Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Revolv Intelligence (ABN 85 530 656 365) ("we", "us", "our") collects, uses, stores, and protects your information when you use Anima. We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

Account information

Name, email address, username, and password (hashed, never stored in plaintext).

Data you store

Projects, decisions, session logs, state entries, tech stacks, blockers, and any other content you create through the service. This is your data — you own it entirely.

Billing information

Payment details are processed and stored by Stripe. We store only your Stripe customer ID and subscription status — never your card number, CVV, or full payment details.

Usage data

We collect basic usage metrics including login times, feature usage counts, and session activity to improve the service. We do not use third-party analytics trackers.

Authentication data

We use httpOnly secure cookies and hashed bearer tokens for authentication. We log authentication events (login, logout, password changes) for security purposes.

2. Our Commitment to Your Privacy

In plain language:

We never sell your data. Not to advertisers, data brokers, or anyone else. Ever.
We never read your data. Your projects, decisions, and memory are private. Our team does not access your account content unless you explicitly ask us to for support purposes.
We never use your data to train AI models. Your memory content is never used for model training, fine-tuning, or any form of machine learning beyond the specific features you opt into.
We never share your data with third parties for their benefit. The only third-party processing is what's required to run the service (payments, email delivery, hosting) — and we list every provider below.
Your data is isolated. Each account's data is completely separated. No other user, team, or organisation can access your data. Even shared project members can only see data within that specific shared project.
You can delete everything. Account deletion is permanent and complete — we remove all your data from our systems, not just hide it.

3. How We Use Your Data

To provide and operate the Anima service
To authenticate your identity and secure your account
To process payments via Stripe
To send transactional emails (verification, password reset, support responses)
To improve the service based on aggregated, anonymised usage patterns
To respond to support requests
To comply with legal obligations

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties for their marketing purposes.

4. AI Processing

On paid plans, Anima may process session summaries using Anthropic's AI (Claude) to automatically extract decisions, action items, and key information. This processing:

Is opt-in (only on paid plans with the enrichment feature enabled)
Sends only AI-generated session summaries — not raw user input or credentials
Includes automated PII scrubbing (emails, phone numbers, API keys are redacted before processing)
Is governed by Anthropic's data processing terms

Your stored data (projects, decisions, state) is never sent to third-party AI services. Only session summaries are processed, and only with PII removed.

5. Data Storage and Security

Your data is protected by multiple layers of security:

Encryption at rest for sensitive credentials (AES-256-GCM)
Passwords hashed with scrypt (not stored in plaintext)
HTTPS for all data in transit
Per-account data isolation — your data is never mixed with other accounts
Rate limiting and brute-force protection
Two-factor authentication (TOTP) available for all accounts
Daily encrypted backups
Immutable audit logging of all data mutations

Data is hosted on Railway (cloud infrastructure) in secure, managed environments. We select infrastructure providers with appropriate security certifications.

6. Data Sharing

We share your data only with the following third-party services, solely to operate Anima:

Stripe — payment processing (receives your email and payment details)
Resend — transactional email delivery (receives your email and name)
Anthropic — AI processing of session summaries (paid plans, PII-scrubbed)
Railway — cloud hosting (data stored on their infrastructure)

We may also disclose your data if required by law, court order, or government request. We will notify you of such requests unless legally prohibited from doing so.

7. Cookies

Anima uses a single httpOnly secure cookie for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. The authentication cookie is essential for the service to function and cannot be disabled.

8. Your Rights

You have the right to:

Access your data at any time through the dashboard or API
Correct your account information through Settings
Delete your account and all associated data at any time from Settings
Export your data by contacting support
Withdraw consent for optional processing (e.g., AI enrichment) at any time

Account deletion is permanent. When you delete your account, all your data — including projects, decisions, session logs, credentials, and profile information — is permanently removed from our systems.

9. Data Retention

We retain your data for as long as your account is active. After account deletion, all user data is permanently removed. Backups containing deleted data are rotated and overwritten within 7 days. Audit logs may be retained for up to 90 days after account deletion for security and fraud prevention purposes.

10. Children

Anima is not intended for use by anyone under 18 years of age. We do not knowingly collect data from children. If we learn that we have collected data from a child under 18, we will delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects when the policy was last modified.

12. Contact

Privacy questions or data requests? Contact us at support@revolv.com.au.

Revolv Intelligence (ABN 85 530 656 365) operates from Victoria, Australia. This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.