Privacy Policy
Effective 6 January 2026
This Privacy Policy describes how Valjan Ventures ("REVO," "we," "us," or "our") collects, uses, and shares personal data when you access the REVO mobile application, web experience, and related services (collectively, the "Service").
We are committed to protecting your privacy and complying with applicable data protection laws.
1. Personal Data We Collect
We collect personal data you provide and data generated through your use of the Service.
- Account and Profile Data: name, username, email address, phone number, profile photo, bio, interests, and optional social links.
- Age and Eligibility Data: date of birth and age-related status where required.
- Activity and Community Data: activities or places you create or join, invitations, RSVPs, tickets, check-ins, and feedback.
- Messages and Attachments: chat messages and files you choose to share.
- Payments and Payouts: orders, tickets, refunds, and payout settings such as country and currency.
- Offsite Payment Proofs (if used): transaction identifiers, screenshots, and notes you submit.
- Identity Verification (optional): ID document images and verification status when you submit them.
- Location Data (optional): foreground location and derived addresses when you use location-based features.
- Contacts and Calendar (optional): contacts you choose to share and calendar entries you choose to create.
- Device and Usage Data: device type, OS, app version, IP address, and minimal diagnostics for reliability and security.
2. How We Use Personal Data
We process personal data for the following purposes:
- Provide and operate the Service, including creating accounts, hosting activities, and facilitating tickets and check-ins.
- Process payments, refunds, and payouts.
- Verify eligibility and age-restricted access where required.
- Deliver notifications you opt into and respond to support requests.
- Monitor performance, fix bugs, and improve features.
- Protect the Service, prevent abuse, and enforce our terms.
- Comply with legal obligations and defend legal claims.
3. Legal Bases for Processing
Where the GDPR or similar laws apply, we rely on the following legal bases:
- Performance of a contract when we provide the Service you request.
- Legitimate interests for operating, securing, and improving the Service.
- Consent when required by law, including for optional device permissions. You may withdraw consent at any time.
- Legal obligations, including tax, accounting, or regulatory requirements.
4. Sharing and Disclosure
We do not sell personal data. We share personal data only with:
- Service providers that process data on our behalf to operate the Service.
- Other users, when you choose to share activity content, invitations, or profile information.
- Professional advisers and auditors operating under confidentiality obligations.
- Authorities or third parties when required by law or necessary to protect rights, safety, or property.
- Successors in a corporate transaction, subject to the new entity honoring this policy.
5. International Data Transfers
We host and process data in the European Union (Frankfurt). If personal data is transferred outside your jurisdiction, we use safeguards such as Standard Contractual Clauses or other approved mechanisms to protect your data.
6. Data Retention
We retain personal data only as long as necessary to provide the Service and comply with legal obligations. Account and profile data are kept until you delete your account. Transaction and payout records may be retained as required by law. Identity verification documents are retained until verification is completed and then deleted within 30 days. Offsite payment proofs are retained for up to 180 days after the payment is confirmed or the dispute window closes. We anonymise or delete data when it is no longer required.
7. Your Rights and Choices
Subject to applicable law, you may have rights to:
- Access, correct, update, or delete personal data associated with your account.
- Object to or restrict certain processing, or request portability of your data.
- Opt out of marketing communications by following unsubscribe instructions or adjusting device settings.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your supervisory authority if you believe we have infringed your rights.
8. Security
We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, or alteration. Despite our efforts, no system can be completely secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not directed to children under 13 (or the age required by local law). We do not knowingly collect personal data from children, and we delete such information if we learn that a child has provided it.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy in the app, on our website, or by other appropriate means. The revised policy becomes effective when posted unless otherwise stated.
11. Contact Us
If you have questions or wish to exercise your rights, contact us at max.valjan@gmail.com or by mail at: Valjan Ventures, Eulenbergstr. 37, 51065 Köln, Germany.
