1. What we collect

If you create a Revisato Pro account: your email address and a securely hashed password (we never store your actual password).

Whenever you search, whether or not you have an account: the destination and any context you provide (e.g. "traveling with kids"), which categories you searched, and the results shown to you. We also log your IP address, used only to enforce fair-use search limits and protect against abuse.

If you subscribe to Revisato Pro: your subscription and billing status. Payment itself is handled entirely by PayPal — we never see or store your card or bank details.

2. How we use it

• To run your search and show you results
• To enforce free-tier and fair-use search limits
• To manage your account and subscription
• To detect and prevent abuse
• To improve the Service

3. Who we share it with

We share the minimum necessary data with the third-party services that make Revisato work:

• Google — your search destination and category are sent to Google's Places API to retrieve places, ratings, and reviews.
• Google Analytics — only if you accept analytics cookies in the consent banner, we use Google Analytics to understand how visitors use the site. It doesn't run at all unless you say yes, and you can withdraw consent any time from "Cookie preferences" in the footer.
• Anthropic — for results that include an automated review summary, real review text is sent to Anthropic's Claude to generate that summary.
• PayPal — if you subscribe, PayPal processes your payment and shares your subscription status with us. We never receive your full payment details.

We don't sell your personal data, and we don't share it with anyone else except as required by law.

4. Cookies and local storage

We use a session cookie to keep you signed in and to remember your search preferences during a visit. Your theme (light/dark), language preference, and analytics consent choice are stored in your browser's local storage, not on our servers.

Analytics cookies (Google Analytics) are off by default. We only set them if you click "Accept" on the cookie banner shown on your first visit; clicking "Decline" means none are set. You can change your choice at any time from "Cookie preferences" in the footer.

5. How long we keep it

We keep account and search data for as long as your account is active, plus a reasonable period afterward for legal, billing, and abuse-prevention purposes. You can request deletion at any time (see below).

6. Your rights

You can ask us to access, correct, delete, or export your personal data by emailing hello@revisato.com. If you're in a jurisdiction with specific data-protection rights (such as the EU/UK GDPR or California's CCPA), we'll honor requests consistent with those laws.

7. Security

Passwords are hashed, never stored in plain text. Session data is encrypted. We restrict internal access to account and billing data to authorized staff, protected by password and two-factor authentication, and every access to billing actions is logged.

8. Children

Revisato isn't directed at children under 16, and we don't knowingly collect personal data from them.

9. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above; material changes will be communicated by email to subscribers where required.

10. Contact

Questions about this Privacy Policy, or want to exercise your data rights? Email hello@revisato.com.