Privacy policy

Last updated October 2026

Who we are

RevCite ("we") runs RevCite, a reporting service for marketing agencies and teams. Contact: hello@revcite.com.

What we collect

• Account data: your name, email, agency name and an encrypted password.
• Client data you connect: with read-only access you grant, we import Google Analytics 4 session counts by source and landing page, and HubSpot deals and their associated contacts' email, original source and first-visit fields. We don't import other contact details, emails or notes.
• Tracked questions and AI answers: the questions you add, and the answers and citations returned by AI assistants.
• Billing: handled by Stripe. We store your Stripe customer ID, not card details.

How we use it

Only to produce your reports, run the service, bill you and contact you about your account. We don't sell data, use it for advertising, or use client data to train AI models.

Google user data

RevCite's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only Google Analytics access and use it only to show AI-referred traffic in your reports.

Who we share it with

Service providers that run RevCite for us: hosting and database, email delivery, Stripe for payments, and the AI providers that answer tracked questions (OpenAI, Perplexity, Google). Questions are sent to AI providers; GA4 and HubSpot data is not.

Security and retention

Access tokens for Google and HubSpot are encrypted at rest. You can disconnect a source or delete a client brand at any time, which deletes its imported data. We delete account data within 30 days of an account being closed, except what we must keep for tax records.

Your rights

You can ask to see, correct, export or delete your data by emailing hello@revcite.com.