Privacy Notice

Who operates REEVUU

REEVUU is operated by Harry Winter trading as REEVUU, a sole trader based in the United Kingdom. REEVUU is a trading name, not a limited company.

• Website: https://reevuu.co.uk
• Contact: hello@reevuu.co.uk
• Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA
• VAT: REEVUU is not VAT registered. Prices shown do not include VAT added by REEVUU.

What REEVUU collects, and why

• Account and authentication data — your email address, hashed password, and email-verification state, to create and secure your account (contract).
• Billing and subscription data — your plan, subscription status and Stripe references. REEVUU never sees or stores your card details; payment details go directly to Stripe (contract; legal obligations for financial records).
• Uploaded files — the documents you submit for review, stored in a private storage bucket accessible only to your authenticated account (contract).
• Extracted document content — text extracted from your files so a review can be produced (contract).
• Review outputs — the findings, evidence quotations, scores and any follow-up chat generated for you (contract).
• Usage and security records — rate-limit counters, usage-allowance records, processing-run records and security logs that keep the service fair, priced correctly and safe (contract; legitimate interests in security and abuse prevention).
• Product events — a small, allowlisted set of product events (for example, that a registration started) recorded without document content, to understand whether core journeys work (legitimate interests).
• Support communications — emails you send to hello@reevuu.co.uk, retained as ordinary correspondence to handle your request (legitimate interests; contract).

What we don't do with your documents

Your files are processed only to generate your review and are never used to train public AI models. Temporary files are deleted automatically; saved reviews stay under your control.

How your documents are accessed

Uploaded files live in private storage — there are no public links. When you open a source document from a review, REEVUU verifies your ownership server-side and issues a short-lived (five-minute) signed link for your session only. Signed links are never stored or shared.

Deletion and retention

An uploaded file that you haven't explicitly chosen to keep is deleted automatically after your review finishes processing, unless you've turned that setting off. A file you save is kept until you delete it. Review content persists independently of the original file, so deleting a file never deletes the review built from it — each deletion control states exactly what it removes before you confirm.

Deleting your account removes your profile, files, reviews and related content from REEVUU's systems. What deletion does not do:it does not immediately erase every trace everywhere. Billing and subscription records required for accounting and tax, security and audit logs kept for fraud prevention, and records infrastructure providers retain under their own legal obligations (for example Stripe's financial records) can remain for as long as those obligations require.

Disclosed limitation: plan-specific automatic retention windows are planned but not yet enforced by an automated process — today, retention of saved content is controlled by your own save/delete choices.

Cookies and similar storage

REEVUU uses only the strictly necessary cookies required to keep you signed in securely. No analytics, advertising, or tracking cookies are installed. See the Cookie Notice for the full description.

Who processes your data

REEVUU does not sell your data. A small set of infrastructure providers process data on REEVUU's behalf: Supabase (database, authentication and file storage, hosted in the UK — London region), Vercel (application hosting), Stripe (payment processing), Anthropic (AI analysis of the text extracted from your document, to produce your review), and Resend (sending service emails such as review-ready notifications, which processes your email address and the delivery metadata for those messages). The current list, each provider's purpose and processing location, is maintained at https://reevuu.co.uk/subprocessors.

International processing:the primary database and file storage are hosted in the United Kingdom. Some providers (Vercel, Stripe, Anthropic, and Resend) are US companies whose processing can involve transfers outside the UK; such transfers rely on those providers' standard contractual safeguards. Details per provider are on the subprocessor list.

Your rights

Under UK data-protection law you have rights to access, correct, delete, restrict, object to processing of, and port your personal data. The in-product controls (file deletion, review deletion, account deletion, account-data export) are the fastest way to exercise most of them directly. For anything else, email hello@reevuu.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Contact and complaints

Privacy questions, requests and complaints: hello@reevuu.co.uk. Requests are handled directly by the operator, Harry Winter trading as REEVUU.