Rev Firm App privacy notice

Effective September 28, 2026. This notice covers The Revenue Firm's Rev Firm iPhone app and its Mac companion. Contact therevenuefirm@gmail.com about privacy, access, or deletion.

Data the app uses

• Account and connection data: Google account email and identity, requested OAuth permissions, access and refresh tokens, a paired device identifier, and short-lived app sessions. The YouTube credential is separate from the work Gmail, Calendar, and Drive connection.
• Google work data, when connected: the signed-in owner's Gmail messages and attachments, Calendar details, and Drive files can be read to answer that owner's request. The current Gmail, Calendar, and Drive permissions are read-only. A private work mailbox is accessible only to its signed-in owner; separately connected shared mailboxes have their own permission boundaries.
• Company YouTube data: the selected Rev Firm channel's identity, video metadata, and analytics are read to answer a request. The YouTube upload permission allows a selected video to be sent to that channel only after a fresh, specific approval. An owner-requested company recording may first be found in the owner's connected work mailbox and staged from its company-owned Drive file onto the Mac. Staging alone does not upload it.
• App content: prompts, replies, relevant connector results, approval decisions, saved conversations, Social videos and captions, and diagnostic information needed to operate and secure the service.

How data is used and shared

The app uses this information to authenticate the owner, carry out requested tasks, show results, and keep conversation and video history. Relevant request text and selected context can be processed by Anthropic's Claude API to produce an answer. Google processes sign-in and API requests. Only an approved private upload sends a selected video file and its metadata to YouTube. The remote connection uses ngrok as an encrypted relay. Social videos can sync through the owner's private iCloud storage if that feature is enabled. Apple's speech service may process transcription when on-device recognition is unavailable.

The Revenue Firm does not sell Google user data, use it for advertising, or use it to train generalized AI models. Google data is used only for the requested app functions, security, and support consistent with Google's API Services User Data Policy, including its Limited Use requirements.

Storage, security, and access

The app stores conversations and Social videos on the phone. The Mac companion stores connection credentials, request and job state, and any staged video files in protected local storage. Optional Social sync uses the owner's private iCloud database. The companion uses HTTPS, scoped permissions, and paired-device authentication. The current pilot limits the company YouTube connection to its authorized owner; employee access is disabled. No security measure guarantees absolute protection.

Retention and choices

The pilot has no automatic deletion schedule for saved conversations, staged files, or local backups; they remain until removed by the owner or on a deletion request. Contact therevenuefirm@gmail.com to request access or deletion of locally held app data and credentials. Google permissions can also be revoked in the Google Account's third-party access settings. Revocation stops future API access but does not by itself erase locally stored results or a video already uploaded to YouTube. Videos uploaded to YouTube remain in the channel until removed separately through YouTube.

Changes

The Revenue Firm will update this notice when the app's data practices change and will show the current effective date here.