Privacy Policy
Last updated: 17 July 2026
Data controller
The data controller is O2Code, a SASU (Société par actions simplifiée unipersonnelle) whose registered office is located at 55 Rue Grignan, 13006 Marseille, France. For any question relating to personal data or to exercise your rights, please use the form available on the Contact page of the website.
Data collected
We collect the data necessary to create and manage your account: identity, contact details, login information, billing data and information relating to your location. When you use the review collection features, we also process, on your behalf, the data of your customers that you import or transmit, in particular their name, their email address, their telephone number, the history of requests sent to them and their responses.
Technical and usage data
We may process the technical logs, IP addresses, device and browser information, security events, performance data and usage statistics necessary for the operation, security, diagnosis and improvement of the service.
Purposes of processing
The data is used to provide Revunario, authenticate users, manage locations and subscriptions, send the review requests and follow-ups you have configured, synchronize connected platforms, generate content assisted by artificial intelligence, provide support, prevent abuse, analyze performance and comply with our legal obligations.
Legal bases
Depending on the case, processing is based on the performance of the contract, compliance with legal obligations, the legitimate interest of O2Code in securing and improving the service, or consent where it is required. For customer data imported by a business user, that user acts as the data controller and O2Code as the processor.
Recipients and processors
The data is never sold. It is accessible only to authorized personnel and to the service providers strictly necessary for the operation of the service, in particular the hosting provider, the email or message sending providers, the payment provider, the monitoring tools and, where the feature is used, the artificial intelligence providers or the connected platforms.
Hosting and transfers
The main infrastructure is hosted by Contabo GmbH. Where certain providers process data outside the European Economic Area, the transfers are governed by a mechanism recognized by the GDPR, in particular an adequacy decision or the European Commission's standard contractual clauses.
Retention periods
Account data is retained for the duration of the contractual relationship and then for the periods necessary to comply with legal obligations and to defend our rights. Imported customer data is retained according to the location's settings, deleted at the location's request or when the account is closed, subject to temporary backups and legal obligations.
Your rights
Under the conditions provided for by the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent. Please use the contact form on the website, stating the nature of your request. You may also lodge a complaint with the CNIL, the French data protection authority.
Cookies
The website uses only the cookies strictly necessary for it to function, in particular for the login session and the theme preference. Any audience measurement relies on a configuration without cookies and without individual tracking. No advertising cookie is placed by Revunario.
Security
We implement appropriate technical and organizational measures: encryption of communications, access control, isolation of services, security logging, backups, restriction of privileges and incident management procedures. As no system can guarantee absolute security, these measures are reassessed regularly.
Obligations of business users
Users who import customer data warrant that they have a valid legal basis, that they provide the required information to the data subjects, that they respect their choices and that they use the communication channels in accordance with the applicable regulations, in particular regarding direct marketing and the right to object.
Updates to this policy
This policy may be updated to reflect changes in the service, in our providers or in the applicable regulations. The date of the last update appears at the top of the page.