Skip to content

Security & trust

Built in Australia. Owned by you.

Revively is a multi-tenant platform handling customer data, payments, and clinical notes. We take that seriously - here's how it shows up in the product.

Australian made and hosted

Revively is built and operated in Australia by Acorn Apps Pty Ltd (ABN 19 695 896 032). Our infrastructure runs on enterprise cloud providers with data centres serving AU traffic.

Logical multi-tenant isolation

Every row in our database carries a workspace identifier. Application-layer isolation prevents one workspace from seeing another's data. Penetration attempts are a violation of our terms.

Payments via Stripe

We never store raw card data. All payments are processed by Stripe (PCI-DSS Level 1). For tenant payments, funds settle directly to your Stripe Connect account - we never custody your money.

Encrypted credentials

Third-party tokens (Twilio, Meta, Xero) are encrypted at rest. Only the services that need to call those providers can decrypt them - never our API surface.

Spam Act compliance, baked in

Customer marketing opt-ins are tracked per channel. Mandatory opt-out links are added to non-transactional sends. We will suspend outbound pipelines that trigger carrier-level blocks.

30-day grace on expired plans

If your trial or subscription lapses, your workspace shifts to read-only - your data stays for 30 days so you can return without losing anything.

Data ownership

Your data, always.

For the data of your customers - names, bookings, intake answers, notes - you are the controller. We process it on your behalf, bound by the multi-tenant isolation rules above. We do not own, sell, or use your end-clients' data for our own purposes.

You can export customers, bookings, invoices, and form submissions to CSV or JSON at any time. If you ever leave, you take everything with you.

How we share data

We share information exclusively with the sub-processors needed to run the platform - Stripe for payments, Xero for accounting (if you connect it), Twilio and our email delivery provider for messaging, Google for authentication, Railway for infrastructure. We do not sell, rent, or trade your data to brokers or advertisers.

Australian Privacy Principles

Under the Privacy Act 1988 (Cth), you have the right to access, correct, export, and request deletion of your personal information. Customer-side rights are equally respected via your data export tools. Read the full privacy policy for specifics.

Where to escalate

For privacy questions: support@revively.app. If you are unsatisfied with our internal response to a dispute, you can escalate to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Run the business with peace of mind.

AU-hosted, Stripe-secured, and built to OAIC standards. Start the free trial today.