Overview
RevStx LLC ("RevStx," "we," "our," or "us") is a Revenue Operations Execution Firm serving Mortgage, Insurance, and Wealth Management firms. This Privacy Policy governs the collection, use, disclosure, and protection of personal information when you:
- Visit or interact with our website at revstx.com
- Engage with our services including CRM Architecture, Email Deliverability, Identity Resolution, Speed-to-Lead, Branded Caller ID, Agentic Playbooks, and RevOps Audit Sprints
- Communicate with us via email, phone, or web forms
- Execute a service agreement or engagement with RevStx
RevStx operates exclusively in a business-to-business (B2B) context. The personal data we collect is primarily professional contact information from business representatives. We do not market to or collect data from consumers directly.
By using our website or engaging our services, you acknowledge and consent to the data practices described herein. If you do not agree with this policy, please discontinue use of our site and services.
Information We Collect
We collect information in two primary ways: information you provide directly, and information collected automatically during site interactions.
Information You Provide
- Contact Information: Name, business email address, phone number, company name, and job title — provided via contact forms, consultation requests, or direct communication
- Engagement Data: Details shared during discovery calls, audits, onboarding, or ongoing service delivery
- Payment Information: Billing name, address, and payment method details processed through our payment processors (we do not store raw card data)
- Communications: Emails, messages, and records of correspondence with RevStx personnel
- Contractual Data: Information contained in signed agreements, statements of work, and service contracts
Information Collected Automatically
- Usage Data: Pages visited, time on page, referring URLs, and click-through behavior via analytics tools
- Device & Technical Data: IP address, browser type, operating system, and device identifiers
- Cookies & Tracking Pixels: Session identifiers, preference cookies, and analytics tags (see Section 7)
Data From Third Parties
- CRM Platforms: Contact and behavioral data synced from platforms including Salesforce, HubSpot, GoHighLevel, or similar systems in the course of client engagements
- Identity Resolution Vendors: Data enrichment signals used to match leads across data sources as part of our Identity Resolution service offering
- Dialer & Caller ID Platforms: Call metadata associated with our Branded Caller ID service delivery
How We Use Your Data
RevStx uses collected information for the following purposes:
| Purpose | Description | Lawful Basis |
|---|---|---|
| Service Delivery | Configuring CRM environments, deploying email infrastructure, executing playbooks, and fulfilling contracted RevOps services | Contract performance |
| Sales & Engagement | Responding to inbound inquiries, scheduling discovery calls, and qualifying prospective clients | Legitimate interest |
| Communication | Sending service updates, invoices, onboarding materials, and operational notifications | Contract / consent |
| Marketing | Sending relevant content, case studies, or service updates to opted-in contacts | Consent |
| Analytics & Improvement | Understanding website usage patterns to improve content and UX | Legitimate interest |
| Legal Compliance | Maintaining records for tax, regulatory, or contractual obligations | Legal obligation |
We do not sell your personal information to third parties for their independent marketing purposes. Period.
Data Sharing
RevStx may share your information with the following categories of parties, strictly on a need-to-know basis:
Service Providers & Subprocessors
- CRM Platforms: Salesforce, HubSpot, GoHighLevel — for service execution on your behalf
- Email Infrastructure: SMTP relay providers, deliverability monitoring tools, and domain verification services
- Payment Processors: Stripe or equivalent PCI-DSS compliant providers
- Analytics: Google Analytics or similar platforms configured with data minimization settings
- Communication Tools: Slack, Zoom, or project management platforms used in client delivery
Business Transfers
In the event of a merger, acquisition, or asset sale, client data may be transferred as part of that transaction. We will notify affected clients and provide opt-out options where legally required.
Legal Requirements
We may disclose information when required by law, court order, or to protect the rights, property, or safety of RevStx, its clients, or the public.
RevStx does not sell, rent, or monetize your personal information to data brokers, advertisers, or unaffiliated third parties. Our business model is service revenue — not data revenue.
Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements.
| Data Type | Retention Period |
|---|---|
| Client contract data | 7 years post-engagement (tax/legal compliance) |
| Service delivery records | Duration of engagement + 3 years |
| Prospect contact data | 24 months from last interaction, unless opted out sooner |
| Website analytics data | 14 months (Google Analytics default) |
| Email correspondence | 3 years post-engagement |
| Payment records | 7 years (IRS/financial regulatory requirement) |
Upon expiry of retention periods, data is securely deleted or anonymized. Requests for earlier deletion are honored where no overriding legal obligation applies (see Section 12).
Security
RevStx implements industry-standard technical and organizational safeguards to protect your information:
- TLS/SSL encryption for all data transmitted via our website and client portals
- Access controls with role-based permissions on internal systems
- Multi-factor authentication required for all RevStx personnel accessing client systems
- Regular review of third-party vendor security posture and data processing agreements
- CRM environments configured with field-level security and audit logging as part of our standard Architecture practices
No system is 100% secure. If you believe your data may have been compromised, contact us immediately at privacy@revstx.com.
In the event of a confirmed data breach affecting your personal information, RevStx will notify affected parties within 72 hours of discovery, consistent with applicable legal requirements.
Cookies & Tracking
RevStx's website uses cookies and similar tracking technologies to operate site functionality and measure performance. We use the following categories:
| Category | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Core site functionality; cannot be disabled | Session cookies, security tokens |
| Analytics | Page performance, user flow, bounce rates | Google Analytics (_ga, _gid) |
| Marketing / Retargeting | Tracking conversions and retargeting visitors | Google Ads, LinkedIn Insight Tag |
| Preference | Remembering user settings and choices | Theme, consent status |
You may manage cookie preferences through your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect your ability to access core site content.
We do not use cookies to track individual users' behavior across third-party websites without consent.
A full list of the cookies and tracking technologies in use on revstx.com, with durations and opt-out instructions, is maintained in our Cookie Policy.
Third-Party Services
Our website and service delivery pipeline may integrate with or reference third-party platforms. RevStx is not responsible for the privacy practices of these external services. We encourage you to review their policies independently.
Third-party integrations in common use within our service delivery include platforms such as Salesforce, HubSpot, GoHighLevel, Twilio, and major cloud infrastructure providers. Each engagement is scoped to client-authorized integrations only.
Our website may contain links to third-party resources, publications, or partner sites. These links do not constitute endorsements, and we do not control or monitor their privacy practices.
CRM & Client Data
A core component of RevStx's service offering involves access to clients' CRM environments, contact databases, and marketing automation systems. The following principles govern how we handle this data:
Data Processor Role
When RevStx accesses your CRM, database, or contact lists, we act as a data processor on your behalf. You remain the data controller. We process your data only as directed within the scope of our engagement.
Confidentiality
All RevStx personnel with access to client CRM data are bound by written confidentiality obligations. Client data is never used for any purpose outside the contracted engagement.
Data Handling During Engagement
- Access is granted only to personnel directly assigned to your project
- No client contact data is stored in RevStx-owned systems beyond what is required for project execution
- Upon engagement conclusion, RevStx personnel access credentials are revoked and any locally cached data is deleted
Identity Resolution & Lead Data
Our Identity Resolution service matches leads across data sources using probabilistic and deterministic matching. This process is governed by the data agreements between RevStx, our clients, and applicable data vendors. No matched data is repurposed outside the client's defined use case.
RevStx does not deploy email campaigns or outbound dialing on behalf of clients without confirmation that appropriate consent has been obtained by the client for their contact lists. Compliance with TCPA, CAN-SPAM, and applicable state regulations is the shared responsibility of both RevStx and its clients, with obligations defined in each service agreement.
California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights regarding your personal information:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
- Right to Delete: Request deletion of your personal information, subject to certain exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out of Sale or Sharing: RevStx does not sell or share personal information for cross-context behavioral advertising
- Right to Limit Use of Sensitive Personal Information: Request limitation on use of sensitive personal data categories
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights
To exercise your California privacy rights, submit a verifiable request to privacy@revstx.com. We will respond within 45 days as required by law.
GDPR (EU & UK Residents)
If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR may apply to the processing of your personal data.
Lawful Bases for Processing
We rely on the following lawful bases under Article 6 GDPR:
- Contract (Art. 6(1)(b)): Processing necessary to perform our service agreements
- Legitimate Interests (Art. 6(1)(f)): B2B marketing, analytics, and operational improvements where not overridden by your rights
- Consent (Art. 6(1)(a)): Where you have explicitly opted in to communications or tracking
- Legal Obligation (Art. 6(1)(c)): Financial and regulatory record-keeping
International Data Transfers
RevStx is headquartered in the United States. If you are located in the EU/UK, your data may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms where required.
Data Protection Officer
RevStx does not currently appoint a formal DPO as we are not a large-scale processor of special category data. Privacy-related inquiries should be directed to privacy@revstx.com.
Your Rights
Regardless of your location, you may exercise the following rights regarding your personal information held by RevStx:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data where no legal retention obligation applies
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Restriction: Request we restrict processing in certain circumstances
- Withdraw Consent: Withdraw consent at any time where processing is consent-based (withdrawal does not affect prior lawful processing)
- Unsubscribe: Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us directly
Submit requests to privacy@revstx.com. We will respond within 30 days. Complex requests may require up to 90 days with prior notification.
Children's Privacy
RevStx's services are directed exclusively to business professionals. Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has submitted personal data to us, we will promptly delete such information. If you believe a minor has provided us with data, contact us at privacy@revstx.com.
Policy Changes
RevStx reserves the right to update this Privacy Policy at any time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post a notice on our website for a minimum of 30 days
- Notify active clients via email for significant changes affecting data processing
Your continued use of our website or services after a policy update constitutes acceptance of the revised terms. If you do not agree with material changes, you may discontinue use and request deletion of your data.
Contact Us
For privacy-related inquiries, data subject requests, or questions about this policy, contact RevStx directly:
We take all privacy requests seriously and will respond within the timeframes required by applicable law. If you are unsatisfied with our response, you have the right to lodge a complaint with your relevant data protection authority.