Privacy Policy

1. Data Controller

The controller responsible for the personal data described in this Privacy Policy is Scrutaris Ventures, Unipessoal Lda, a Portuguese single-member private limited company ("sociedade unipessoal por quotas"), with registered office at Rua da Prata 80, 1100-415 Lisbon, Portugal, registered with the Lisbon Commercial Registry Office ("Conservatória do Registo Comercial de Lisboa") under sole registration and tax number (NIPC) 519605934, with a share capital of €1,000 ("Raveki"). For any question about this Policy or your personal data, contact us at hello@raveki.com.

2. What Data We Collect

We collect the following categories of data:

• Account data — name, email address, password (stored encrypted), preferred language, and country.
• Billing data — processed directly by our payment provider (Stripe); Raveki does not store full card numbers.
• Connected platform data — when you connect an Integration to a third-party marketing or business platform, we access, read-only, the performance, traffic, conversion, campaign, search visibility, or business profile data made available by that platform, including, where applicable, the content of public reviews associated with the business profile, within the scope authorized by you at the time of connection. The current list of available integrations is always visible on Raveki’s Integrations page.
• Waiting list data — if you submit your email through the waiting list form on the site, we store the email and the site’s language at the time of submission, solely to notify you of the Service’s launch, along with additional, non-identifiable information associated with that submission, for marketing metrics purposes.
• Site usage data — raveki.com uses analytics cookies (Google Analytics, Microsoft Clarity) to understand how the site is used. Full detail in our Cookie Policy.
• Visit and signup origin data — when someone arrives on the site or on the Service’s registration pages, we store where they came from: the campaign parameters in the link (e.g. utm_source, gclid, fbclid), only the domain of the referring site (never the full address), the entry page, the language and the browser type. We do not store IP addresses in these records. When the person creates an account, this information is associated with the account, together with a reference to the session in which the account was activated. With analytics cookie consent, we also keep a first-visit identifier in the browser, to understand how the site was first found.

3. Why We Use This Data

• To provide the Service — generating signals, comparisons, and summaries from connected Integrations’ data (contract performance);
• To manage the account, subscription, and billing (contract performance and legal obligations);
• To respond to support requests (contract performance / legitimate interest);
• To send relevant operational communications (e.g. trial-ending notices) and, where applicable, the launch notification to waiting list signups (contract performance / consent);
• To improve the Service and understand site usage (legitimate interest);
• To measure where visitors and signups come from, to assess marketing channels (legitimate interest; the first-visit identifier only with consent);
• To comply with legal and tax obligations (legal obligation).

4. Use of Artificial Intelligence

Raveki’s Intelligence feature uses the Anthropic API to generate natural-language answers from the signals and Workspace data of the user asking. This means part of the information processed by this feature is transmitted to Anthropic to generate that answer. Anthropic acts as a subprocessor of Raveki and is contractually bound not to use data received via the API to train its models.

The data Raveki sends to Anthropic is limited to aggregated metrics and statistical data — numbers, trends, and signals — with no personally identifiable information (PII) about you or third parties. The exception is the text you freely type into the conversation yourself, which is necessarily sent to generate the answer; Raveki recommends you avoid including sensitive personal data, yours or anyone else’s, in your messages.

5. Data Sharing and Subprocessors

We share personal data only with the service providers necessary to operate the Service, namely:

• Microsoft Azure — infrastructure and database hosting, in a European Union region;
• Stripe — payment processing;
• Anthropic — generating answers in the Intelligence feature (see section 4);
• Google Analytics and Microsoft Clarity — usage analytics for raveki.com.

Raveki does not sell personal data to third parties, nor use it for advertising purposes unrelated to the Service.

Raveki’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. International Transfers

Data is stored in a European Union region via Microsoft Azure. We cannot fully exclude that Microsoft, as a global infrastructure operator, may internally process technical or redundancy copies outside the EU, under its own contractual and GDPR compliance safeguards.

Data processed by the Intelligence feature (section 4) is transferred to Anthropic, which may process it outside the European Union. This transfer relies on the applicable contractual safeguards (namely Standard Contractual Clauses) offered by Anthropic for this purpose.

7. Data Retention and Deletion

When you request account deletion, your account immediately becomes inactive: Integrations stop syncing and no new signals are generated. Data is kept in this state for 30 days — after which it is permanently deleted. During that period, you may request reactivation by emailing hello@raveki.com.

If the Integration was made through Meta (Facebook Ads Manager or Instagram), you may also request, at any time, the deletion of only the data obtained that way, without needing to delete your entire Account — simply send a request to hello@raveki.com, specifying the Integration in question.

Records that Raveki is legally required to retain for longer, namely tax and accounting records, are excluded from this deletion.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data Raveki holds about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data ("right to be forgotten");
• Request restriction of, or object to, the processing of your data;
• Request portability of your data to another service;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

These requests can be made at any time via hello@raveki.com.

9. Data Security

Data is encrypted both in transit and at rest. Raveki’s access to third-party platforms you connect is always read-only — Raveki never changes, deletes, or publishes anything on your behalf within those platforms.

10. Cookies

raveki.com uses essential cookies and analytics cookies. Details of each cookie, its purpose, and how you can manage them are described in our Cookie Policy.

11. Children

The Service is not directed at individuals under 18, and Raveki does not knowingly collect data from minors.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated with reasonable advance notice, by email or through the Portal.

13. Contact

For questions about this Policy or your personal data, contact Raveki at hello@raveki.com.