Privacy Policy

Last updated: 19 October 2026

Revana AI, Inc. (“Revana”, “we”, “us”) runs revana.si, the Revana API and SeedRouter (seedancerouter.si) (together, the “Service”). This Privacy Policy explains what information we collect, how we use it and the choices you have.

1. Information we collect

Google sign-in. When you continue with Google, Google sends us your Google account ID, email address and name. We ask only for the basic openid, email and profile scopes. We cannot read your Gmail, Drive, contacts or any other Google data.

Email sign-in. When you sign in with your email address, we email you a sign-in link that expires after 15 minutes, sent through our email provider (Resend). We keep your email address to identify your account.

Provider applications. If you apply to serve models on Revana, we keep the company and contact details, pricing and capacity you send us so we can review and answer your application.

Account and billing. Your credit balance, top-ups, charges and receipts; the names of your API keys and a short prefix of each (we store only a one-way hash of the key itself).

Generations. The prompts, images, video and other inputs you send, the settings you choose, and the files we return.

Payments. Card payments are made through Stripe. Stripe sends us the payment status and the last digits and brand of your card. We never receive or store your full card number.

Usage and device data. IP address, browser and device type, pages visited, API requests (time, endpoint, model, status) and error logs.

2. How we use your information

to create your account and keep you signed in;
to run your generations, send them to the model provider that serves your request, and return the results;
to charge your credit balance, process payments and keep billing records;
to secure the Service, prevent fraud and abuse, and enforce our Terms;
to answer support requests and send service emails (receipts, security and account notices);
to understand and improve the Service using aggregated usage data.

We do not sell your personal information, we do not use it for advertising, and we do not use your inputs or outputs to train AI models.

3. Google user data

Revana’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google account ID, email address and name only to create and sign you in to your Revana account and to contact you about it. We do not share this data with third parties except the service providers in section 5 that help us run the Service, or when the law requires it. You can remove Revana’s access at any time at myaccount.google.com/permissions.

4. Payment processing

All payments are processed by Stripe, Inc. Your card details go straight to Stripe and never touch our servers. Stripe’s privacy policy is at stripe.com/privacy.

5. Who we share information with

We share information only as needed to run the Service:

AI model providers that run your generation receive the inputs and settings of that request. They do not receive your name or email.
Stripe, for payments.
Resend, to send sign-in links and service emails.
Google, for sign-in.
Hosting, storage, email and analytics providers that process data on our behalf and under our instructions.
Authorities, when the law requires it, or to protect the rights and safety of our users, the public or Revana.
A buyer or successor, if Revana is involved in a merger, acquisition or sale of assets, under this policy.

6. Data retention

We keep account data while your account is open. Generated files may be deleted 30 days after they are created. Logs are kept for up to 12 months. Billing records are kept as long as tax and accounting law requires. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except records we must keep by law.

7. Security

Data is encrypted in transit. API keys are stored only as one-way hashes, and sessions use signed, HTTP-only cookies. No system is perfectly secure, so please keep your API keys private and tell us at once if you think your account is at risk.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. To make a request, email hello@revana.si from the address on your account. We reply within 30 days.

EEA and UK residents (GDPR). We process your data to perform our contract with you (running your account and generations), for our legitimate interests (security, fraud prevention, improving the Service), to meet legal obligations, and with your consent where we ask for it. You may complain to your local data protection authority.

California residents (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to delete or correct it, and to opt out of its sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising.

9. International transfers

We and our providers process data in the United States and other countries. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.

10. Cookies

We use one cookie to keep you signed in, one short-lived cookie during Google sign-in, and local storage for preferences such as light or dark mode. We do not use advertising or cross-site tracking cookies.

11. Children

The Service is not for anyone under 18. We do not knowingly collect personal data from children. If you think a child has given us data, email hello@revana.si and we will delete it.

12. Changes to this policy

We may update this policy. If a change is material, we will tell you by email or by a notice on revana.si before it takes effect.

13. Contact

Questions or requests: hello@revana.si. Revana AI, Inc.