Reveille onboarding privacy policy
Version: . Effective when published for live onboarding.
1. Operator and scope
Keith Klaus operates Reveille and handles the information described here. Contact: keith@reveille.work. This policy covers the website, waitlist and workspace application process. Workspace business data and connected-mailbox use need separate notices and authorization; applying does not grant Gmail or other mailbox access.
2. Information collected
- Waitlist: email address, optional team description, signup source and time, and the country reported by our hosting provider from the connection.
- Sign-in: Google's account identifier, verified email and name, plus account creation and sign-in times. Google signup uses basic identity scopes, not mailbox-reading scopes.
- Application: administrator contact details and role; company profile, address, services, policies and operating preferences; requested workspace address; team names and roles; mailbox-provider and intake-tool information; review status, notes and history; terms version and acceptance time. Sign-up does not collect a logo; the Owner adds branding in Settings › Company after first sign-in, outside this application process.
- Communications and security: application email contents and delivery identifiers, correspondence, essential cookies, IP addresses processed for security, hashed rate-limit identifiers, and request/bot-check information handled by us or our providers. Hashing an identifier does not make all security information anonymous.
3. Purposes
We use this information to maintain the waitlist, authenticate you, save and review applications, communicate decisions and questions, prevent misuse, record acceptance and prepare an approved workspace. Approved application information may be exported securely for preparation. We do not sell or rent onboarding information, use it for targeted advertising, or use its contents to train AI models.
4. Access and providers
Application details are intended for the applicant and authorized operator review, not public browsing. Cloudflare provides hosting, storage and security/bot checks; Google provides sign-in; Resend sends application and invitation emails; our mail provider, Private Email, handles operator email and replies. Providers receive information needed for their functions and operate under their own terms and privacy notices. Information may be processed outside your country; we do not promise region-only storage. An approved application's export may be handled by the authorized operator for workspace preparation. We may disclose information when required by law or necessary to address abuse or protect lawful rights.
5. Cookies and mailbox permissions
We use essential sign-in and security cookies. The onboarding session expires after seven days; temporary sign-in state expires after ten minutes. Signing out invalidates the current session. We do not add advertising cookies or application-email tracking pixels. The form records your mailbox provider and address but does not read or modify mailbox contents, connect intake tools, or send team invitations.
6. Application retention and deletion
Live onboarding must not open until its scheduled application cleanup has been enabled and verified. Under that cleanup policy:
- Draft applications become eligible for deletion after 30 days without an update.
- Declined applications become eligible after 30 days in that status.
- Ready applications have private application details and associated application event/email records removed after 30 days; a minimal record of the application ID, business name, workspace address and dates remains.
- Withdrawal before approval removes the private application and its events/email records from D1 immediately when deletion succeeds. If deletion fails, it needs retry; no logo upload or late-upload cleanup ledger is involved.
- Expired sessions, temporary sign-in state and rate-limit records are cleaned up by the scheduled job. Deletion failures may delay cleanup until resolved.
Submitted, more-information and approved applications awaiting completion are not automatically deleted by the 30-day rule. Account identity records, waitlist entries, workspace reservations, minimal ready records, exported/workspace copies, provider records, email received by recipients and any backups are also outside that rule. They have separate handling; do not interpret application deletion as guaranteed erasure of all copies. Contact us to request review, correction or removal of information no longer needed, subject to applicable legal requirements.
7. Your choices and requests
You can review and edit an application while its status permits, sign out, and withdraw before approval. For account information, waitlist removal, other deletion/correction/access requests or privacy questions, email keith@reveille.work. We may verify your identity and business authority before acting and explain any limits required by law or concerning records held by others. Your rights may depend on where you live and applicable law.
8. Security and policy versions
We use access controls, private application storage, secure production sign-in and abuse controls, but no service can promise absolute security. Do not submit unnecessary sensitive information. Development previews are not for real applicant information. We publish dated policy versions and link the current policy from the application. Contact: keith@reveille.work.