RevRoute
Privacy Policy
Important: This Privacy Policy constitutes a legally binding agreement between you and S&T Holdings LLC, an Illinois limited liability company operating under the trade name RevRoute. By accessing or using our website at revroute.net, our managed services, software systems, automation tools, or any related services (collectively, the "Services"), you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must immediately cease all use of the Services.
Scope and Applicability
This Privacy Policy applies to all individuals who: (i) visit or access the revroute.net website; (ii) register for or use the Services; (iii) communicate with us by any means; or (iv) are identified in data submitted to us by our clients (collectively, "Users" or "you").
This Privacy Policy does not apply to information collected by third-party websites or services that we do not control, including third-party platforms such as Meta (Instagram, Facebook), TikTok, or payment processors, which are governed by their own separate privacy policies.
RevRoute operates as both a data controller (with respect to information collected directly from website visitors and clients) and as a data processor or service provider (with respect to customer data processed on behalf of our clients through their connected social media accounts).
Information We Collect
2.1 Information You Provide Directly
- Identity and contact information, including full name, business name, email address, telephone number, and mailing address
- Account credentials and authentication information
- Social media account access tokens, API credentials, and authorization grants for Instagram, Facebook, and TikTok accounts you connect to our Services
- Payment and billing information, collected and processed exclusively by our third-party payment processor Stripe, Inc. RevRoute does not receive, store, transmit, or have access to full payment card numbers or sensitive financial account credentials
- Business information submitted through our client onboarding intake forms, including your services, pricing, booking systems, and operational details
- Communications and correspondence with RevRoute personnel, including support tickets, emails, and meeting notes
- Feedback, testimonials, and survey responses
- Any other information you voluntarily submit to us
2.2 Information Collected Automatically
- Internet Protocol (IP) address and general geographic location
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Referring URLs, exit pages, and navigation paths
- Pages visited, features accessed, and time spent on each page
- Date and time of access
- Error logs and performance metrics
- Session identifiers and authentication tokens
2.3 Cookies and Similar Technologies
We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies. The categories include:
- Strictly Necessary Cookies: Essential for the operation of our website and Services, including session management, authentication, and security
- Analytics and Performance Cookies: Used to understand how users interact with our website. We use Google Analytics for this purpose
- Functionality Cookies: Enable enhanced features and remember your preferences and settings
You may control cookies through your browser settings. Disabling certain cookies may impair your ability to use certain features of the Services.
2.4 Information Received from Third Parties
- Data from connected social media platforms (Instagram, Facebook, TikTok), including profile information, direct message content, follower data, engagement metrics, and API access logs
- Transaction confirmation and billing status information from payment processors
- Infrastructure and performance data from hosting and monitoring providers
2.5 Client Customer Data
In the course of providing DM Automation services, RevRoute will access, process, and in some cases temporarily store messages and communications sent by your customers through your connected social media accounts ("Client Customer Data"). You, as our client, are the data controller of Client Customer Data. RevRoute processes Client Customer Data solely as a data processor acting on your documented instructions.
You represent and warrant that you have obtained all necessary consents, authorizations, and permissions from your customers required under applicable law to permit RevRoute to access and process their communications on your behalf.
Legal Basis for Processing
- Contractual Necessity: Processing necessary to perform our contractual obligations to you as a client
- Legitimate Interests: Processing necessary for our legitimate business interests, including improving our Services, preventing fraud, and ensuring system security
- Legal Obligation: Processing necessary to comply with applicable laws and regulations
- Consent: Where required by applicable law, we will obtain your consent before processing your personal information. You may withdraw consent at any time
How We Use Your Information
4.1 Service Delivery and Operations
- Providing, operating, maintaining, and improving the Services
- Building, deploying, and managing DM automation flows, Conversion Pages, Meta advertising campaigns, and UGC production on your behalf
- Processing and routing automated responses to your customers' direct messages
- Managing your account, subscription, and billing relationship
- Authenticating your identity and preventing unauthorized account access
- Establishing and maintaining integrations with third-party platforms
4.2 Communication
- Transactional communications including order confirmations, receipts, invoices, and service notifications
- Customer support and responding to your inquiries
- Administrative communications including changes to our terms, pricing, or Services
- Service performance, results, and optimization recommendations
4.3 Marketing
We may send you promotional communications about our Services. You may opt out at any time by: (i) clicking the unsubscribe link in any marketing email; or (ii) sending an opt-out request to contact@revroute.net. Opting out of marketing will not affect transactional or administrative communications.
4.4 Analytics and Improvement
- Analyzing usage patterns, performance metrics, and user behavior to improve the Services
- Conducting research and development of new features
- Troubleshooting technical issues
- Monitoring for fraud, abuse, and security threats
- Generating aggregated, de-identified data for lawful business purposes
4.5 Legal and Compliance
- Complying with applicable laws, regulations, and legal processes
- Enforcing our Terms of Service and other agreements
- Responding to lawful requests from law enforcement or governmental authorities
- Protecting against fraud, unauthorized access, and illegal activity
- Establishing, exercising, or defending legal claims
Disclosure of Your Information
RevRoute does not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing purposes. We may share your information only in the following circumstances:
5.1 Service Providers and Subprocessors
Our current service providers include:
- Payment processing: Stripe, Inc.
- Messaging automation: ManyChat, Inc.
- AI and language models: OpenAI, L.L.C.
- Website hosting: Vercel, Inc.
- Database hosting: Neon, Inc.
- Email delivery: Resend, Inc.
- Analytics: Google LLC (Google Analytics)
- Outreach infrastructure: Instantly.ai
5.2 Social Media Platforms
When you authorize RevRoute to connect to your Instagram, Facebook, or TikTok accounts, information is shared with those platforms through their APIs. Such sharing is subject to Meta's and TikTok's respective terms and privacy policies.
5.3 Legal Disclosures
We may disclose your information when we believe in good faith that disclosure is required by applicable law, necessary to enforce our agreements, or necessary to protect the rights, property, or safety of RevRoute, our clients, or the public.
5.4 Business Transactions
In the event of a merger, acquisition, asset sale, or other corporate transaction, your information may be transferred or disclosed as part of that transaction. We will provide notice of any such transfer.
5.5 Aggregated Data
We may share aggregated, de-identified, or anonymized information that does not reasonably identify you for research, marketing, analytics, or other business purposes.
Data Retention
- Client account data: Retained for the duration of the active relationship and 90 days following termination
- Financial and billing records: Retained for 7 years to comply with tax and regulatory requirements
- Client Customer Data: Processed in real time and retained only as long as necessary for operational purposes
- Communications and support records: Retained for 3 years from the date of communication
- Website analytics data: Retained per analytics provider settings, generally not exceeding 26 months
You may request deletion of your personal information at any time by contacting contact@revroute.net. We will process requests within 30 days.
Data Security
We implement commercially reasonable security measures including:
- Encryption of all data in transit using TLS 1.2 or higher
- Encryption of sensitive data at rest using industry-standard algorithms
- Role-based access controls for authorized personnel
- Secure credential management and multi-factor authentication
- Regular security reviews and vulnerability assessments
- Vendor security review procedures for third-party providers
No method of electronic transmission or storage is 100% secure. RevRoute cannot guarantee the absolute security of your information. In the event of a security incident, we will notify you and applicable regulatory authorities as required by law.
Your Rights and Choices
Subject to applicable law, you may have the following rights. To exercise any of these rights, contact contact@revroute.net. We will respond within 30 days.
- Access: Request confirmation and a copy of your personal information
- Rectification: Request correction of inaccurate or incomplete information
- Erasure: Request deletion of your personal information in certain circumstances
- Restrict Processing: Request restriction of processing in certain circumstances
- Data Portability: Receive your information in a structured, machine-readable format
- Object: Object to processing based on legitimate interests or for direct marketing
- Withdraw Consent: Withdraw consent at any time without affecting prior processing
- Opt Out of Marketing: Unsubscribe from marketing emails at any time
Jurisdiction-Specific Rights
9.1 California Residents (CCPA/CPRA)
California residents have additional rights including the right to know, delete, correct, opt out of sale/sharing, and non-discrimination. We do not sell personal information as defined under California law. Submit requests to contact@revroute.net. Response time: 45 calendar days with one permitted 45-day extension.
9.2 Virginia, Colorado, Connecticut, Texas, and Other States
Residents of states with comprehensive consumer privacy laws may have additional rights including access, correction, deletion, and opt-out rights. Contact contact@revroute.net. Response time: 45 days with one permitted 45-day extension.
9.3 Nevada Residents
We do not sell covered information as defined under Nevada law. Submit opt-out requests to contact@revroute.net with "Nevada Privacy Request" in the subject line.
9.4 EEA, UK, and Switzerland
You have additional rights under GDPR including access, rectification, erasure, restriction, portability, and the right to object. You may also lodge a complaint with your local supervisory authority. Contact contact@revroute.net. Response time: 30 days.
Meta Platform and Third-Party Compliance
By engaging RevRoute's DM Automation services, you represent and warrant that:
- You are the authorized owner or administrator of the connected social media accounts
- Your use complies with Meta's Terms of Service, Platform Policy, and all applicable Meta policies
- Your use complies with all applicable laws governing electronic and automated communications
- You have obtained all required consents from your customers and followers
- Your automated messages, conversion pages, advertisements, and UGC do not violate any applicable law or third-party rights
RevRoute is not responsible for any account restrictions, suspensions, or enforcement actions imposed by Meta or any other platform resulting from your content or practices.
Limitation of Liability for Client Data
RevRoute acts as a service provider and data processor on behalf of its clients. Client is solely responsible for: (i) ensuring all necessary rights and consents; (ii) compliance with applicable laws; (iii) the accuracy and legality of Client Customer Data; and (iv) notifying RevRoute of any changes affecting processing activities. Client agrees to defend, indemnify, and hold harmless RevRoute from claims arising from Client's failure to obtain required consents, violation of applicable law, violation of platform policies, or Client Customer Data provided to RevRoute.
Children's Privacy
The Services are not directed to individuals under 18 years of age. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to promptly delete such information. Contact contact@revroute.net if you believe we have collected information from a child.
International Data Transfers
RevRoute is operated from Illinois, United States. Your personal information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Services, you consent to such transfers. Where required by law, we will implement appropriate safeguards such as Standard Contractual Clauses.
Data Breach Notification
In the event of a security breach, RevRoute will notify you and applicable regulatory authorities as required by law, without undue delay and, where feasible, within 72 hours. Notifications will include a description of the breach, categories and number of individuals affected, likely consequences, and measures taken to address the breach.
Third-Party Links
The Services may contain links to third-party websites not operated by RevRoute. This Privacy Policy applies only to the Services. We encourage you to review the privacy policies of every website or service you visit.
Changes to This Privacy Policy
RevRoute reserves the right to modify this Privacy Policy at any time. We will provide notice of material changes by updating the dates at the top of this policy and posting a notice on revroute.net. Your continued use of the Services after changes constitutes acceptance.
Governing Law and Dispute Resolution
This Privacy Policy is governed by the laws of the State of Illinois. Disputes shall be resolved by binding arbitration administered by the American Arbitration Association in Cook County, Illinois. Each party waives any right to participate in a class action lawsuit or class-wide arbitration.
Contact Information
RevRoute
Operated by S&T Holdings LLC
State of Illinois, United States
Email: contact@revroute.net
Website: revroute.net
We will respond to all privacy-related inquiries within 30 days of receipt.
Miscellaneous
- Severability: If any provision is found invalid, the remaining provisions continue in full force
- Entire Agreement: This Privacy Policy and our Terms of Service constitute the entire agreement regarding the subject matter hereof
- No Waiver: Failure to enforce any provision does not constitute a waiver
- Language: The English version controls in the event of any conflict with a translation
- Assignment: RevRoute may assign this Privacy Policy in connection with corporate transactions. You may not assign without our written consent
© 2026 S&T Holdings LLC. RevRoute. All Rights Reserved.