Legal Document

Data Processing Addendum

The technical and legal framework for secure data processing.

Updated February 2026

Processor Mandate

This Data Processing Addendum establishes the boundaries under which Revlyty acts as your data processor. We keep data isolated and secured while preserving your full control over the business data you send.

Section 01

Network Roles

Data Controller

You determine the purpose of analytics collection and reporting.

Data Processor

Revlyty processes analytics metadata to generate business insights.

Sub-processors

Infrastructure providers (Supabase, Vercel) that supply secure processing resources.

Section 02

Processing Logic

We process essential metrics such as navigation events, interaction signals, and revenue context. We avoid direct personal identifiers and keep processing focused on business performance.

Section 03

Infrastructure Partners

Data is processed through vetted partners including Supabase (database), Vercel (hosting/edge), and Xendit (payments). Infrastructure updates are communicated through product channels.

Section 04

Security Standards

Data in transit uses modern TLS encryption. Data at rest is isolated through tenant-level controls and protected storage configuration.