RavenThought
Request Access

Privacy Policy

Last updated: October 20, 2026

1. Scope

This Privacy Policy describes how RavenThought Inc., a [INSERT STATE/COUNTRY OF INCORPORATION] corporation (“RavenThought”, “we”, “us”, or “our”) collects, uses, and discloses personal data in connection with our websites, waitlists and sign-up forms, email communications, and the products and services we provide (together, the “Services”).

This Policy does not apply to data that our customers submit to our products in the course of their own business (“Customer Data”). We process Customer Data on behalf of the relevant customer, as its processor or service provider, under our agreement with that customer. Requests concerning Customer Data should be directed to that customer.

2. Personal Data We Collect

2.1 Information You Provide

  • Contact information, such as your name, email address, company name, and job title, when you join a waitlist, request access or a quote, or contact us.
  • Account and billing information, when you or your organisation becomes a customer, such as user names, login credentials, billing contacts, and payment details. Where payment is made by card, card details are collected and processed by our payment processor and are not stored by us.
  • Connected account data, when you connect a third-party account, such as a bank, payment, or accounting provider, to the Services. We receive the access tokens needed to maintain the connection and the financial data you authorise us to retrieve.
  • Communications, including the content of messages you send us.

2.2 Information Collected Automatically

  • Device and connection data, such as IP address, browser type, operating system, pages requested, referring URL, and the date and time of the request, processed to deliver and secure the Services.
  • Security signals, such as browser characteristics and interaction data evaluated by our bot protection provider when you submit a protected form, and IP addresses used to apply rate limits.
  • Product usage data, such as activity and audit logs generated when customer users access our products, used for security, support, and service operation.
  • Preferences, such as your display theme, stored in your browser’s local storage. This information remains on your device and is not transmitted to us.

2.3 Cookies and Similar Technologies

We use cookies, local storage, and similar technologies only where they are strictly necessary to provide the Services or to remember your preferences. We do not currently use advertising cookies or third-party analytics on our websites. If we introduce non-essential cookies or similar technologies, we will update this Policy and obtain your consent where required by law.

3. How We Use Personal Data

We use personal data for the following purposes. Where the EU or UK General Data Protection Regulation (“GDPR”) applies, the legal basis for each purpose is shown in brackets.

  • To provide, operate, and maintain the Services, and to perform our contracts with customers (performance of a contract).
  • To manage waitlists and to contact you about access, onboarding, and our products and services (consent, or our legitimate interest in responding to your request; you may withdraw consent or opt out at any time).
  • To respond to enquiries and provide support (legitimate interests, or performance of a contract).
  • To protect the Services, including detecting and preventing fraud, abuse, and automated submissions (legitimate interests).
  • To process payments and maintain financial and tax records (performance of a contract; legal obligation).
  • To comply with applicable law and to establish, exercise, or defend legal claims (legal obligation; legitimate interests).
  • To maintain and improve the Services (legitimate interests).

We do not sell personal data, share it for cross-context behavioural advertising, or use personal data or Customer Data to train general-purpose artificial intelligence models.

We do not sell financial data and delete stored tokens upon user disconnection.

4. How We Disclose Personal Data

We disclose personal data only as follows:

  • Service providers that process personal data on our behalf and under our instructions. Our current service providers include Cloudflare, Inc. (hosting, content delivery, rate limiting, and bot protection), Sendinblue SAS, trading as Brevo (contact management and email delivery), and Google LLC (web fonts; your browser sends your IP address to Google when it loads them). Where we accept payments, we also use a payment processor. These providers change as our Services change; a current list is available on request.
  • Professional advisers, such as lawyers, accountants, and auditors, under duties of confidentiality.
  • Legal and safety, where required by law or legal process, or where reasonably necessary to protect the rights, property, or safety of RavenThought, our customers, or others.
  • Business transfers, in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this Policy or protections at least as strict.
  • With your consent or at your direction.

5. International Transfers

We and our service providers may process personal data in countries other than the one in which you live, including the United States and member states of the European Union. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

6. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy:

  • Waitlist and enquiry data is retained until you unsubscribe or request deletion, or until it is no longer needed for the purpose for which it was collected.
  • Customer account and billing data is retained for the duration of the customer relationship and afterwards as required for legal, tax, and accounting purposes.
  • Connected account access tokens are deleted when the account is disconnected from the Services.
  • Security data, such as rate-limit records, is retained for short periods. Connection data held by our service providers is retained in accordance with their own policies.

7. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and obtain a copy;
  • correct inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • restrict or object to our processing of your personal data;
  • receive your personal data in a portable format;
  • withdraw consent, where processing is based on consent, without affecting processing that took place before withdrawal; and
  • opt out of marketing communications, using the unsubscribe link in any marketing email or by contacting us.

Residents of California and other U.S. states with consumer privacy laws may also have the right to know what personal data we collect, use, and disclose, and the right not to be discriminated against for exercising their rights. We do not sell or share personal data as those terms are defined under those laws.

To exercise any of these rights, contact us at privacy@raventhought.com. We may need to verify your identity before acting on a request, and we will respond within the period required by applicable law. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

9. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date above shows when it was last revised. If we make material changes, we will notify you by email or by a notice on our website before the changes take effect.

11. Contact

RavenThought Inc.
[INSERT STREET ADDRESS]
[INSERT CITY, STATE/REGION, POSTAL CODE]
[INSERT COUNTRY]
Email: privacy@raventhought.com