Version / Last Updated: October 27, 2025

Controller

Manuel Gass (Sole Proprietor)

Flößerstr. 37

82499 Wallgau, Germany

Email: contact@revobill.de

1. Introduction

We take the protection of your personal data very seriously.

This Privacy Policy explains what data we collect when you use our website and app (RevoBill), how we use it, and what rights you have.

2. Data Controller

The controller within the meaning of the GDPR is:

Manuel Gass (Sole Proprietor), Flößerstr. 37, 82499 Wallgau, Germany

Email: contact@revobill.de

3. Data We Collect

We process personal data when you use our services or communicate with us. This includes:

• Name, email address, and optionally phone number

• Login data (email + password or social login via Google, Facebook, Spotify)

• Payment and billing data (via Stripe)

• Usage and log data (e.g., IP address, timestamps, device information)

• Cookie and tracking data (via PostHog, Google Analytics)

4. Purpose and Legal Bases

We process your data on the basis of Article 6 (1) GDPR:

• Providing the service (app, website, login): Art. 6 (1)(b) – performance of a contract

• Technical operation & security: Art. 6 (1)(f) – legitimate interest in secure operation and preventing misuse

• Analytics & improvement (PostHog, Sentry): Art. 6 (1)(a) – only with consent via cookie banner

• Payments via Stripe: Art. 6 (1)(b) – to process payments

• Newsletter & marketing: Art. 6 (1)(a) – only with explicit consent

• Legal obligations: Art. 6 (1)(c) – e.g., tax retention requirements

5. Services and Processors

• Hosting (Website): Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands

• Hosting (App): Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA

• Backend & Authentication: Supabase Inc., USA (EU Standard Contractual Clauses)

• Analytics & Cookies: PostHog, UK/EU (GDPR-compliant, consent via cookie banner)

• Error Tracking: Sentry (Functional Software, Inc.), USA (EU SCCs)

• Payments: Stripe Payments Europe Ltd., Ireland

• Email & Newsletter: future provider (e.g. Mailchimp, Brevo)

GDPR-compliant Data Processing Agreements (DPAs) are or will be concluded with all listed providers.

6. Cookies & Analytics

We use cookies to ensure the functionality of our app, collect statistics, and improve your user experience.

Non-essential cookies are only set with your consent, which you can withdraw at any time via the cookie banner.

7. Data Transfers to Third Countries

Some service providers (e.g. Vercel, Supabase, Sentry) are based in the USA.

Transfers are made under Article 46 GDPR via EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

8. Storage Period

We store personal data only as long as necessary for the respective purpose or as required by law.

After that, the data will be deleted or anonymized.

9. Newsletter

If you subscribe to our newsletter, we use your email address only to send you RevoBill updates.

You can unsubscribe anytime via the link in each email.

Processing is based on your consent (Art. 6 (1)(a) GDPR).

10. Your Rights

Under GDPR, you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), data portability (Art. 20), object (Art. 21), and withdraw consent (Art. 7 (3)).

To exercise your rights, simply email contact@revobill.de.

11. Security

We implement technical and organizational measures (e.g. TLS encryption, access controls) to protect your data against loss, misuse, or unauthorized access.

12. Changes to This Policy

We may update this policy if legal or technical conditions change.

The latest version is always available at https://revobill.de/privacy-policy.

13. Supervisory Authority

Responsible authority:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18, 91522 Ansbach, Germany

https://www.lda.bayern.de