RevRoute is a custom website studio. Our primary service is designing, building, hosting, and maintaining custom websites for local venues and service businesses. We also offer optional add-on services, including landing pages, paid advertising management, and direct message (DM) automation. Certain provisions of this Policy apply only when you engage those optional add-ons, and we note that where relevant.
RevRoute operates as a data controller with respect to information we collect directly from website visitors and clients, and as a data processor or service provider with respect to any customer data we process on behalf of our clients through their connected accounts when they engage our optional automation add-on.
This Privacy Policy applies to all individuals who: (i) visit or access the revroute.net website; (ii) engage or use the Services; (iii) communicate with us by any means; or (iv) are identified in data submitted to us by our clients (collectively, "Users" or "you").
This Privacy Policy does not apply to information collected by third-party websites or services that we do not control, including platforms such as Meta (Instagram, Facebook), TikTok, or payment processors, which are governed by their own separate privacy policies.
3.1 Information You Provide Directly
- Identity and contact information, including full name, business name, email address, telephone number, and mailing address
- Project materials you provide for your website, including brand assets, logos, images, copy, booking system details, and other operational or business information
- Account credentials and authentication information
- Payment and billing information, collected and processed exclusively by our third-party payment processor Stripe, Inc. RevRoute does not receive, store, transmit, or have access to full payment card numbers or sensitive financial account credentials
- Communications and correspondence with RevRoute personnel, including inquiries, support requests, emails, and meeting notes
- Feedback, testimonials, and survey responses
- Add-on services only: where you engage our optional automation or advertising add-ons, social media account access tokens, API credentials, and authorization grants for the accounts you connect
- Any other information you voluntarily submit to us
3.2 Information Collected Automatically
- Internet Protocol (IP) address and general geographic location
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Referring URLs, exit pages, and navigation paths
- Pages visited, features accessed, and time spent on each page
- Date and time of access
- Error logs and performance metrics
- Session identifiers and authentication tokens
3.3 Cookies and Similar Technologies
We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies. The categories include:
- Strictly Necessary Cookies: Essential for the operation of our website and Services, including session management, authentication, and security
- Analytics and Performance Cookies: Used to understand how users interact with our website. We use Google Analytics for this purpose
- Functionality Cookies: Enable enhanced features and remember your preferences and settings
- Advertising and Targeting Cookies: Used to measure the performance of our advertising and to show relevant ads to people who have visited our website. We use the Meta pixel for this purpose, which sends information about your visit to Meta Platforms, Inc.
You may control cookies through your browser settings. Disabling certain cookies may impair your ability to use certain features of the Services.
3.4 Information Received from Third Parties
- Transaction confirmation and billing status information from payment processors
- Infrastructure and performance data from hosting and monitoring providers
- Add-on services only: data from connected social media platforms (Instagram, Facebook, TikTok), including profile information, message content, follower data, engagement metrics, and API access logs
3.5 Client Customer Data (Automation Add-On Only)
If you engage our optional DM Automation add-on, RevRoute will access, process, and in some cases temporarily store messages and communications sent by your customers through your connected social media accounts ("Client Customer Data"). You, as our client, are the data controller of Client Customer Data. RevRoute processes Client Customer Data solely as a data processor acting on your documented instructions.
You represent and warrant that you have obtained all necessary consents, authorizations, and permissions from your customers required under applicable law to permit RevRoute to access and process their communications on your behalf.
- Contractual Necessity: Processing necessary to perform our contractual obligations to you as a client
- Legitimate Interests: Processing necessary for our legitimate business interests, including improving our Services, preventing fraud, and ensuring system security
- Legal Obligation: Processing necessary to comply with applicable laws and regulations
- Consent: Where required by applicable law, we will obtain your consent before processing your personal information. You may withdraw consent at any time
5.1 Service Delivery and Operations
- Providing, operating, maintaining, and improving the Services
- Designing, building, deploying, hosting, and maintaining your website
- Building and managing any optional add-ons you engage, including landing pages, advertising campaigns, and DM automation flows
- Managing your account, project, subscription, and billing relationship
- Authenticating your identity and preventing unauthorized account access
- Establishing and maintaining integrations with third-party platforms where you have requested them
5.2 Communication
- Transactional communications including order confirmations, receipts, invoices, and service notifications
- Customer support and responding to your inquiries
- Administrative communications including changes to our terms, pricing, or Services
- Project updates, results, and optimization recommendations
5.3 Marketing
We may send you promotional communications about our Services. You may opt out at any time by: (i) clicking the unsubscribe link in any marketing email; or (ii) sending an opt-out request to contact@revroute.net. Opting out of marketing will not affect transactional or administrative communications.
5.4 Analytics and Improvement
- Analyzing usage patterns, performance metrics, and user behavior to improve the Services
- Conducting research and development of new features
- Troubleshooting technical issues
- Monitoring for fraud, abuse, and security threats
- Generating aggregated, de-identified data for lawful business purposes
5.5 Legal and Compliance
- Complying with applicable laws, regulations, and legal processes
- Enforcing our Terms of Service and other agreements
- Responding to lawful requests from law enforcement or governmental authorities
- Protecting against fraud, unauthorized access, and illegal activity
- Establishing, exercising, or defending legal claims
RevRoute does not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing purposes. We may share your information only in the following circumstances:
6.1 Service Providers and Subprocessors
Our current service providers include:
- Payment processing: Stripe, Inc.
- Website hosting: Vercel, Inc.
- Database hosting: Neon, Inc.
- Email delivery: Resend, Inc.
- Analytics: Google LLC (Google Analytics)
- Advertising measurement: Meta Platforms, Inc. (Meta pixel)
- Messaging automation (automation add-on): ManyChat, Inc.
- AI and language models (automation add-on): OpenAI, L.L.C.
- Outreach infrastructure (marketing add-on): Instantly.ai
6.2 Social Media Platforms (Add-On Services Only)
When you authorize RevRoute to connect to your Instagram, Facebook, or TikTok accounts for an add-on service, information is shared with those platforms through their APIs. Such sharing is subject to Meta's and TikTok's respective terms and privacy policies.
6.3 Legal Disclosures
We may disclose your information when we believe in good faith that disclosure is required by applicable law, necessary to enforce our agreements, or necessary to protect the rights, property, or safety of RevRoute, our clients, or the public.
6.4 Business Transactions
In the event of a merger, acquisition, asset sale, or other corporate transaction, your information may be transferred or disclosed as part of that transaction. We will provide notice of any such transfer.
6.5 Aggregated Data
We may share aggregated, de-identified, or anonymized information that does not reasonably identify you for research, marketing, analytics, or other business purposes.
- Client account and project data: Retained for the duration of the active relationship and 90 days following termination
- Financial and billing records: Retained for 7 years to comply with tax and regulatory requirements
- Client Customer Data (automation add-on): Processed in real time and retained only as long as necessary for operational purposes
- Communications and support records: Retained for 3 years from the date of communication
- Website analytics data: Retained per analytics provider settings, generally not exceeding 26 months
You may request deletion of your personal information at any time by contacting contact@revroute.net. We will process requests within 30 days.
We implement commercially reasonable security measures including:
- Encryption of all data in transit using TLS 1.2 or higher
- Encryption of sensitive data at rest using industry-standard algorithms
- Role-based access controls for authorized personnel
- Secure credential management and multi-factor authentication
- Regular security reviews and vulnerability assessments
- Vendor security review procedures for third-party providers
Subject to applicable law, you may have the following rights. To exercise any of these rights, contact contact@revroute.net. We will respond within 30 days.
- Access: Request confirmation and a copy of your personal information
- Rectification: Request correction of inaccurate or incomplete information
- Erasure: Request deletion of your personal information in certain circumstances
- Restrict Processing: Request restriction of processing in certain circumstances
- Data Portability: Receive your information in a structured, machine-readable format
- Object: Object to processing based on legitimate interests or for direct marketing
- Withdraw Consent: Withdraw consent at any time without affecting prior processing
- Opt Out of Marketing: Unsubscribe from marketing emails at any time
10.1 California Residents (CCPA/CPRA)
California residents have additional rights including the right to know, delete, correct, opt out of sale/sharing, and non-discrimination. We do not sell personal information for money. We do use the Meta pixel on our website, which may be considered "sharing" for cross-context behavioral advertising under California law. You can opt out by emailing contact@revroute.net with "Do Not Sell or Share My Personal Information" in the subject line, by using your browser's cookie controls, or by sending a Global Privacy Control signal, which we honor. Submit requests to contact@revroute.net. Response time: 45 calendar days with one permitted 45-day extension.
10.2 Virginia, Colorado, Connecticut, Texas, and Other States
Residents of states with comprehensive consumer privacy laws may have additional rights including access, correction, deletion, and opt-out rights. Contact contact@revroute.net. Response time: 45 days with one permitted 45-day extension.
10.3 Nevada Residents
We do not sell covered information for money as defined under Nevada law. Submit opt-out requests to contact@revroute.net with "Nevada Privacy Request" in the subject line.
10.4 EEA, UK, and Switzerland
You have additional rights under GDPR including access, rectification, erasure, restriction, portability, and the right to object. You may also lodge a complaint with your local supervisory authority. Contact contact@revroute.net. Response time: 30 days.
If you engage RevRoute's automation or advertising add-ons, you represent and warrant that:
- You are the authorized owner or administrator of the connected social media accounts
- Your use complies with Meta's Terms of Service, Platform Policy, and all applicable Meta policies
- Your use complies with all applicable laws governing electronic and automated communications
- You have obtained all required consents from your customers and followers
- Your automated messages, landing pages, and advertisements do not violate any applicable law or third-party rights
RevRoute is not responsible for any account restrictions, suspensions, or enforcement actions imposed by any platform resulting from your content or practices.
The Services are not directed to individuals under 18 years of age. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to promptly delete such information. Contact contact@revroute.net if you believe we have collected information from a child.
RevRoute is operated from Illinois, United States. Your personal information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Services, you consent to such transfers. Where required by law, we will implement appropriate safeguards such as Standard Contractual Clauses.
In the event of a security breach, RevRoute will notify you and applicable regulatory authorities as required by law, without undue delay and, where feasible, within 72 hours. Notifications will include a description of the breach, categories and number of individuals affected, likely consequences, and measures taken to address the breach.
RevRoute reserves the right to modify this Privacy Policy at any time. We will provide notice of material changes by updating the dates at the top of this policy and posting a notice on revroute.net. Your continued use of the Services after changes constitutes acceptance.
This Privacy Policy is governed by the laws of the State of Illinois. Disputes shall be resolved by binding arbitration administered by the American Arbitration Association in Cook County, Illinois. Each party waives any right to participate in a class action lawsuit or class-wide arbitration.
RevRoute
Operated by S&T Holdings LLC
State of Illinois, United States
Email: contact@revroute.net
Website: revroute.net
We will respond to all privacy-related inquiries within 30 days of receipt.
- Severability: If any provision is found invalid, the remaining provisions continue in full force
- Entire Agreement: This Privacy Policy and our Terms of Service constitute the entire agreement regarding the subject matter hereof
- No Waiver: Failure to enforce any provision does not constitute a waiver
- Language: The English version controls in the event of any conflict with a translation
- Assignment: RevRoute may assign this Privacy Policy in connection with corporate transactions. You may not assign without our written consent
© 2026 S&T Holdings LLC d/b/a RevRoute. All Rights Reserved.
NEED CLARITY?
Questions about this document?
Send us the section and your question. We’ll point you to the right answer.