Privacy and data handling
Privacy Policy
This policy describes the information Raavue processes, why it is needed, the providers involved, the controls available to you, and when information is deleted.
Effective and last updated: October 18, 2026
1. Who we are and our role
Raavue provides AI-assisted financial reporting software. For account, billing, website, security, and support information, Raavue determines why and how information is processed. For personal information contained in files a customer uploads, the customer determines the purpose and Raavue processes that information to provide the service.
Privacy questions and requests can be sent to privacy@raavue.com. Account holders can also use the Privacy controls in Settings.
2. Notice at collection
At or before signup, contact submission, checkout, and file upload, we collect the categories below for the stated purposes. We do not sell personal information or share it for cross-context behavioral advertising.
| Category | Examples | Primary purposes |
|---|---|---|
| Identifiers | Name, work email, account UUID, IP address | Create and secure the account, communicate, prevent abuse |
| Commercial information | Plan, subscription, invoices and payment status | Provide plans, billing and support; Stripe processes card details |
| Internet and activity data | Login, feature, report and consent events; device and browser details | Security, reliability and—only with analytics permission—product measurement |
| Professional information | Company, industry, role and team membership | Configure reports, organizations and collaboration |
| Customer content | CSV, Excel and PDF files; financial and operating data; reports | Parse files, generate the requested analysis, retain results under the selected plan |
| Communications | Support messages and email preferences | Respond to requests and send selected service communications |
Do not upload personal information that is unnecessary for the report. If a file contains information about employees, customers, or other people, you are responsible for having authority to provide it.
3. Sources and purposes
We receive information directly from you, from your organization administrator, automatically from your device and use of the service, and from providers involved in authentication, billing, communications, analytics, and report processing.
- Provide, authenticate, maintain, troubleshoot, and secure Raavue.
- Parse uploaded files and generate reports, calculations, evidence references, and exports you request.
- Administer subscriptions, trials, payments, teams, support, and transactional email.
- Detect fraud, enforce terms, comply with law, and protect users and the service.
- Measure and improve the product only where optional analytics permission has been granted.
4. AI processing and customer files
Raavue sends the portions of uploaded content needed to configured AI providers, such as Anthropic or OpenAI, to produce the report requested by the customer. Raavue does not use customer-uploaded financial files to train a generalized Raavue model or sell them to data brokers.
AI-generated output can be incomplete or incorrect. Reports are designed for review and do not replace professional accounting, tax, audit, legal, or investment advice.
5. When information is disclosed
We disclose information only as necessary to provide the service, follow your instructions, complete a transaction, protect the service, or comply with law. Current provider categories include:
- Supabase: authentication, database and file storage.
- Vercel: application hosting and, with permission, web performance analytics.
- Anthropic and OpenAI: configured report-generation processing.
- Stripe: checkout, subscription, invoice and payment processing.
- Brevo: transactional and opted-in marketing communications.
- PostHog: optional product analytics; session replay is disabled by Raavue.
- Google: OAuth sign-in and reCAPTCHA security verification when those features are used.
We may also disclose information in a business transaction subject to appropriate confidentiality and continued legal protections, or where required by a valid legal process.
6. Retention and deletion
Trial and Starter files and reports
Automatically deleted after 7 days
Professional files and reports
Automatically deleted after 30 days
Enterprise files and reports
Configured in the customer agreement
Account and profile information
Kept while the account is active, then deleted or de-identified unless legally required
Billing and transaction records
Kept for up to 7 years where required for tax, accounting, fraud, and dispute records
Support communications
Normally kept for up to 2 years
Security and IP logs
Normally kept for up to 12 months unless needed to investigate abuse
Consent and privacy-request records
Kept as evidence of the request, response, and applicable preference
Deletion jobs remove database records and the associated stored file objects. Residual encrypted backups are isolated from ordinary use and expire under infrastructure backup cycles. We may preserve narrowly scoped information when legally required or necessary to prevent fraud or establish legal claims.
7. Your privacy controls
Depending on where you live, you may ask to access, correct, delete, restrict, object to, or receive a portable copy of personal information. You can download a machine-readable JSON export and submit a tracked request from Settings. You can also email privacy@raavue.com.
- We verify requests using the authenticated account or other proportionate information.
- An authorized agent may submit a request with proof of authority; we may still verify the request directly with the account holder.
- We aim to respond within 30 days and will explain if applicable law permits additional time.
- We will not discriminate against you for exercising an applicable privacy right.
- You may change optional analytics, marketing, and preference storage through Cookie Preferences.
8. California privacy information
The California Consumer Privacy Act applies to businesses that meet statutory thresholds. Whether or not every CCPA right applies to Raavue at a particular time, Raavue provides the access, correction, deletion, portability, preference, and nondiscrimination controls described above.
Sale, sharing, and sensitive information
Raavue does not sell personal information and does not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics about people. If these practices change, we will update this notice and provide the controls required before the change takes effect.
Browser privacy signals
Raavue recognizes Global Privacy Control and Do Not Track signals by keeping optional marketing and analytics disabled. Because Raavue does not sell or share personal information for behavioral advertising, there is currently no separate “Do Not Sell or Share” transaction to process.
California categories
The categories collected, purposes, sources, provider categories, and retention approach are stated in Sections 2–6. In the preceding 12 months, Raavue has not sold or shared those categories for cross-context behavioral advertising.
9. Security, international processing, and incidents
Raavue uses access controls, encrypted transport, provider encryption at rest, row-level database controls, rate limiting, multifactor authentication options, and automated file-deletion processes. No system is completely secure. If an incident triggers a legal notification duty, Raavue will notify affected people and authorities as required.
Providers may process information in countries other than your own. Raavue uses contractual and technical safeguards appropriate to the service and applicable law.
10. Children and policy changes
Raavue is a business service not directed to children under 18, and we do not knowingly create accounts for them. We will post material policy changes here, update the effective date, and provide additional notice where required.
Questions or requests
Email privacy@raavue.com, or use the authenticated privacy tools in Account Settings.