Privacy Policy

Effective October 23, 2026. Revasive operates this letter and postcard ordering service. Contact: revasive@protonmail.com.

Information processed

We process login email and authentication information; workspace memberships; HubSpot portal and selected record identifiers; recipient names and mailing addresses; sender/return addresses; selected company/deal names; template and personalized message content; order status/history; and credit/funding records. HubSpot access and refresh tokens are encrypted and kept on the server.

Purpose and sharing

We use this information to authenticate users, connect the requested HubSpot account, personalize and fulfill orders, manage account credits, provide support, and protect the service. Authorized fulfillment staff can access orders needed for their work. We use Supabase for authentication/database services, DigitalOcean for hosting, and encrypted backups in the private source repository's GitHub Actions artifacts. Support email is handled through Proton Mail. Mailing recipients' names, addresses, and correspondence must be made available to the fulfillment operation and applicable postal carrier to mail an order. Do not include sensitive information in messages.

Product analytics

When product analytics is enabled, we use PostHog to understand how visitors browse the website and how signed-in customers use the app and where actions fail. Analytics includes page/tab views, predefined button and editor activity, submission steps, API outcomes and timing, aggregate item counts, scroll-depth milestones, contact-link clicks, and presentation-window controls. Signed-in users and workspaces are represented by pseudonymous identifiers. Public website visits use random anonymous identifiers in tab-scoped session storage; these are not merged into customer profiles. Website analytics respects browser Do Not Track, Global Privacy Control, and the local analytics opt-out setting. Analytics session identifiers stay in tab memory or tab-scoped session storage. We do not send login emails, CRM record identifiers, recipient or return addresses, letter content, search text, form values, or credentials to PostHog. This integration does not record sessions or use advertising cookies.

Retention and control

Disconnecting HubSpot removes locally stored integration credentials after confirmed uninstall; accepted orders, templates, and financial/audit records are retained separately. Encrypted letter-data backup artifacts are configured for 30-day retention. Live records are retained while needed to provide the service, handle support, or maintain required operational/financial records. Contact support to request access, correction, deletion, or account closure; we will identify any records that must be retained when handling the request.

Browser storage

Login tokens stay in tab memory. An expiring HTTP-only cookie binds HubSpot authorization to the browser. Password confirmation/recovery uses an expiring verifier in session storage. Preview workflow guides use local storage; signed-in guides are stored in your workspace. This application does not include advertising trackers.

Customer responsibilities and changes

Customers are responsible for having a valid basis to provide recipient information and request correspondence. Updates to this policy will be published here with an updated effective date.