Revecast Privacy Policy

Privacy Policy

Effective date: June 4, 2026

Revecast, Inc. (“Revecast”, “we”, “us”) provides Revecast Orchestrate, an AI delivery assistant that runs inside Salesforce. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. It applies to Revecast Orchestrate and the revecast.io website.

Information we collect

  • Account information — your name, email address, organization, and the Salesforce identifiers needed to run the product for your company.
  • Usage information — records of the sessions you run with the assistant (which feature you used, when, and the outcome) so administrators can review activity
  • and we can operate and improve the service.
  • Content you provide — the messages you send the assistant, files you attach, and content the assistant generates on your behalf.
  • Connected-service data — when you connect a third-party account (such as Google Workspace, Jira, GitHub, or Slack), the assistant accesses data in that account only as needed to perform the actions you ask it to take. The Google Workspace section below describes that access in detail.

Google Workspace data we access (only when connected)

When you connect a Google Workspace account to Revecast Orchestrate from the Connector Catalog, the assistant gains scoped access to act on your behalf inside that Google account. The following data types are accessed only when you explicitly ask the assistant to perform an action that requires them:

  • Gmail — read inbox and threads, send messages, create drafts, apply labels
  • Google Drive — list, read, create, edit, move, and share files, including Shared Drives you are a member of
  • Google Docs — read and edit document contents
  • Google Sheets — read and write cell values; create new spreadsheets
  • Google Calendar — list, create, update, and delete events
  • Google Contacts — read-only access to your personal contact list
  • Google Workspace Directory — read-only access to your organization’s directory of coworkers
  • Google Tasks — read and write tasks

What we do with this data

  • Google data is processed only to fulfill the specific action you asked the assistant to take, and is handled in active memory during your session.
  • We keep a record of the action taken (which tool was used, when, and with what inputs) for audit purposes, for as long as the related session record is retained.
  • We keep content the assistant generates for you (for example, a document it produces) in an encrypted, organization-isolated store so your administrators can review it.
  • Revecast does not use your session content or your Google data to train AI models. The AI provider that powers the assistant is configured so that data sent through its interface is excluded from model training.
  • We do not sell your Google data and do not share it with third parties beyond the AI processing needed to serve your request.

How to revoke access

  1. In Salesforce: open the Connector Catalog in Revecast Orchestrate and click Disconnect on the Google Workspace card.
  2. With Google: visit https://myaccount.google.com/permissions, find “Revecast Orchestrate”, and click Remove access.

Either path revokes the assistant’s access immediately.

How we use information

We use the information above to operate the assistant, perform the actions you request, provide administrator visibility into usage, secure the service, handle billing, and improve the product. We do not use your content to train AI models and we do not sell personal information.

How we store and protect information

Your information is stored in our secure cloud environment with encryption at rest and encryption in transit. Each customer’s data is isolated so that no other customer can access it. Internal access is limited to a small number of authorized personnel who use multi-factor authentication.

Data retention

  • Session and usage records are retained according to your organization’s configured data-retention policy.
  • Generated deliverables are retained for the duration of your subscription.
  • Google connection credentials are retained for the lifetime of the connection and deleted when you disconnect.

Data deletion and your rights

  • On disconnect: when you disconnect a Google Workspace account, we revoke the credential with Google and delete the stored credential within 24 hours.
  • On account closure: we delete your account data within 30 days.
  • Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact privacy@revecast.io.

Sharing and service providers

We use a limited set of service providers to operate Revecast Orchestrate, including our cloud-hosting provider, the AI model provider that powers the assistant (which does not train on your data), and our payment processor (which sees only payment information). We share information with these providers only as needed to deliver the service, under contractual data-protection obligations.

International users (GDPR) and California residents (CCPA/CPRA)

We process personal information consistent with the GDPR and the CCPA/CPRA. We do not sell or “share” (as defined by the CCPA/CPRA) your personal information. EU/UK transfers rely on Standard Contractual Clauses where applicable. To exercise data rights, contact privacy@revecast.io.

Children’s privacy

Revecast Orchestrate is a business product and is not directed to children under 16. We do not knowingly collect information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy here with a revised effective date.

Contact

Revecast, Inc. 707 W Main Avenue, Suite B1, Spokane, WA 99201 Privacy inquiries: privacy@revecast.io