Privacy Policy

This Privacy Policy explains how R3VCORE handles personal information when you use R3V Studio and the related services at studio.r3vcore.com (collectively, the “Service”).

1. Who we are

R3VCORE LLC is a Wyoming limited liability company operating R3V Studio — a podcast recording, scheduling, content amplification, and revenue intelligence platform that hosts and their clients use to record conversations, distribute recorded content, and identify the highest-value relationships in their networks.

Questions about this policy: legal@r3vcore.com.

2. Scope

This policy applies to:

• Hosts and their team members who use R3V Studio directly.
• Guests recorded in R3V Studio sessions.
• Visitors to studio.r3vcore.com.

When you connect a third-party account (Google Workspace, LinkedIn, YouTube, X, Instagram, TikTok, HubSpot, Salesforce, GoHighLevel) to R3V Studio, that connection is governed by both this policy and the third party’s own privacy policy.

3. Information we collect

3.1 — Information you provide directly

• Account information: name, email address, role, organization affiliation.
• Show metadata: show name, branding, scheduling preferences, recording configuration.
• Guest information: when you book or invite a guest, the contact details you provide.
• Communications: messages you send through the Service to other hosts, guests, or our support team.

3.2 — Information from connected third-party accounts

You may connect the following accounts via OAuth. We collect only the data necessary to operate the corresponding feature, and only what each platform’s scopes authorize:

• Google Workspace (Calendar): availability and event management for guest booking. We read your free/busy and create booking events on your calendar. Scope: calendar.events.
• LinkedIn: your profile (name, email, profile photo via OpenID Connect) and the ability to publish posts on your behalf. Scopes: openid, email, profile, w_member_social.
• YouTube: the ability to upload videos to your channel. Scope: youtube.upload. We do not read your existing video library, comments, or analytics.
• X (Twitter): profile basics (handle, user id), the ability to post and upload media, and read your own published posts to confirm publishing succeeded. Scopes: tweet.read, tweet.write, media.write, users.read, offline.access.
• Instagram (via Meta): your Instagram Business account profile and the ability to publish Reels and other media. Scopes: instagram_business_basic, instagram_business_content_publish.
• TikTok: the ability to publish videos to your account. Scope: video.publish.
• CRM systems (HubSpot, Salesforce, GoHighLevel): your contacts, deal records, and activity history. We use this to identify revenue opportunities, prioritize relationships, and (when authorized) write back relationship insights and outreach activity. We request the minimum scopes needed.

3.3 — Information collected automatically

• Service usage: pages viewed, features used, timestamps, IP address, browser/device info.
• Recording metadata: session times, participant identities, transcription text, AI-generated analyses derived from recordings.
• Engagement signals from published content: views, likes, comments, shares as reported by the publishing platform on your own posts. We do not collect engagement on content you did not publish through R3V Studio.

4. How we use information

We use personal information to:

• Operate the Service: provision your studio, schedule and conduct recordings, deliver transcripts, generate intelligence reports.
• Connect to your authorized third-party accounts on your behalf.
• Publish content you’ve authorized us to publish to your connected channels.
• Identify and prioritize the relationships and opportunities most likely to drive revenue for your business.
• Send service communications (booking confirmations, scheduling reminders, recording links).
• Improve the Service (aggregated analytics, debugging, security monitoring).
• Comply with legal obligations.

We do not use your personal information or that of your connected contacts to train general-purpose AI models. We use AI models to analyze conversations and relationships within the scope of operating the Service for you.

5. How we share information

We share information only as needed to operate the Service:

• Subprocessors: infrastructure providers — Supabase (database), Vercel (hosting), Daily.co (video recording), Anthropic (AI processing), Resend (email), Twilio (SMS). These providers process data on our behalf under contractual confidentiality obligations.
• Connected platforms: when you authorize a publication or action, we transmit the necessary data to the relevant platform (LinkedIn / YouTube / etc.) to complete it.
• At your direction: if you share a recording or report with someone (a co-host, client, etc.), we deliver it to that recipient.
• Legal requirements: if compelled by law and where we believe disclosure is necessary to protect rights, safety, or property.
• Business transfers: if R3VCORE is acquired, your information may transfer to the acquirer; we will notify you and honor your prior consent.
• Cross-customer intelligence: contact records you add may be matched to a de-identified, cross-customer identity graph to improve relationship intelligence across the Service. We share canonical, de-identified identity records this way — never your raw contact lists, notes, or communications with other customers.

We do not sell personal information.

6. Data retention

• Recording transcripts and AI-generated analyses: life of your engagement plus 12 months.
• OAuth connection tokens: until you disconnect, the third party revokes access, or you close your account.
• Service usage logs: up to 90 days for security and debugging, then aggregated or deleted.
• Account information: life of your engagement plus up to 24 months for billing, support, and legal obligations.

You can request deletion at any time (see Section 8).

7. Security

We protect personal information with:

• Encryption in transit (TLS) and at rest.
• Row-level security in our database so one host’s data is isolated from another’s.
• OAuth tokens stored under access controls, used only for the authorized flows.
• Principle of least privilege for staff access; staff access is logged.
• Vendor selection based on SOC 2 or equivalent posture.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you as required by law.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information (subject to limited legal exceptions).
• Restrict or object to processing.
• Receive your information in a portable format.
• Withdraw consent (e.g., disconnect a third-party account at any time from your settings).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email legal@r3vcore.com. We respond within 30 days.

9. Disconnecting third-party accounts

You can disconnect any third-party account at any time:

• From within R3V Studio: Settings → Connections → Disconnect.
• Directly at the third party (e.g., LinkedIn → Settings → Data privacy → Permitted services).

Disconnection revokes our access immediately and stops further data flow from that platform. Data already collected and processed remains subject to the retention rules above.

10. International transfers

R3VCORE operates in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We use standard contractual safeguards where required.

11. Children

R3V Studio is not directed to children under 16, and we do not knowingly collect their personal information.

12. Changes to this policy

We may update this policy. Material changes will be communicated by email and posted here with a new effective date.

13. Contact

For questions, exercise of rights, or complaints: