Privacy Policy

1. Who We Are

Revenop is a registered business name registered under the Registration of Business Names Act, 1963 (Business Name No. 781776), Ireland. We operate two product lines:

• •Revenop Full — an AI-powered retail management platform covering inventory, purchasing, sales analytics, and workforce management.
• •Revenop Workforce — a standalone staff management platform covering AI-generated rotas, GPS clock-in/out, timesheets, leave management, and payroll export.

This policy applies to both products. Where a section applies to one product only, it is indicated.
Contact: kieran@revenop.com

2. Data We Collect

2.1 Account & Contact Data (all users)

• •Your name, email address, and securely hashed password when you register.
• •Billing contact details and payment method (processed by our payment provider — we do not store card numbers).

2.2 Inventory & Sales Data (Revenop Full)

• •Product names, SKUs, costs, prices, stock levels, and supplier information you import or enter.
• •Transaction records synced from connected POS or ecommerce integrations (e.g. Shopify, Square).
• •Access tokens for connected platforms, stored securely in our database.

2.3 Workforce & Staff Data (Revenop Workforce)

When you use Revenop Workforce, we collect and store data relating to your employees as part of delivering the service:

• •Staff profile data — employee name, role, email address, phone number, hire date, contracted hours per week, and hourly rate of pay.
• •Payroll reference data — PPS number and works number (if entered by the employer for payroll export purposes).
• •Attendance data — clock-in and clock-out timestamps, break start and end times, and total hours worked per shift.
• •GPS location data — the geographic coordinates of a device at the moment of clock-in and clock-out are recorded solely to verify that the employee is within the store's designated geofence. Location is not tracked continuously and is not used for any purpose other than geofence verification.
• •Rota & availability data — scheduled shift times, availability preferences, and published weekly rotas.
• •Leave data — annual leave requests and balances, statutory sick leave records, and public holiday records.
• •Communications data — team notices posted by managers and read-receipt timestamps per employee.

2.4 Demo Request Data

• •If you submit a demo request via our website, we collect your name, business name, email address, phone number, and approximate team size for the sole purpose of contacting you to arrange a demonstration.

2.5 Usage & Technical Data (all users)

• •Pages visited, features used, and error events collected to monitor service reliability and diagnose faults.
• •Session cookies required for authentication only. No advertising or tracking cookies are used.

3. How We Use Your Data

We use your data solely to provide and improve the Revenop service:

• •Delivering your subscribed product (inventory management, workforce management, or both).
• •Generating AI-powered rotas, reorder suggestions, and analytics based on your data.
• •Verifying employee location at clock-in/out against your store's geofence.
• •Calculating leave entitlements, statutory sick pay, and public holiday pay in accordance with Irish employment law.
• •Generating payroll export files for your accountant or payroll software.
• •Sending transactional notifications to employees (shift schedules, leave decisions, team notices) via the Revenop employee app.
• •Syncing data with connected integrations (Revenop Full only).
• •Sending transactional emails (account verification, subscription receipts, demo request follow-up).
• •Monitoring errors and performance to maintain service reliability.

We do not sell your data to third parties. We do not use your data for advertising. We do not use your data to train AI models.

4. Employee Data & Your Responsibilities (Revenop Workforce)

When you use Revenop Workforce, you (the employer/store owner) are the data controller for your employees' personal data. Revenop acts as a data processor on your behalf, processing that data only as instructed by your use of the platform.

As the data controller, you are responsible for:

• •Informing your employees that Revenop is used to manage attendance, rotas, and leave, and that their clock-in/out location is recorded for geofence verification.
• •Ensuring you have a lawful basis to process employee data (typically the employment contract).
• •Handling any data subject access requests from your employees relating to data you hold about them in Revenop.

5. Legal Basis (GDPR)

We process your data under the following lawful bases:

• •Contract — processing necessary to deliver the service you have subscribed to.
• •Legal obligation — retaining working time records as required by the Organisation of Working Time Act 1997.
• •Legitimate interests — error monitoring, service improvement, and demo request follow-up.
• •Consent — where you have explicitly opted in (e.g. marketing communications, if applicable).

6. Data Storage & Security

Your data is stored within the European Union on EU-based cloud infrastructure. We use industry-standard encryption in transit (TLS) and at rest. Access to production data is restricted to authorised personnel only. We do not transfer personal data outside the European Economic Area.

7. Third-Party Processors

We share data only with third-party service providers acting as data processors on our behalf. All processors are contractually bound to process data only as instructed and in accordance with GDPR.

A full list of named sub-processors is available on request — contact us at kieran@revenop.com.

8. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, subject to the following exceptions:

• •Working time records (Revenop Workforce) — clock-in/out data, attendance records, and rota data are retained for a minimum of 3 years from the date of creation, as required by Section 25 of the Organisation of Working Time Act 1997. After this period, records are deleted unless required for an ongoing legal matter.
• •Billing records — invoices and payment records are retained for 7 years in accordance with Irish tax law.
• •Demo request data — retained for 12 months or until you request deletion.

9. Your Rights (GDPR)

As an EU data subject you have the right to:

• •Access — request a copy of your personal data.
• •Rectification — correct inaccurate data.
• •Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations above.
• •Portability — receive your data in a machine-readable format.
• •Restriction — limit how we process your data.
• •Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at kieran@revenop.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.

10. Cookies

Revenop uses only essential cookies required for authentication and session management. We do not use tracking, analytics, or advertising cookies.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before they take effect. Continued use of the service after changes constitutes acceptance.