Effective Date: March 11, 2026
RevSpeakAI ("we," "us," or "our") operates the RevSpeakAI platform available at revspeakai.com (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our Service — including information about third parties (homeowners) whose personal data may be collected through your use of the recording and lead management features.
RevSpeakAI acts in two distinct capacities with respect to personal data:
This distinction is material under applicable privacy laws including CCPA/CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia VCDPA, the Colorado CPA, and the Texas TDPSA.
When you create an account, we collect your name, email address, organization name, and role within your organization.
When you use the recording feature, we collect and store audio recordings of conversations you initiate. These recordings are transmitted to OpenAI for transcription via the Whisper API. Audio recordings may include the voices and statements of homeowners who are third parties to our service relationship.
We use OpenAI GPT-4o to extract structured data from transcriptions, including homeowner names, phone numbers, email addresses, street addresses, appointment details, objections, energy usage data, and conversation outcomes.
With your device's permission, we collect GPS coordinates when you create map pins or initiate recordings. Location data is considered sensitive personal information under CPRA and certain other state privacy laws. We use location data to associate conversations with geographic locations and to display map-based territory data.
We automatically collect information about how you interact with the Service, including browser type, device information, IP address, and pages visited.
We log per-session recording disclosure acknowledgments, including timestamps and GPS coordinates, to create an audit trail of compliance with recording consent requirements. These records are retained for 3 years.
RevSpeakAI does not collect, use, or store sensitive personal data, including biometric identifiers. Audio recordings are processed solely for transcription and are automatically and permanently deleted after 90 days. If sensitive information (such as financial account numbers) is inadvertently disclosed during a recorded conversation, it may appear in the transcript until the recording is deleted per our retention schedule in Section 9.
Through use of the Service's recording and lead capture features, our customers (solar sales organizations and their representatives) collect personal information about homeowners — individuals who are not parties to our contract and who have not directly consented to the provision of their data to RevSpeakAI.
Homeowner personal data collected through the Service may include:
Homeowners are "consumers" under CCPA (Cal. Civ. Code § 1798.140(g)) and equivalent definitions under other state privacy laws, regardless of the fact that they are third parties to our B2B relationship. Our customers, as data controllers, bear primary responsibility for ensuring a lawful basis for collecting and processing homeowner data.
Homeowners who believe their personal data has been collected through the Service may submit deletion requests to privacy@revspeakai.com. We will process verified deletion requests within 45 days and will notify the relevant customer organization.
We do not sell, rent, or share homeowner personal data with third parties for their independent marketing purposes. We do not use raw, identifiable homeowner personal data for AI model training without documented authorization from the data controller customer.
By using the Service, you grant RevSpeakAI a perpetual, irrevocable, worldwide, royalty-free, sublicensable license to use, process, analyze, and create derivative works from anonymized and de-identified versions of conversation data (including transcriptions and extracted data) for purposes including but not limited to:
This license survives termination of your account. All data used under this license will be anonymized and de-identified such that it cannot reasonably be used to identify any individual. Your raw, identifiable data remains yours and is subject to the deletion provisions in Section 9.
RevSpeakAI provides tools that enable audio recording of conversations. You and your organization are solely responsible for complying with all applicable federal, state, and local laws regarding recording consent, including one-party and all-party (two-party) consent requirements.
The Service displays per-session disclosure scripts as a convenience tool for representatives to read to homeowners before recording. These scripts do not constitute legal advice and do not guarantee compliance with any jurisdiction's law. The exact legal requirements vary by jurisdiction and change over time.
RevSpeakAI logs per-session recording consent acknowledgments (timestamp, GPS location, representative ID) as an audit record. These logs do not capture whether the homeowner actually consented — they record only that the representative acknowledged their disclosure obligation in the app.
We use the following sub-processors and third-party services to operate the platform. Personal data may be transmitted to these parties in the course of providing the Service:
Each sub-processor operates under its own privacy policy and data processing terms. We encourage you to review their policies.
We retain data for the following periods:
| Data Type | Retention Period |
|---|---|
| Audio recordings | 90 days from recording date |
| Conversation transcripts (identifiable) | 1 year — then PII stripped, anonymized transcript retained indefinitely for AI model development |
| Extracted lead data (homeowner PII) | Subscription term + 90 days |
| GPS pin and location data | Subscription term + 90 days |
| Billing records | 7 years (tax/accounting compliance) |
| Recording consent logs | 3 years (legal defense record) |
| Account data (rep profiles) | Subscription term + 30 days |
You may request deletion of your account and associated identifiable data by using the Delete Account feature in account settings or by contacting us at support@revspeakai.com. Upon account deletion, identifiable personal data will be deleted within 30 days subject to the schedule above.
Anonymized and de-identified data that has already been incorporated into aggregate datasets or AI training corpora will be retained in accordance with Section 6.
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
These rights apply to California residents under CCPA/CPRA (Cal. Civ. Code § 1798.100 et seq.) and to residents of other states with applicable privacy laws (Virginia, Colorado, Texas, Connecticut, and others).
To exercise these rights, contact us at privacy@revspeakai.com. We will respond within 45 days of a verified request (extendable to 90 days with notice for complex requests).
We implement industry-standard security measures to protect your data, including: encryption in transit (TLS 1.3), encryption at rest (AES-256 via Supabase), secure authentication, row-level security policies enforcing org-based data isolation, and one-active-session enforcement. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting personal data, we will notify affected organizations within 72 hours of becoming aware, consistent with applicable law.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.
Separately, our customers (sales representatives) must not record conversations with minors under any circumstances. The Service includes a mandatory acknowledgment requiring representatives to confirm that the person they are speaking with is an adult before each recording. See the Terms of Service Section 5.4 for the full minor consent prohibition.
We use essential cookies and local storage to maintain your authentication session and preferences. We do not currently use third-party advertising or analytics cookies.
The Service is currently offered for use in the United States only. If you are located in the European Union, European Economic Area, or United Kingdom, you are not authorized to use this Service at this time. If you believe EU/EEA/UK personal data has been processed through the Service, please contact privacy@revspeakai.com.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
For questions about this Privacy Policy or our data practices: privacy@revspeakai.com
For general support: support@revspeakai.com