§ / LEGALPrivacy Policy
Privacy Policy.
Effective 2026-01-01 · UK GDPR · Data controller: REVOLVR Ltd
This policy explains what we collect, why we collect it, where it lives, and what you can do about it. We aim to collect the minimum needed to run the service and never sell your data to third parties.
01Who we are
REVOLVR Ltd is a company registered in England and Wales operating as an AI-to-Human record label. We are the data controller for any personal data you provide to us through the REVOLVR website, dashboard or order flow. You can contact us at privacy@revolvr.it.
02What we collect
Account data: your email address, display name, chosen locale and currency. Authentication data: hashed password (if you use password auth) or one-time magic link tokens. Billing data: name, billing address and last-four card digits via Stripe — we do not store full card numbers. Audio data: any AI track links, demo uploads, reference URLs and master files you submit. Technical data: IP address, browser user-agent and standard request logs.
03Why we use it
We use account and billing data to operate your account, process payments and deliver finished masters. Audio data is processed solely to produce your record and is shared only with the assigned artist team. Technical data is used to detect fraud, operate the service securely and debug issues. We only contact you for marketing if you have explicitly opted in; you can opt out at any time.
04Where data is stored
Audio files (demos, previews, masters) are stored in Cloudflare R2 with object-level encryption. Account and order data is stored in MongoDB Atlas, primary region eu-west-2 (London). Payment data is stored by Stripe in their respective jurisdictions (US, Ireland, UK). Email is handled by our transactional email provider in the EU.
05How long we keep it
Account data is retained while your account is active and for seven years afterwards to meet UK accounting and tax obligations. Master recordings are retained indefinitely for our and your benefit (you may need to re-download them). Watermarked preview audio is automatically purged ninety days after delivery sign-off. Request logs and analytics are retained for thirteen months.
06Cookies
At alpha we set only the cookies strictly necessary for authentication, session management and locale preference. There is no analytics or marketing tracker. If this changes we will publish a cookie banner that respects your choice and update this policy accordingly.
07Your rights
Under UK GDPR you have the right to access the data we hold about you, to correct it, to ask us to delete it (subject to our legal retention obligations), to receive a portable copy, to object to certain processing and to withdraw consent for any marketing use. To exercise any of these rights, email privacy@revolvr.it. We respond within thirty days. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
08Contact for data requests
Data requests of any kind go to privacy@revolvr.it. Please include enough information for us to verify your identity. We do not require legal forms — a clear request from the email address on the account is sufficient.
Last reviewed 2026-01-01 · privacy@revolvr.it