Privacy Policy

RevelWright ("we," "us," or "our") is an AI-powered campaign management tool for tabletop roleplaying game Dungeon Masters and Game Masters, operated by RevelWright LLC, a Washington State limited liability company. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using RevelWright at revelwright.com, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

Information you provide directly

• Account information: your name and email address when you create an account
• Campaign content: session notes, character data, world-building content, and other material you enter into the platform
• Payment information: billing details submitted when purchasing a Pro subscription (processed by Stripe — we do not store card numbers or payment credentials directly)

Information collected automatically

• Usage data: which features you use, how often, and general interaction patterns, collected via PostHog analytics
• Log data: server logs maintained by Vercel (our hosting provider) including IP addresses, browser type, and pages visited
• Cookies and session tokens: used to keep you signed in and maintain your preferences

Information from third parties

• If you sign in with Google, we receive your name and email address from Google as part of the authentication flow. We do not receive your Google password or access to other Google services.

• To provide and operate the RevelWright service
• To process AI generation requests using your session notes and campaign content
• To process payments and manage your subscription via Stripe
• To send transactional emails such as account confirmation, session recaps sent to players, and invite notifications
• To send a welcome email when you create an account
• To analyze usage patterns and improve the product
• To respond to support requests sent to hello@revelwright.com

We do not sell your personal information. We do not use your campaign content to train AI models.

When you use AI features in RevelWright, your session notes and campaign context are sent to Anthropic's API for processing. Anthropic's use of this data is governed by their privacy policy and terms of service. We recommend reviewing Anthropic's policies at anthropic.com if you have questions about how they handle API data.

We do not use your content to fine-tune or train any AI models.

We share your information only with the following third-party service providers, and only to the extent necessary to operate the service:

• Supabase — database and authentication hosting
• Vercel — application hosting and server-side logs
• Anthropic — AI text generation
• Stripe — payment processing
• Resend — transactional email delivery
• PostHog — product analytics
• Google — optional OAuth sign-in

We may disclose your information if required by law, court order, or to protect the rights and safety of RevelWright, our users, or the public.

When you sign in to RevelWright using Google OAuth, we access only your Google account email address and display name. We do not access your Google Drive, Gmail, Calendar, or any other Google services.

Data accessed

• Email address — used as your account identifier and for transactional emails
• Display name — used to personalize your in-app experience

Data usage

• Your email and display name are used solely to operate your RevelWright account
• Google user data is never used for advertising, analytics profiling, or AI model training
• Your data is not used for any purpose beyond providing the RevelWright service

Data sharing

• Google user data is not sold or shared with third parties for marketing purposes
• Your email address is stored in Supabase (our database provider) and may be transmitted via Resend (our email provider) for transactional messages only
• No Google user data is shared with any other third party

Data storage and protection

• All data is transmitted over encrypted HTTPS connections
• User data is stored in Supabase with access controls and encryption at rest
• Google OAuth users authenticate exclusively through Google — we never store or have access to your Google password

Data retention and deletion

• Google user data is retained for as long as your RevelWright account is active
• You may request deletion of your account and all associated data at any time by contacting hello@revelwright.com
• Upon verified deletion request, your personal data is removed within 30 days

RevelWright's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We retain your account data and campaign content for as long as your account is active. If you delete your account, we will delete your personal information and campaign content within 30 days, except where retention is required by law or legitimate business purposes such as fraud prevention.

Vercel server logs are retained according to Vercel's standard log retention policies.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your campaign content

To exercise any of these rights, contact us at hello@revelwright.com.

RevelWright is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hello@revelwright.com and we will delete it promptly.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), authentication via Supabase, and access controls on our database. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of RevelWright after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, contact us at:

RevelWright LLC
Washington State, United States
hello@revelwright.com