Privacy Policy

RevRoute is the service name used by S&T Holdings LLC, an Illinois limited liability company with principal offices in Illinois, United States ("RevRoute," "we," "us," or "our").

This Privacy Policy applies to personal information RevRoute receives through:

• https://revroute.net, https://www.revroute.net, https://revroute-web-v4.vercel.app, and any successor or staging domain that displays or links to this Policy;
• business inquiries and the public contact form;
• booking or scheduling activity shared with RevRoute;
• client relationships, proposals, project delivery, hosting and maintenance, landing-page work, Meta advertising management, and related communications;
• invoices, billing, and account administration.

Controller / business vs. service provider. RevRoute determines why and how personal information is used when it handles website inquiries, business contacts, billing records, and its own operations. When RevRoute processes personal information solely on a client's documented instructions (for example, operating a client advertising account or handling lead data the client supplies), the client remains the business or controller and RevRoute acts as its service provider, contractor, or processor to the extent applicable law uses those terms.

What this Policy does not cover. This Policy does not govern a third-party site, platform, scheduler, social network, payment service, hosting platform, advertising platform, or client website that has its own privacy practices. It also does not replace a client privacy notice or a separately signed data-processing addendum.

2.1 Information you provide

• Name, business name, role, email address, telephone number, mailing or business address, website URL, and other business contact details.
• Enquiry and booking details, including information you submit through the contact form (name, email, business name, website URL, project details), Calendly (or similar), email, chat, phone, or video meetings. A hidden anti-spam field may be present on the form and should be left blank.
• Project communications, meeting notes, approvals, feedback, support requests, and relationship history.
• Brand assets, copy, images, video, business records, domain and platform details, access permissions, and other materials supplied for an engagement.
• Invoice, billing, transaction-status, tax, and accounting records. A payment processor may collect full payment details directly when one is used.
• Advertising account permissions, audience instructions, campaign materials, performance information, and lead or conversion data made available for an advertising engagement.
• Any other information you choose to provide.

2.2 Information collected automatically

The hosting and security infrastructure that serves the public marketing site may automatically process IP address, requested URL, timestamp, browser and device information, referrer, network and security events, error information, and similar server-log data needed to deliver, secure, and troubleshoot the site.

As of the Last updated date, the production marketing site uses Google Analytics 4 (via Google Tag Manager / gtag, measurement ID G-LTP7CQQTSP) to understand how visitors use the site (for example, pages viewed, approximate location derived from IP, device/browser type, and referral source). Google may process this data as described in Google's privacy documentation. RevRoute uses this information to improve the site and business operations, not to sell personal information for money.

RevRoute does not currently deploy Meta (Facebook/Instagram) advertising pixels, session-replay tools, or other first-party behavioral-advertising cookies on the public marketing site. If additional trackers are added, we will update this Policy before or when they go live.

2.3 Information from third parties

RevRoute may receive booking and contact information from Calendly or a similar scheduler; transaction status from a payment provider; infrastructure and security information from hosting providers; business contact information from referral sources or public business profiles; and data from client-authorized platforms used to perform an engagement.

Analytics. The production public marketing website uses Google Analytics 4 cookies or similar local storage as configured by Google for measurement. You can limit Google Analytics collection using Google's browser add-on or your browser controls where available.

Advertising / sale. RevRoute does not currently use Meta advertising pixels or other first-party tools on the marketing site for cross-context behavioral advertising, and does not sell personal information for money. Infrastructure providers (including hosting and content-delivery providers) may use strictly necessary technologies for security, request routing, fraud prevention, load balancing, or service operation.

Clicking a booking link opens Calendly or another third-party scheduler. Clicking LinkedIn, portfolio sites, or another external link opens a third-party service. Those services may use their own cookies and tracking technologies under their own policies. RevRoute does not control those technologies.

If RevRoute later uses personal information for targeted advertising or “sale”/“sharing” as defined by applicable state law, it will update this Policy and honor legally recognized opt-out signals (including Global Privacy Control) where required.

• Respond to inquiries, schedule calls, prepare proposals, and communicate about potential or active work.
• Scope, design, develop, deploy, host, maintain, support, and improve websites and landing pages.
• Plan, create, operate, measure, and report on client-authorized advertising campaigns.
• Administer contracts, approvals, accounts, invoices, payments, taxes, records, renewals, handoffs, and collections.
• Authenticate access, secure systems, prevent fraud and abuse, investigate incidents, and troubleshoot errors.
• Comply with law, enforce agreements, establish or defend claims, and respond to valid legal process.
• Create aggregated or de-identified operational information that cannot reasonably identify a person.
• Send service, project, administrative, and relationship communications. Send marketing only as permitted by law and honor applicable opt-out requests.

Where a law requires a legal basis, RevRoute processes personal information as needed to take requested steps before a contract or perform a contract, comply with legal obligations, pursue legitimate interests in operating and securing the business (including fraud prevention and collections), establish or defend legal claims, protect a person or system, or act with consent. Consent may be withdrawn where consent is the applicable basis, without affecting earlier lawful processing.

RevRoute does not sell personal information for money. The current public marketing website does not share personal information for cross-context behavioral advertising or use targeted-advertising pixels.

We may disclose personal information to:

• Service providers that support hosting, scheduling, email, communications, billing, payment, file storage, security, professional services, and business operations, subject to appropriate contractual or legal restrictions.
• Calendly or a similar scheduler when you choose to use that service.
• Client-authorized hosting, domain, booking, analytics, advertising, social, content, or other platforms used to perform a client engagement.
• Professional advisers, insurers, auditors, financing sources, and transaction participants with a legitimate need for the information.
• Government authorities, courts, law enforcement, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, systems, users, or the public.
• A successor or transaction participant in a merger, financing, reorganization, sale, or transfer of all or part of the business, subject to applicable law.
• Other parties at your direction or with your consent.

Service providers may process information only for authorized purposes or as otherwise permitted by their agreements and applicable law. Third parties acting for their own purposes are responsible for their own privacy practices.

A client is responsible for the personal information it collects or makes available through its website, landing pages, advertising accounts, booking systems, customer lists, lead systems, and connected platforms. The client must provide required notices, obtain required consent, respond to individual requests, set lawful retention instructions, and ensure its instructions to RevRoute are lawful.

When RevRoute acts solely on a client's documented instructions, it will use the information to perform the agreed services, restrict access to people and providers with a need to know, and not use the information for its own targeted advertising. RevRoute may use de-identified or aggregated operational information that cannot reasonably identify the client or an individual.

The parties will enter a data-processing addendum, business associate agreement, or other legally required agreement only when the actual service and data flow require it. No such legal status or agreement is implied by this Policy.

Do not submit protected health information, medical records, Social Security numbers, government identifiers, payment-card numbers, financial-account credentials, biometric identifiers, precise geolocation, information about children, or other highly sensitive personal information through the public site, contact form, Calendly booking notes, ordinary email, or project-management channels unless RevRoute has expressly authorized the method and the parties have completed every agreement and safeguard required by law.

RevRoute does not knowingly collect biometric identifiers through the public marketing site and does not act as a HIPAA business associate without a signed business associate agreement. If sensitive information is submitted without authorization, RevRoute may delete it, restrict access, suspend processing, or request that it be resent through an approved method.

RevRoute retains personal information only as long as reasonably necessary for the purpose collected, the client relationship, service delivery, security, dispute resolution, legal claims, accounting, tax, insurance, backup, and other legitimate business or legal requirements. Retention depends on the type of information, sensitivity, contractual instructions, risk, and applicable law.

When information is no longer required, RevRoute may delete, destroy, anonymize, or de-identify it. Residual copies may remain for a limited period in backups, archives, fraud-prevention records, security logs, or records required by law. A valid deletion request is subject to lawful exceptions and the need to verify the requester.

RevRoute uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of information and the services. Safeguards may include access controls, secure transport, credential-management practices, limited access, software and dependency maintenance, and service-provider controls. No method of transmission, storage, or processing is completely secure, and RevRoute cannot guarantee absolute security.

If RevRoute determines that a security incident triggers notification duties, it will provide notices to affected persons, clients, regulators, or other parties in the manner and time required by applicable law. For personal information concerning Illinois residents, RevRoute follows the Illinois Personal Information Protection Act, 815 ILCS 530/, including its reasonable-security and breach-notification requirements where they apply.

Report a suspected security issue to contact@revroute.net. Do not include sensitive information in the initial report.

Depending on where you live and whether a law applies to RevRoute, you may have rights to request access, confirmation, correction, deletion, portability, restriction, or an appeal; to withdraw consent; or to opt out of targeted advertising, sale, sharing, or certain profiling. These rights are subject to definitions, thresholds, exceptions, and verification requirements under applicable law (including, where applicable, state consumer privacy laws such as the California Consumer Privacy Act as amended by the CPRA).

Submit a request to contact@revroute.net and identify the request and state of residence. RevRoute may request information reasonably necessary to verify identity, authority, and the relationship to the information. An authorized agent may submit a request where permitted by law, but RevRoute may require proof of authority and direct verification with the individual.

RevRoute will respond within the period required by applicable law and will not unlawfully discriminate against a person for exercising a privacy right. A request may be denied or limited where an exception applies, identity cannot be verified, RevRoute must retain the information, or the information is controlled by a client. Where a client controls the information, RevRoute may direct the request to that client.

To stop promotional email, use the unsubscribe method in the message or email contact@revroute.net. RevRoute may still send nonpromotional project, transactional, security, and legal communications. Commercial email complies with the federal CAN-SPAM Act to the extent it applies.

The website and services are directed to businesses and are not directed to children under 13. RevRoute does not knowingly collect personal information online from a child under 13 (see also the Children's Online Privacy Protection Act). If you believe a child has provided personal information, contact RevRoute so it can investigate and take appropriate action. A person must be at least 18 to enter a client contract.

RevRoute is based in Illinois, United States. Information may be processed in the United States and in other locations where authorized service providers operate. Those locations may have privacy laws different from the laws where you live. Where applicable law requires a transfer mechanism or additional safeguard, RevRoute will use one appropriate to the processing.

RevRoute may update this Policy to reflect changes in services, technology, vendors, legal requirements, or information practices. The Last updated date will change when a revision is posted. Where required by law, RevRoute will provide additional notice or obtain consent before a material change applies to previously collected information.

Questions, legal notices, and privacy requests may be sent to:

Email: contact@revroute.net

RevRoute / S&T Holdings LLC

Illinois, United States

For a request concerning information controlled by a RevRoute client, contact that client directly when possible.