Privacy Policy
What personal data RevvoHub collects, why, where it is kept, who else handles it, and how to use your rights.
In effect from 8 October 2026Version 2026-10-08
1. Who we are
RevvoHub is a product of Revvo Solutions, d.o.o., Gimnazijska cesta 15D, 1420 Trbovlje, Slovenia (registration number 7483449000, tax number 32890001). In this policy "we" means that company.
For anything about personal data, write to privacy@revvo-hub.com. We have not appointed a data protection officer, because the law does not require one for a company of our size and kind of processing; the address above reaches the people responsible.
2. Two different roles
Which rules apply depends on whose data it is.
- Data we decide about (we are the controller). Details of the people who open and use a RevvoHub account (workshops, and workshops' customers who use the customer app), people who write to us, and visitors to this website. This policy covers that data.
- Data a workshop keeps in RevvoHub (we are the processor). A workshop's customers, their vehicles and their service history, and the conversations its customers have with the workshop's assistant in the customer app. The workshop decides what is recorded and why; we only store and process it on the workshop's instructions, under our Data Processing Agreement.
If you use the customer app, your login (name, email address, password, language, notification settings) is data we decide about, and this policy covers it. What the app shows you about your cars and jobs, and what you write to a workshop's assistant, belongs to that workshop's records, which we process for it.
If you are a customer of a workshop that uses RevvoHub and want to see, correct or delete what it holds about you, ask the workshop: it is the controller of that data and has the tools to do it. If you write to us instead, we pass your request to the workshop without delay.
3. What we collect and why
| Data | What it is used for | Legal basis (GDPR) |
|---|---|---|
| Account details: name, email address, phone number, workshop name, password (stored only as a hash), language | Creating your account, signing you in, sending service messages such as the email confirmation | Performance of the contract, Art. 6(1)(b) |
| Workshop settings: working hours, logo, VAT rate | Running the app the way your workshop works | Performance of the contract, Art. 6(1)(b) |
| Record of acceptance: which version of the Terms and Data Processing Agreement was accepted, by which account, and when | Being able to show what was agreed | Legitimate interest, Art. 6(1)(f) |
| AI assistant content: the questions a mechanic types, any vehicle details they choose to attach, the answers, and how many tokens each answer used | Providing the assistant, keeping the chat history, applying usage limits | Performance of the contract, Art. 6(1)(b) |
| Customer app login: name, email address, password (stored only as a hash), language, and the workshops you are connected to | Giving you access to the cars and jobs that workshops share with you | Performance of the contract, Art. 6(1)(b) |
| Notifications: whether you want notification emails, the push subscription of each device on which you turn notifications on (an address issued by your browser's push service, and encryption keys), and a record of which notifications were sent and when | Telling you when something new is waiting for you in the app | Performance of the contract, Art. 6(1)(b) |
| Technical logs: IP address, browser type, time, the address requested, error details | Keeping the service secure, finding and fixing faults | Legitimate interest, Art. 6(1)(f) |
| Messages you send us: your email address and whatever you write | Answering you and following up | Legitimate interest, Art. 6(1)(f); steps before a contract, Art. 6(1)(b) |
| Billing details (once you are on a paid plan): company name, address, tax number, invoices, payment status | Charging for the service and keeping the accounts the law requires | Performance of the contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) |
We do not buy data about you, we do not build advertising profiles, and we do not sell or rent personal data to anyone.
You are not obliged to give us any data, but without account details we cannot open an account for you.
Notifications
When something new is waiting for you in the app (a workshop's answer in the customer app, or a customer's request in the workshop's inbox) and you have not opened it within 3 minutes, we let you know:
- By email, to the address of your login. The email says only that something is waiting, and from which workshop, with a link; it does not contain the message itself. You can turn these emails off in the app.
- By push notification, only on devices where you have turned notifications on. Push notifications are delivered by the push service of your browser's maker (for example Google, Apple or Mozilla). Their content is encrypted so that the push service cannot read it; it handles only the technical data needed to deliver it. You can turn them off in the app or in your browser settings at any time.
4. The AI assistants
RevvoHub has two assistants, both powered by Claude, a model made by Anthropic.
The diagnostic assistant, for mechanics
- Nothing is sent to the model until a mechanic sends a message.
- A vehicle is attached to a chat only when the mechanic taps to attach it. What is then sent is technical: make, model, year, engine, fuel, mileage and the first 11 characters of the VIN (which identify the model, not the individual car), and for a work order its title, the reported fault, internal notes and the labour and parts lines. The registration plate, the owner's name and the VIN's serial part are not sent.
- Whatever the mechanic types is sent as typed. We ask users not to type names, phone numbers or other details of their customers into the assistant; they are not needed for a diagnosis.
- Anthropic processes this content on our behalf. Under its commercial terms it does not use it to train its models, and it deletes inputs and outputs within 30 days unless it has to keep them longer to enforce its usage policy or comply with the law.
- The assistant gives suggestions to a mechanic. It makes no decisions about people.
The assistant in the customer app
- Each workshop decides whether to switch it on for its own customers, and what it may do. It works for that workshop only and reaches only the records of the customer it is talking to at that workshop.
- When a customer writes, the model is sent the conversation; the workshop's name, opening hours, booking rules and the instructions the workshop wrote for the assistant; the customer's cars at that workshop (make, model, year, fuel, mileage); their jobs there (title, the reported fault, status, booked time, the work and parts while the car is in, totals); and their requests to the workshop. The customer's name, contact details, registration plates and VINs are not sent.
- Whatever the customer types is sent as typed. We ask customers not to share payment card or bank details in the chat.
- It can book, move or cancel an appointment, or pass a message on to the workshop, only as far as the workshop allows; the workshop can choose to approve each one first. The workshop or the customer can change any booking. It makes no decisions about people with legal or similarly significant effects.
- Anthropic processes this content on our behalf on the same terms as above: it is not used for training and is deleted within 30 days.
5. This website and cookies
This website does not use analytics, advertising or social-media trackers and sets no cookies. The app uses only the cookies it needs to keep you signed in and remember your language. Details are in the Cookie Notice.
6. Who else handles the data
We use a small number of providers to run RevvoHub. They act on our instructions under data processing agreements and may not use the data for their own purposes. The current list, with what each one does and where, is on the Sub-processors page.
Apart from them, we disclose personal data only when the law obliges us to (for example to a court or a supervisory authority), or to professional advisers bound by confidentiality where that is necessary to protect our rights.
7. Where the data is kept and transfers outside the EEA
The database, sign-in system and file storage are hosted in the European Union (Frankfurt, Germany). The application code that handles your requests also runs in Frankfurt.
Some of our providers are based in the United States, and one service is delivered from outside the European Economic Area:
- AI assistants. Content sent to either assistant is processed by Anthropic in the United States and other regions where it operates.
- Email. Notification emails are sent through our email provider, which may process the recipient's address and the email outside the EEA.
- Push notifications. They are delivered by the push service of your browser's maker, which may be outside the EEA. Their content is encrypted end to end.
- Hosting and delivery. Requests reach the app through our hosting provider's global network, which may handle technical data such as IP addresses outside the EEA.
- Support access. Providers' support staff outside the EEA may, in rare and controlled cases, access data to resolve an incident.
Such transfers are covered by the European Commission's Standard Contractual Clauses in our agreements with these providers and, where a provider is certified, by the EU–US Data Privacy Framework. You can ask us for a copy of the relevant safeguards at privacy@revvo-hub.com.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account details and workshop settings | For as long as the account exists. After you delete the account or it is closed, they are erased from the live system, and from backups within 30 days. |
| Everything a workshop has entered (customers, vehicles, work orders) | As instructed by the workshop; see the Data Processing Agreement. Deleted with the account. |
| AI assistant chats | Until the mechanic deletes the chat or the account is deleted. Our AI provider keeps its own copy for no more than 30 days. |
| AI usage counts (tokens, no content) | For as long as the account exists. |
| Customer app conversations with a workshop's assistant | A conversation is a short session that ends after a time and number of messages the workshop sets. It is not kept: it is deleted when the customer ends it or starts a new one, and at the latest 30 days after it ended (sooner if the workshop erases that customer or its account is deleted). Our AI provider keeps its own copy for no more than 30 days. |
| Requests to the workshop that come from such a conversation | As long as the workshop keeps them in its records. |
| Customer app login | Until the customer deletes it, which they can do in the app at any time. |
| Push subscriptions | Until notifications are turned off on that device, or the push service tells us the subscription is no longer valid. |
| Record of notifications sent | 30 days. |
| Technical logs | Up to 30 days. |
| Record of acceptance of the Terms | For the life of the contract and 5 years after it ends (the general limitation period). After an account is deleted this is the only thing we keep: the workshop's name, the account's email address, which versions were accepted and when, and the date of deletion. |
| Messages you send us | 2 years after the conversation ends. |
| Invoices and accounting records | 10 years, as tax law requires. |
9. How we protect it
Each workshop's data is separated from every other's inside the database itself, connections are encrypted, stored data is encrypted, and access by our own staff is limited to what is needed to run the service. More detail is on the Security page.
No system is perfectly secure. If a breach is likely to put your rights at risk, we will tell you and the supervisory authority as the law requires.
10. Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- have inaccurate data corrected;
- have data erased when there is no longer a reason for us to keep it;
- restrict processing in certain cases;
- data portability: receive the data you gave us in a commonly used, machine-readable format;
- object to processing that is based on our legitimate interests;
- not be subject to decisions based solely on automated processing that significantly affect you (we make no such decisions).
Account holders can do most of this themselves in the app: Settings → Privacy & data has an export of everything in the account and a button to delete the account and all its data. Customer app users can delete their login in the app; for the records a workshop keeps about them, see section 2. For anything else, write to privacy@revvo-hub.com. We answer within one month; exercising your rights is free of charge. We may ask for information to confirm who you are before acting on a request.
You also have the right to complain to a supervisory authority. In Slovenia that is the Informacijski pooblaščenec (Information Commissioner), Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si. You may also complain to the authority in the EU country where you live or work.
11. Children
RevvoHub is a tool for businesses. It is not intended for anyone under 18, and we do not knowingly collect data from children.
12. Changes to this policy
When we change this policy we publish the new version here with a new date. If a change materially affects how we use your data, we tell account holders by email or in the app at least 15 days before it takes effect.
13. Contact
Revvo Solutions, d.o.o.
Gimnazijska cesta 15D, 1420 Trbovlje, Slovenia
Privacy: privacy@revvo-hub.com
General: info@revvo-hub.com