GDPR Compliance

RevMonk is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all companies processing the personal data of individuals in the European Union, regardless of where the company is located.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of all personal data we hold about you.

Right to Rectification

You can request that we correct any inaccurate or incomplete data.

Right to Erasure

You can request that we delete your personal data ("right to be forgotten").

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Object

You can object to certain types of processing, including direct marketing.

Right to Withdraw Consent

Where we rely on consent, you can withdraw it at any time.

How We Comply with GDPR

RevMonk takes GDPR compliance seriously. Here's how we protect your data:

  • Lawful Basis - We only process data when we have a lawful basis (consent, contract, legal obligation, or legitimate interest)
  • Data Minimization - We only collect data that is necessary for our services
  • Purpose Limitation - We only use data for the purposes we disclosed when collecting it
  • Storage Limitation - We don't keep data longer than necessary
  • Security - We implement appropriate technical and organizational measures
  • Transparency - We provide clear information about how we use your data
  • Accountability - We maintain records of our data processing activities

Data Processing

We process the following types of personal data:

  • Account information (name, email, password)
  • Business information (company name, locations)
  • Review data from connected platforms
  • Usage data and analytics
  • Communication data (support tickets, emails)

Data Transfers

When we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

How to Exercise Your Rights

To exercise any of your GDPR rights, please:

  • Email us at hello@revmonk.ai with your request
  • Include your account email and specify which right you wish to exercise
  • We will respond within 30 days
  • We may need to verify your identity before processing your request

Supervisory Authority

If you believe we have not complied with GDPR, you have the right to lodge a complaint with your local data protection authority.

Contact Our Data Protection Officer

For any questions about our GDPR compliance or to exercise your rights:

Data Protection Officer

Email: dpo@revmonk.ai
Address: 123 Business Street, San Francisco, CA 94105

Need Help?

If you have questions about your data rights or our GDPR compliance, we're here to help.