Short version: we collect what you hand us, we use it to answer you, and we do not sell it.
Who we are
Revify is the studio brand of Revify AS, Norwegian org. no. 938 065 799, Indra Rabbavika 14, 5397 Austevoll, Norway. We're the controller for the personal information described here.
This notice covers revifystudio.io (our English site) and the marketing pages of revify.no. If you're a client and log in to our portal on revify.no, we also process your account data there, under your order and agreement with us.
Questions or requests: hei@revify.no or +47 453 93 395. A human answers. We have no data protection officer; a studio our size isn't required to appoint one.
What we collect
The free preview form. The only form on the site. It asks your company name (required), email (required), and optionally your trade, name, phone number, and notes. It goes to our API on revify.no, is stored in our database and CRM, and triggers an email notification to us.
Server logs. Our host records request metadata — IP address, user agent, URL, timestamps — for security and operations, kept briefly.
Google Fonts. The site loads its typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so your browser sends its IP address to Google to fetch them. It's the one request that leaves our infrastructure; no other third-party scripts run here.
Site analytics — first-party and cookie-free. To understand what works on the site, we record one anonymous snapshot per visit on our own servers: which pages you viewed, how far you scrolled, what you clicked, rough device class, country and region, the referrer, and how long you stayed. There are no cookies involved, no third-party analytics provider, and no identifier that follows you to any other website — the random session id lives in your browser's sessionStorage and disappears when you close the tab. We use this under our legitimate interest in improving the site, and you can object at any time (see your rights below).
We run no advertising or tracking cookies, and no advertising measurement. Where we run measurement elsewhere, on a separate ads landing page, it is consent-gated.
How we use it
- To read your preview request, decide whether we're a fit, and reply — by email, or by phone or text if you gave a number, about your request only.
- To build and show you the preview if we take it on.
- To keep records of who we've talked to and what we agreed.
- To keep the site up and secure, and to meet our legal and bookkeeping duties.
Marketing texts go out only with your separate express written consent.
Legal bases
- Steps at your request before a contract — handling your preview request and talking about it.
- Legitimate interests — running and securing the site, keeping business records, following up on your request. You may object; see your rights below.
- Consent — marketing texts, and measurement on the separate ads page. Withdrawable at any time.
- Legal obligation — accounting and other records we must keep.
Who we share it with
We don't sell personal information or share it for cross-context behavioral advertising. A small set of providers process data on our instructions:
- Vercel (US) — hosting and server logs.
- Supabase (EU region) — database and authentication.
- Resend (US) — email notifications and our email to you.
- Google — the web fonts your browser requests.
- Twilio (US) — SMS and phone, only if we text or call you.
- Stripe — payments, only if you later buy. We never store card details.
- Anthropic — AI responses, only where we offer an assistant (client sites and portal, not these pages).
- Meta — only on our separate ads page, after you consent there.
We may also disclose information where the law requires it, or to establish or defend legal claims.
International transfers
We're in Norway and our database sits in the EEA. Some providers are in the US. Those transfers rely on the EU–US Data Privacy Framework where the provider is certified, and/or on the EU Standard Contractual Clauses. Ask and we'll tell you which applies to a given provider.
How long we keep it
- Preview requests and leads — up to 24 months after our last contact; if you become a client, for the relationship plus legal retention.
- Accounting records — 5 years, under the Norwegian Bookkeeping Act.
- Server logs — weeks.
- Unsubscribe and opt-out records — as long as needed to keep honoring your opt-out.
Security
TLS in transit, provider encryption at rest, access controls, audit logs. No system is perfect, but we keep the surface small.
Your choices
- Email: every marketing email identifies us, carries our postal address, and has a working unsubscribe link, honored within 10 business days as CAN-SPAM requires.
- Texts: reply STOP to stop them; message and data rates may apply. As the TCPA requires, we text or call only about your own request unless you gave express written consent for marketing.
- Or ask us to stop contacting you altogether — email hei@revify.no and we will.
Your rights (everyone)
Wherever you live, you can ask us to access the data we hold about you, correct it, erase it, restrict how we use it, port it where that applies, or object to processing based on legitimate interests, including direct marketing. You can withdraw consent at any time, without affecting what we did before.
Email hei@revify.no. We answer verified requests without undue delay and within one month. If you're in the EEA and think we've got it wrong, complain to the Norwegian Data Protection Authority, Datatilsynet — https://www.datatilsynet.no — or your local supervisory authority.
Your US state privacy rights
If you're a California resident, the CCPA/CPRA gives you the right to know and access the personal information we collect, delete it, correct it, opt out of its sale or sharing, limit the use of sensitive personal information, and not be discriminated against for asking.
- We have not sold or shared personal information, including in the preceding 12 months. There's nothing to opt out of.
- We collect no sensitive personal information, so there's nothing to limit.
- Categories collected in the last 12 months: identifiers (name, email, phone, company, IP address); professional and commercial information (your trade, what you want built); internet or network activity (server logs).
- Sources: you, and your browser.
- Purposes: as described in "How we use it" above.
- Disclosed to: the service providers listed above, for those purposes only.
To make a request, email hei@revify.no with enough detail to find your record — normally the email address you used. We verify by matching that against what we hold and may ask one follow-up question; never more than we need. An authorized agent may request with your written permission, and we may ask you to confirm it. We respond within 45 days, extendable once where allowed. If you disagree with our decision, appeal by replying to it and we'll answer in writing.
Similar rights apply in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states. We honor them the same way, by the same route.
Do Not Track and Global Privacy Control
We don't track visitors across other websites and we don't sell or share personal information — so there's no cross-site tracking here for a Do Not Track signal to switch off. Where a Global Privacy Control signal counts as a valid opt-out under applicable law, we honor it.
Children
Our work is business-to-business and these sites aren't directed at children. We don't knowingly collect personal information from anyone under 16, or under 13 in the US. If you believe a child has given us information, email us and we'll delete it.
Changes to this notice
We post any new version here with a new effective date at the top, and flag material changes visibly on the site. The date above always tells you which version applies.
Contact
Revify AS Indra Rabbavika 14, 5397 Austevoll, Norway hei@revify.no · +47 453 93 395
Governing law
This notice and any dispute about it are governed by Norwegian law, before the Norwegian courts, with Hordaland tingrett (Bergen) as the agreed venue — to the extent mandatory law where you live does not provide otherwise.
Questions about any of this? Write to hei@revify.no