Privacy policy

Who we are

Ravelets is a customer story intelligence platform. We help businesses find the genuine, positive things customers already say — across reviews, comments and testimonials — and turn them into short-form video concepts the business approves before anything publishes. This policy explains what personal data we handle, why, and the controls you have.

What we collect

• Account data — your name, email address and password. Passwords are stored only as scrypt hashes; we can never read them.
• Business profile — the business you register: name, category, location details and brand preferences.
• Customer feedback you import — reviews, comments and testimonials you are authorized to use, each recorded with its source and permission basis.
• Workspace content — the Ravelet concepts, scripts, captions, productions and publications generated in your workspace.
• Usage events — pipeline events such as discovery, scoring, approval and publishing, used to power your dashboard and keep an audit trail.

How we use it

Your data is used to run your pipeline: discovering and scoring feedback, drafting concepts, powering approvals and publishing, and showing you analytics. It is never sold, never used to train shared models without explicit rights and policy, and review text or access tokens are never sent to third-party advertising analytics.

AI processing disclosure

AI is used in three ways, and all of them say what they are:

• Scoring and organizing feedback you import — for sentiment, enthusiasm, specificity and story potential.
• Drafting concepts, scripts and captions grounded in your real feedback — never fabricated quotes.
• Summarizing themes and estimating sentiment trends, always labeled as estimates.

Storage & security

Data is stored in a managed PostgreSQL database. Passwords are hashed with scrypt. Sessions use HTTP-only cookies (the strictly necessary rv_session cookie) that JavaScript cannot read. Access to production data is restricted to platform operators who need it to run the service.

Retention & deletion

You can permanently delete your account and all associated business data yourself from Settings → Danger Zone. Deletion cascades: your profile, imported feedback, concepts, productions and sessions are removed together. See Data & account deletion for exactly what is removed and what may briefly persist.

Your rights

You can access and correct your account information in Settings, export your content by copying it from the product today, and revoke customer consent at any time — consent for likeness, quotation and voice is granular and revocable. Revocation pauses future use and starts removal tasks for already-published content where provider APIs allow.

Children

Ravelets is not directed at children. You must be at least 16 years old to create an account, and we do not knowingly collect personal data from anyone under 16.

Changes

If this policy changes materially, we will update the “Last updated” date above and notify account holders in the product before the change applies.

Contact

The fastest way to reach us is the contact page — pick the “Data & privacy” topic and a real person will read it.