1. Who we are
Reva is a product of Velon LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. For your Reva account and this website, we decide how your data is used (we are the "controller"). Contact: support@revafast.com.
2. Clinics and patients
Clinics add their patients' details to Reva to send appointment messages. For that patient data, the clinic is the controller and Velon LLC is its processor: we process it only on the clinic's instructions, to provide Reva, under our Data Processing Agreement. The clinic must have its patients' consent to receive appointment messages on WhatsApp or Telegram; Reva asks the clinic to confirm this before it first adds or imports patients, and records when it did.
WhatsApp appointment messages contain only the patient's first name, the clinic's name and the appointment date and time. A patient can reply STOP at any time to stop receiving messages. If you're a patient, please contact your clinic first; we help clinics answer patients' requests.
3. What data we handle
- Clinic account: name, email, a hashed (never readable) password, clinic name, country, time zone, language and settings. If you sign in with Google, we receive your name and email address from Google.
- Patient data added by clinics: patient names, WhatsApp or Telegram numbers or usernames, appointment dates, times and details, and the messages sent and replies received. Appointment details can include health-related information, such as the reason for a visit; clinics should add only what they need.
- Connection details: the credentials that connect a clinic's WhatsApp or Telegram account, stored encrypted.
- Purchases: what you bought, the amount and the date. Card payments are handled by Whop; we never receive your full card number.
- Support: the emails you send us.
- Waitlist: if you join the waitlist for a sold-out pack, the email or WhatsApp number you give (and your clinic name, if you add it) is used only to tell you when that pack is available again, and is deleted on request.
- Website: basic technical data such as IP address and browser type in server logs.
4. How we use it
- to provide Reva: send the clinic's appointment messages, show its schedule and message history, and process replies;
- to keep accounts and the service secure;
- to handle purchases, refunds and support;
- to meet legal, tax and accounting obligations;
- to understand and improve this website.
We don't sell personal data, and we never use clinic account or patient data for advertising. Where laws such as the GDPR apply, we rely on: performing our contract with the clinic, our legitimate interest in running a secure and useful service, legal obligations, and consent where it's required.
6. International transfers
Velon LLC is based in the United States, and Reva's servers and database are in the United States. Our providers may also process data in other countries. Where the law requires safeguards for these transfers, such as standard contractual clauses, they are put in place.
7. Security
Data is encrypted in transit (HTTPS), and sensitive credentials are encrypted at rest. Each clinic's data is kept separate, passwords are hashed, login attempts are limited, and incoming message events are verified. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.
8. How long we keep it
We keep account and patient data while the clinic's account is active. Message history is deleted automatically after 12 months. Clinics can delete any patient at any time, which removes that patient's records. When an account is closed, we delete or anonymise its data within a reasonable period, except records we must keep by law (such as purchase records for tax).
9. Your rights
Depending on where you are (for example under the GDPR or UK GDPR, or Morocco's Law 09-08), you may have the right to access, correct, delete or export your data, to object to or restrict some uses, and to withdraw consent. Email support@revafast.com to use them. You can also complain to your data protection authority.
11. Children
Reva is for businesses and isn't directed at children. When a clinic adds a minor as a patient, the clinic is responsible for having a valid legal basis, such as a parent's or guardian's consent.
12. Changes
We may update this policy; the new version is posted here with a new date.
13. Contact
Velon LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Email: support@revafast.com.