Privacy Policy

Last updated: 13 August 2026.

This policy explains what we collect when you use RevX, why, who else processes it, and what you can ask us to do about it. It covers the RevX website and platform.

1. What we collect

Account information. Your name and email address. Your password is stored only as a hash, never in readable form. Company name if you give it.

Purchase information. What you bought, when, the amount, and which access it granted. Card details are handled by Stripe and never reach our systems.

Team information. If you buy for a team, the team name, its members, and pending invitations.

Download records. Every file download is logged with your account, the file, the time, and the IP address the request came from. This exists so we can enforce the licence terms and investigate abuse, and because refund eligibility depends on whether anything was downloaded.

Course progress. Which lessons you have started and completed, so the platform can show you where you left off.

Search queries. What you type into search, together with the IP address, at a limited sampling rate. See section 3, because these leave our systems.

Messages you send us. Contact, discovery call, and service enquiry forms collect your name, email, phone number where the form asks for it, company, and whatever you write. Discovery call requests also include your answers to the qualifying questions.

Analytics. From public launch, standard web analytics about pages viewed and actions taken. See section 4.

2. Why we collect it

To give you the access you paid for, to keep your account secure, to send you transactional email such as password resets and team invitations, to answer your enquiries, to enforce the licence terms, to meet tax and accounting obligations, and to understand how the site is used so we can improve it.

We do not sell your personal information. We do not share it with advertising networks. We do not use it to build profiles for third parties.

3. Who else processes your data

We use the following providers. All are outside the EU and UK, principally in the United States, so using RevX involves an international transfer of your data.

  • Stripe. Payment processing. Receives your payment details and email.
  • Railway. Hosting for the application and database. Holds everything in section 1.
  • Cloudflare. Video delivery for the Training Library, and object storage for downloadable files.
  • Resend. Transactional email. Receives your email address and the message content. Our mail is sent from [email protected].
  • OpenAI. Your search queries are sent to OpenAI to convert them into a numeric representation used for semantic search. The query text leaves our systems for this purpose. Your account details are not sent with it. If this call fails, search falls back to keyword matching.
  • Meilisearch. The search index itself, which we run on our own infrastructure.
  • Deepgram. Transcription of our own course videos. This processes our content, not your personal data.
  • Google Analytics. Website analytics, from public launch. See section 4.

4. Analytics and cookies

We use two kinds of cookie.

Strictly necessary. Two session cookies, rx_at and rx_rt, keep you signed in. They are HTTP-only, so page scripts cannot read them, and they exist only to hold your login. Without them you cannot stay logged in.

Analytics. From public launch we run Google Analytics 4, which sets its own cookies and reports page views and conversion events such as starting checkout. This is a third-party analytics service, so if you would rather not be measured, a browser-level analytics blocker will stop it, and the platform works normally without it.

One detail worth stating, because it is unusual enough to be worth the sentence: many RevX URLs contain things that should never reach an analytics provider, such as password reset tokens, invitation tokens, and lesson identifiers. We strip those from every URL before it is reported, and we have an automated check that fails our build if that redaction is ever broken.

5. How long we keep it

Because RevX access is perpetual, we keep your account, purchase, and access records for as long as your account exists. We have to: they are the record of what you bought and the basis on which we keep giving you access to it.

If you ask us to delete your account, we will, subject to two limits. We keep the minimum purchase and tax records we are legally required to retain, and deleting your account ends your access to everything you bought, which cannot be undone.

Messages you send through our forms are kept while they are useful for answering you and for our own records of the enquiry.

6. Your rights

You can ask us to:

  • give you a copy of the personal data we hold about you
  • correct anything inaccurate
  • delete your data, subject to section 5
  • stop using it for a particular purpose

Ask through our contact page and we will respond within one month. Depending on where you live you may also have the right to complain to your data protection regulator.

7. Security

The site runs over HTTPS. Passwords are hashed. Downloadable files are not publicly addressable: each download is authorised against your purchase and served through a signed link that expires within minutes. Training videos are served through signed, short-lived URLs tied to a single video. No system is perfectly secure, but paid content is not left open to anyone with a link.

8. Children

RevX is a professional tool sold to engineers and firms. It is not intended for children, and we do not knowingly collect data from anyone under 16.

9. Changes

We may update this policy. The current version always appears on this page with its date. If we make a change that materially affects how we use your data, we will tell account holders by email.

10. Contact

Any question about this policy, or any request under section 6, goes through our contact page.