Security & trust
Revively is a multi-tenant platform handling customer data, payments, and clinical notes for studios across Australia and New Zealand. We take that seriously - here's how it shows up in the product.
Revively is built and operated in Australia by Acorn Apps Pty Ltd (ABN 19 695 896 032), serving studios across Australia and New Zealand. Our infrastructure runs on enterprise cloud providers with data centres serving AU and NZ traffic.
Every row in our database carries a workspace identifier. Application-layer isolation prevents one workspace from seeing another's data. Penetration attempts are a violation of our terms.
We never store raw card data. All payments are processed by Stripe (PCI-DSS Level 1). For tenant payments, funds settle directly to your Stripe Connect account - we never custody your money.
Third-party tokens (Twilio, Meta, Xero) are encrypted at rest. Only the services that need to call those providers can decrypt them - never our API surface.
Customer marketing opt-ins are tracked per channel. Mandatory opt-out links are added to non-transactional sends. We will suspend outbound pipelines that trigger carrier-level blocks.
If your trial or subscription lapses, your workspace shifts to read-only - your data stays for 30 days so you can return without losing anything.
For the data of your customers - names, bookings, intake answers, notes - you are the controller. We process it on your behalf, bound by the multi-tenant isolation rules above. We do not own, sell, or use your end-clients' data for our own purposes.
You can export customers, bookings, invoices, and form submissions to CSV or JSON at any time. If you ever leave, you take everything with you.
We share information exclusively with the sub-processors needed to run the platform - Stripe for payments, Xero for accounting (if you connect it), Twilio and our email delivery provider for messaging, Google for authentication, Railway for infrastructure. We do not sell, rent, or trade your data to brokers or advertisers.
Under the Privacy Act 1988 (Cth), you have the right to access, correct, export, and request deletion of your personal information. Customer-side rights are equally respected via your data export tools. Read the full privacy policy for specifics.
For privacy questions: support@revively.app. If you are unsatisfied with our internal response to a dispute, you can escalate to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
AU-hosted, Stripe-secured, and built for studios in Australia and New Zealand. Start the free trial today.
