REVIORI

REVIORI Privacy Policy

Effective date: 12 August 2026
Version: Beta 1.0

This Privacy Policy explains how REVIORI collects, uses, shares, and protects personal data when you use the REVIORI mobile application and related services.

1. Who is responsible for your data?

REVIORI is operated by Sander Moks, Spain, who acts as the data controller.

Privacy contact: support@reviori.com

2. Who may use REVIORI?

REVIORI is intended for people aged 16 or older. We do not knowingly collect personal data from children under 16. If you believe that a child under 16 has provided us with personal data, contact us so that we can investigate and delete it where appropriate.

3. Data we collect

Depending on how you use REVIORI, we may process:

  • Account data: email address, username, display name, country, authentication records, and account identifiers.
  • Profile and vehicle content: profile photo, vehicle photos, make, model, year, drivetrain, power, technical details, modifications, build story, and other information you choose to publish.
  • Community activity: ratings, comments, follows, rankings, in-app notifications, reports, and blocks.
  • Support and safety information: messages you send to us, reported content, report reasons, moderation decisions, and records needed to prevent misuse.
  • Technical and security data: IP address, request timestamps, authentication and server logs, and limited device or app information generated when the service is used.

REVIORI does not request precise location data. A country shown on a profile is information selected by the user, not GPS location.

When you choose a photo, only the photo you select is uploaded. REVIORI does not intentionally scan your entire photo library.

4. How we use data

We use personal data to:

  • create and secure accounts;
  • provide profiles, vehicle pages, feeds, ratings, rankings, comments, follows, notifications, reports, and blocking;
  • store and display content that users choose to publish;
  • review uploaded images and reported content;
  • prevent spam, harassment, fraud, and security incidents;
  • respond to support requests;
  • enforce our Terms of Use and Community Guidelines; and
  • comply with legal obligations and valid requests from authorities.

We do not sell personal data. The current beta version does not use personal data for third-party targeted advertising.

5. Automated image review

Vehicle, gallery, and profile images selected for upload may be sent temporarily to OpenAI for automated suitability and safety review. The review checks whether an image is appropriate for REVIORI and helps prevent spam, advertising, unrelated content, and unsafe material.

OpenAI states that API data is not used to train its models by default. API abuse-monitoring logs may retain submitted content for up to 30 days unless a longer period is legally required or needed to protect the service or third parties. A failed or rejected image may also create a limited moderation record in REVIORI containing the user ID, storage path, image type, result, reason, and timestamp.

Do not upload an image unless you have the right to share it. Avoid uploading unnecessary personal information, licence plates, faces, addresses, or documents if they are not needed for the vehicle post.

6. Legal bases for processing

Where the GDPR applies, we rely on:

  • Performance of a contract: to create an account and provide the features requested by the user.
  • Legitimate interests: to operate, secure, improve, and moderate REVIORI, prevent abuse, and protect users and the service.
  • Legal obligations: where processing is required by law.
  • Consent: where consent is specifically requested, including device permissions where required. Consent may be withdrawn through device settings or by contacting us, without affecting earlier lawful processing.

7. Public information

REVIORI is a social car community. Your username, display name, selected country, profile photo, vehicles, vehicle photos and details, comments, and some community activity may be visible to other users. Your email address is not displayed on your public profile.

If you block another user, REVIORI hides the relevant profiles and content between those accounts and removes certain relationships and notifications. Blocking does not delete either account.

8. Service providers and disclosures

We share data only as needed with:

  • Supabase, which provides authentication, database, storage, server functions, and related infrastructure;
  • OpenAI, which processes selected uploaded images for automated moderation;
  • professional advisers or technical providers where necessary to operate or protect the service; and
  • public authorities where disclosure is legally required.

These providers process data under their own contractual and security obligations. If REVIORI changes ownership or structure, data may be transferred as part of that transaction subject to applicable law and continued protection.

9. International data transfers

Some service providers or their subprocessors may process data outside the European Economic Area. Where required, we use recognised safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

10. Retention and deletion

Account data and user content are generally kept while the account remains active. Security, moderation, and technical records are retained only as long as reasonably necessary for safety, dispute handling, legal compliance, and service integrity.

You can delete your account from Account → Delete account in the REVIORI app. Account deletion removes the authentication account and associated active profile data and uploaded images through REVIORI's deletion process. Some information may remain temporarily in protected backups or logs until normal retention cycles expire, or longer where required by law, fraud prevention, security, or the establishment, exercise, or defence of legal claims.

Deleting the app from a device does not delete the REVIORI account.

11. Your rights

Subject to applicable law, you may have the right to:

  • access your personal data;
  • correct inaccurate data;
  • request deletion;
  • restrict or object to certain processing;
  • receive data in a portable format where applicable;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a data protection authority.

You can edit profile information and delete the account in the app. For other requests, contact support@reviori.com. We may need to verify your identity before completing a request. In Spain, you may also contact the Spanish Data Protection Agency (AEPD) at www.aepd.es.

12. Security

We use reasonable technical and organisational measures, including authenticated access, encrypted transmission, database access controls, and restricted server-side operations. No online service can guarantee absolute security.

13. Changes to this policy

We may update this policy when REVIORI's features, providers, or legal obligations change. The current version and effective date will be published on the REVIORI website. Material changes may also be communicated in the app.

14. Contact

For privacy questions or requests, contact:

REVIORI / Sander Moks
Spain
support@reviori.com