Haystack Intelligence, Inc. – Privacy Policy

Last updated: June 13, 2025

Thank you for trusting Haystack Intelligence, Inc. (doing business as Revlo) (“Haystack,” “we,” “our”) with your information. This Privacy Policy explains what data we collect, how we use it, and what choices you have. If you do not agree with any part of this notice, please discontinue use of our Services.

This notice applies to:

  • gethaystack.io and any sub-domains
  • our web app, browser extensions, APIs, Slack channels, and related online services (collectively, the “Services”)

1. Information We Collect & Receive

CategoryExamplesSource
Account dataName, e-mail address, password hashYou
Payment dataCard number (tokenized), billing ZIPStripe, our payment processor
Google integrationsOAuth-scoped access to Gmail headers, Drive files you select, Contacts, Calendar metadataYou, via Google OAuth consent
Usage & device dataIP address, browser type, referring URLs, feature-usage events, cookiesAutomated collection
Third-party enrichment dataPublic-profile links, company info, phone numbers, job titlesPublic databases, data vendors

We do not knowingly collect data from children under 13. If you believe a child has provided us information, contact privacy@revlo.ai and we will delete it.


2. How We Use Your Information

We process personal information to:

  1. Create & secure your account and authenticate log-ins (including Google single sign-on).
  2. Provide, maintain, and improve the Services, including AI-driven lead research and credit usage reporting.
  3. Process payments and manage subscriptions.
  4. Analyze usage trends and troubleshoot errors (in aggregated or de-identified form).
  5. Send service-related messages, invoices, product updates, and security alerts.
  6. Protect our platform, enforce our Terms, and comply with legal requests.

We do not sell your personal information, and we do not use your data to train third-party AI models.


3. When We Share Information

We only disclose information:

  • With service providers that help us run Haystack (e.g., Stripe for payments, cloud hosting).
  • When you connect an integration (e.g., Google Workspace); we share the minimum data needed to enable that feature.
  • For legal, safety, or compliance reasons (court orders, protecting rights).
  • During a business transfer (merger, acquisition); we will notify you before your data becomes subject to a different policy.

4. Third-Party Logins & Integrations

If you sign in with Google or connect a Google Workspace account, we receive profile information (name, e-mail) plus data you explicitly authorize (such as Gmail headers or Drive file metadata). You may revoke access at any time in your Google account permissions.


5. Cookies & Similar Technologies

We use:

  • Session cookies to keep you logged in.
  • Analytics cookies (first-party) to understand feature adoption.
  • No advertising cookies or third-party ad trackers.

Browser “Do-Not-Track” signals are not yet uniform, so we do not currently respond to them.


6. Data Security

Haystack follows industry best practices:

  • Data encrypted in transit and at rest.
  • Infrastructure hardened to SOC 2 standards.
  • Passwords hashed with PBKDF2-SHA-256.

Despite these measures, no Internet transmission is 100% secure; use the Services at your own risk.


7. Data Retention

We keep personal information only as long as necessary to deliver the Services or meet legal obligations. Typically, that means while you have an account plus a reasonable back-up period. When retention is no longer required, we delete or anonymize the data.


8. Your Privacy Choices

  • Access / Update – Edit profile information in your account dashboard or contact us.
  • Delete – E-mail privacy@revlo.ai to request deletion; we will honor verified requests within 30 days.
  • Marketing e-mails – Opt-out any time via the unsubscribe link.
  • CCPA (California residents) – You have the right to know, delete, or opt out of any “sale” of personal information (we don't sell it, but the right still applies). Instructions are in § 12 below.

9. Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect their data. If we learn that we have done so, we will delete it.


10. International Users

Haystack currently targets U.S. customers only. If you access the Services from another country, you consent to transferring your data to the United States. (We do not yet offer GDPR mechanisms such as EU Standard Contractual Clauses.)


11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page and, if significant, we will alert you via e-mail or in-app notification.


12. California Privacy Notice (CCPA)

California residents may:

  1. Request to Know the categories or specific pieces of personal information we have collected.
  2. Request Deletion of personal information (subject to legal exceptions).
  3. Designate an authorized agent to make requests on your behalf.
  4. Contact us at privacy@revlo.ai or 1100 NE Campus Parkway, Suite 200, Seattle, WA 98195.
  5. We have not sold personal information in the past 12 months.

13. Contact Us

Questions? E-mail privacy@revlo.ai, or write:

Haystack Intelligence, Inc.
1222 NE 102nd St
Seattle, WA 98125, USA

If we cannot resolve your concerns, you may also file a complaint with the Washington State Attorney General's Office.