Privacy Policy
Last updated: July 2026
This Privacy Policy explains what information Revokra ("we," "us," "our") collects, how we use it, and the choices you have. By using Revokra, you agree to the practices described here.
1. Information we collect
Account information
When you create an account, we collect your name, email address, and company information. Authentication is handled by Clerk; we do not directly store your password.
Documents you upload and share
We store the files you upload, along with the settings you configure for each share link (expiration, password protection, e-signature requirements, and similar controls).
Recipient and viewer information
When someone opens a document you've shared, we may collect: their email address (if you've enabled the email-gate or password protection), IP address, approximate location derived from that IP address, a device identifier (if device-locking is enabled), browser and device information, and engagement data such as which pages were viewed and for how long.
Precise location
If a document owner enables location requests, a viewer may be asked for their precise device location via their browser's standard permission prompt. This is always optional and requires the viewer's explicit consent -- it is never collected covertly.
E-signature data
When a document requires a signature, we collect the signer's name, email address, signature data (drawn or typed), IP address, and timestamp, in order to create a verifiable audit trail.
2. How we use this information
- To operate and provide the core service (uploading, sharing, tracking, and signing documents)
- To enforce the access controls a document owner configures (passwords, expiration, device-lock)
- To provide analytics to document owners about how their shared documents are being engaged with
- To communicate with you about your account, including transactional emails (invitations, signature requests)
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
3. Third-party service providers
We rely on the following third-party providers to operate Revokra. Each has its own privacy practices governing data they process on our behalf:
- Supabase -- database and file storage
- Vercel -- application hosting
- Clerk -- authentication and account management
- Resend -- transactional email delivery
4. Data retention
Documents and their associated analytics are retained until you delete them or close your account, except where an expiration setting causes a document to become inaccessible earlier. We may retain limited information after account closure where required for legal, security, or fraud-prevention purposes.
5. Your rights and choices
You can access, update, or delete your account information at any time through your account settings. If you are a recipient of a shared document (not a Revokra account holder) and want information about data collected when you viewed a document, contact the sender directly, or reach out to us and we will assist where we are able to.
6. Cookies and similar technologies
We use cookies and similar technologies (such as browser local storage) to maintain your session, remember preferences, and support features like device-locking.
7. Data security
We use industry-standard measures to protect information, including encrypted connections, access controls, and server-side verification of security settings (passwords, device-lock, and email gates are enforced at the data layer, not just in the interface). No system is completely secure, and we cannot guarantee absolute security.
8. Children's privacy
Revokra is not directed to individuals under 18, and we do not knowingly collect information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact us
Questions about this Privacy Policy can be sent to the contact information provided on our website.