a child's information.

Changes to this policy

We may update this policy as our Service, providers, or legal obligations change. We will post the updated date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

Contact

RevPapa is responsible for the privacy practices described here. For privacy requests, questions, or complaints, contact [email protected] or use the contact page. For security reports, use [email protected] or select the security topic on the contact page.