Privacy Policy

Revori operates the revori.app platform — a web-based tool for creating beat-synced lyric videos, cover art, visualizers, and other music-related visual content.

We are the data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and applicable data protection laws.

Contact: privacy@revori.app

Account information

• Email address (required for registration)
• Display name or artist name (optional)
• Password (stored as an irreversible cryptographic hash — we cannot read it)

Billing information

• Payment and subscription data processed by Stripe — we never store your card number
• Credit transaction history (purchases, usage, refunds)

Content and usage

• Audio files you upload (songs, tracks)
• Projects you create (timeline data, style configurations)
• Video clips you upload (paid tiers)
• AI-generated content (cover art, visualizer output)
• Export history (render jobs and output files)

Technical data

• IP address, browser type, and device information
• Pages visited, features used, and timestamps
• Error logs and performance data

• Providing and operating the service (account management, projects, rendering)
• Processing payments and managing subscriptions via Stripe
• Sending transactional emails (verification, password reset, render complete, credits low)
• Sending marketing emails (only with your opt-in consent — unsubscribe anytime in Account Settings)
• Improving the service (usage analytics, bug fixes, feature development)
• Detecting abuse and enforcing our Terms of Service
• Complying with legal obligations

Under the GDPR, we process your data on the following legal bases:

• Contract performance — account operation, payment processing, service delivery
• Legitimate interests — security, fraud prevention, service improvement, analytics
• Consent — marketing emails and non-essential cookies (you can withdraw consent at any time)
• Legal obligation — tax records, law enforcement requests

We use the following sub-processors to operate Revori. Each is bound by a data processing agreement and processes data only on our instructions. We share the minimum needed for each purpose.

• Hetzner (Germany, EU) — hosting, storage, and processing of your account, projects, uploads, and outputs
• Stripe (EU / USA) — payment and subscription processing; we never receive your full card number
• Deepgram, AssemblyAI, ElevenLabs (USA) — speech-to-text transcription; your audio is sent for transcription only and is not retained by the provider for training
• Anthropic (USA) — transcript refinement and content analysis (e.g. genre/mood); not used to train their models
• OpenRouter (USA) — routes your prompts to the AI image/video model you choose for cover art and visual generation
• Email provider (Titan / Hostinger) — delivery of transactional email, and marketing email only if you opted in

We may also disclose data to law enforcement or regulators when legally required. This list may change as our providers evolve; we keep it current here and announce material changes per the “Changes to This Policy” section.

We never sell your personal data.

Your data may be processed outside your country of residence, including in the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the European Commission.

• Account data — retained while your account is active, deleted within 30 days of account deletion
• Projects and uploads — retained while active; deleted 30 days after account deletion or tier downgrade
• Render outputs — available for download for 12 hours after completion, then deleted
• Billing records — retained for 7 years as required by tax law; this includes the corresponding customer record at Stripe, our payment processor, which is kept after account deletion for the same reason
• Server logs — retained for 90 days

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request we limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting prior processing

To exercise any right, email privacy@revori.app. We respond within 30 days.

You can delete your account at any time from Account Settings. This permanently removes all your data within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

Revori is not intended for children under 13, or under 16 in the EU without parental consent. We do not knowingly collect personal data from children. If we learn we have collected data from a child below the applicable age, we will delete it promptly. If you believe a child has provided us data, contact privacy@revori.app.

We use essential cookies to keep you logged in and functional storage (localStorage) for editor preferences and cookie consent status. For full details, see our Cookie Policy.

For product analytics, Revori uses its own first-party, privacy-preserving system — no third parties. It sets no cookies and stores no personal data: we never keep your IP address or any reversible identifier (visitor counts derive from a one-way daily hash). It also honours Do Not Track / Global Privacy Control. We use no third-party analytics or advertising cookies.

We protect your data with industry-standard measures:

• Passwords hashed with Argon2 (irreversible)
• Access tokens stored in memory only (never localStorage)
• HTTPOnly cookies for refresh tokens
• HTTPS encryption for all connections
• Rate limiting on authentication endpoints

No system is 100% secure. If we discover a data breach affecting your personal data, we will notify you and relevant supervisory authorities as required by law within 72 hours.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent in-app notice at least 30 days before taking effect. Your continued use of Revori after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

For privacy inquiries or to exercise your data rights: privacy@revori.app

For general support: support@revori.app