Privacy Policy

RevShare Labs, Inc. · Last updated: August 5, 2026

This Privacy Policy explains how RevShare Labs, Inc. ("RevShare", "we", "us") collects, uses, stores, and shares information when you use the RevShare platform at revshare.to and app.revshare.to (the "Service").

RevShare is a business-to-business platform. Our users are businesses and the people who act on their behalf. We are the data controller for the information described below unless stated otherwise.

1. Who we are

RevShare Labs, Inc.
1007 N Orange St, 4th Floor, Suite 5953
Wilmington, Delaware 19801, United States
Email: privacy@revshare.to

2. Information we collect

2.1 Information you give us

Account information: name, email address, password credentials, company name, and role.
Business information: billing details, tax information, and payout details where applicable.
Communications: messages you send to our support team.

2.2 Information we receive from Meta when you connect an account

If you choose to connect a Meta (Facebook) business account to RevShare, we access data through the Meta Marketing API using permissions you explicitly grant during the connection flow. We request the following:

Permission	What it allows	Why we need it
`public_profile`	Your name and profile picture	To identify the person who authorized the connection and display it in your RevShare account.
`ads_read`	Read-only access to advertising campaign data, performance metrics, and spend for ad accounts you authorize	To measure advertising performance and calculate revenue share and attribution.
`business_management`	Read access to the structure of your business portfolio and the ad accounts within it	To let you select which ad accounts to connect and to keep those connections working.

We request read-only advertising access. RevShare does not create, edit, publish, pause, or delete advertisements, and does not spend money on your behalf.

2.3 Information we collect automatically

Usage data: pages viewed, features used, timestamps, and actions taken in the Service.
Device and log data: IP address, browser type, operating system, and referring URLs.
Cookies: used to keep you signed in, remember preferences, and measure product usage. You can control cookies through your browser settings; disabling them may break sign-in.

3. How we use information

To provide, operate, and maintain the Service.
To authenticate you and secure your account.
To retrieve and display advertising performance data from the accounts you connect.
To calculate attribution, revenue share, and reporting for the parties in your agreements.
To provide customer support and respond to your requests.
To detect, investigate, and prevent fraud, abuse, and security incidents.
To comply with legal obligations.

We do not use Meta advertising data to build advertising profiles, to target advertising, or for any purpose other than delivering the reporting and revenue-share functionality you have asked us to perform.

4. Platform Data

This section applies specifically to data obtained through Meta's APIs ("Platform Data") and supplements the rest of this policy.

We access Platform Data only with your explicit authorization, granted through Meta's own consent screen.
We use Platform Data solely to provide the features described in Section 3.
We do not sell Platform Data. We do not license it, rent it, or transfer it to data brokers, advertising networks, or any third party for their own purposes.
We do not use Platform Data to build or augment user profiles for advertising or to enable surveillance.
We do not combine Platform Data with data from other sources except as necessary to provide the reporting you have requested within your own account.
You may revoke our access at any time (see Section 8). When access is revoked, we stop retrieving new Platform Data immediately and delete previously retrieved Platform Data in line with Section 7.
Our use of information received from Meta APIs adheres to Meta's Platform Terms and Developer Policies.

Google and TikTok. If you connect a Google or TikTok advertising account, the commitments in this section apply equally to data received through Google APIs and TikTok APIs. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and our use of information received from TikTok APIs adheres to TikTok's developer terms and policies.

5. How we share information

We share information only in the following circumstances:

Within your organization and its counterparties: reporting you generate may be visible to the other parties to your revenue-share arrangement, as configured by you.
Service providers (subprocessors): vendors who host our infrastructure, process payments, send transactional email, and provide error monitoring. They act on our instructions under written contracts and may not use the data for their own purposes.
Legal requirements: where required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of RevShare, our users, or the public.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to the transferred data.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Security

We use encryption in transit (TLS) and at rest, access controls limited to personnel who need it, and credential storage designed so that access tokens are encrypted and never exposed in the browser. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you as required by applicable law.

7. Data retention

Account data: retained while your account is active.
Meta Platform Data: retained only as long as needed to provide reporting, and deleted within 30 days of you disconnecting the relevant account or closing your RevShare account.
Access tokens: deleted immediately upon disconnection or revocation.
Records required for legal, tax, or accounting purposes: retained for the period required by law.

8. Your choices and rights

8.1 Revoking Meta access

You can disconnect a Meta account at any time from within RevShare (Settings → Connected Accounts → Disconnect), or directly from Meta at Facebook Settings → Business Integrations by selecting RevShare and choosing Remove.

8.2 Deleting your data

See our Data Deletion Instructions, or email privacy@revshare.to.

8.3 Rights under GDPR, UK GDPR, and similar laws

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Where we rely on consent, you may withdraw it at any time. To exercise these rights, contact privacy@revshare.to. You also have the right to lodge a complaint with your local supervisory authority.

Our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, product improvement), consent (where you connect a Meta account or opt into marketing), and legal obligation.

8.4 Rights under US state privacy laws

Residents of California and other US states with comprehensive privacy laws may have rights to know, delete, correct, and opt out of sale or sharing of personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact privacy@revshare.to.

9. International transfers

We are based in the United States and process data there. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

10. Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last updated" date above always reflects the current version.

12. Contact

Questions about this policy or your data: privacy@revshare.to
RevShare Labs, Inc., 1007 N Orange St, 4th Floor, Suite 5953, Wilmington, Delaware 19801, United States