Privacy Policy
Effective Date: August 25, 2026
Reveal (“we”, “us”, “our”) is a product built by Reveal Software SRL, registered in Romania. This Privacy Policy explains what data the Reveal Chrome extension (“Reveal Guide Recorder”) and the Reveal web application collect, how we use it, where we store it, and your rights.
By using Reveal, you agree to the collection and use of information in accordance with this policy.
1. What data we collect
When you use Reveal, we collect the following categories of data.
a) Account information
Your name, email address, and workspace name when you sign up
Authentication tokens to keep you signed in. In the web application this is a session cookie. In the Chrome extension it is a time-limited extension session token, stored in the extension’s local storage and sent only to Reveal’s servers.
b) Recording content
The Chrome extension only collects the following while you are actively recording a guide, after you have opened the recorder from the toolbar and started a recording:
Screenshots of the visible browser tab, taken once for each step you record
A session replay of the page you are recording: a structured snapshot of the page’s content and layout (its DOM), plus later changes, mouse movement, clicks and scrolling, so the guide can be replayed accurately. This is not a video of your screen.
Text you type into form fields on the recorded page. Password fields are always masked and never recorded.
Audio from your microphone, if you choose to narrate a recording
Video from your camera, if you enable the camera bubble. Optional background removal runs entirely on your device.
The URLs of pages you visit while actively recording, so we can associate each step with the right context
DOM element metadata for the buttons, forms and other elements you interact with (for example the element type, a CSS selector and its visible text), so we can map guide steps accurately
Recording metadata: the extension version, screen dimensions, browser user agent and timing information
Anything visible on a page you record may end up in the screenshots and session replay, so avoid recording pages that show information you do not want in your guide.
c) Usage data
Product events (which features you use, when guides are created, edited, or published)
Basic device information (browser version, operating system)
IP address (used for security and rate limiting, not for tracking)
d) Data about people who view your guides
When a customer installs the Reveal pixel on their website to show guides, we collect, on the customer’s behalf, data about the people who view those guides:
Guide interactions (impressions, steps viewed, completions, feedback and ratings)
The page URL and referrer where a guide was shown
Approximate location (country, region and city) derived from the viewer’s IP address by our hosting provider. We do not store the IP address itself for this purpose.
An identifier, if the customer chooses to pass one using the pixel’s identify call
For this data the customer is the controller and Reveal acts as their processor.
What we do NOT collect
Personal browsing history outside of active Reveal recording sessions
Data from tabs where you are not actively using Reveal
Passwords or credentials entered on other websites (password fields are masked in recordings)
Payment card numbers (payment is handled by Stripe; we only receive tokens)
2. How we use your data
We use your data to:
Create and store your product guides
Generate automatic captions and transcriptions of your recordings
Display guides inside customer applications where the Reveal pixel is installed
Provide analytics about guide performance
Improve the Reveal product
Contact you about product updates, security notices, and support
We do not sell your data. We do not use your recording content to train AI models.
3. Third-party processors
We use the following third-party services to operate Reveal. Each has been evaluated for privacy compliance.
Vercel: hosting of the Reveal web application and API, and privacy-friendly, cookieless page analytics (Vercel Web Analytics) for the dashboard
Neon: our PostgreSQL database (account, workspace and guide data), hosted on Amazon Web Services in London, United Kingdom (eu-west-2)
Tigris Data: S3-compatible object storage and delivery of your recordings, screenshots, session replays and exported videos
Fly.io: video processing (transcoding and exports), running in London, United Kingdom
Clerk: sign-up, sign-in and session management
OpenAI: audio transcription for captions
Resend: transactional email (for example invitations and notifications)
Stripe: payment processing (only if you subscribe to a paid plan)
Google Fonts: the extension’s recording panel loads the Geist typeface from Google Fonts, which means Google receives your IP address and browser information when the panel opens. No recording content is sent to Google.
For transcription specifically: when a recording has narration, its audio track is sent from our servers to OpenAI’s transcription API (model whisper-1) only to generate captions with word timings. Under OpenAI’s API terms, data sent through the API is not used to train OpenAI’s models. OpenAI may keep it for up to 30 days for abuse monitoring before deleting it.
4. Where we store your data
Your account, workspace and guide data is stored in a PostgreSQL database hosted on Amazon Web Services in London, United Kingdom (eu-west-2). Recording files are stored with Tigris Data, which may replicate objects across regions to deliver them quickly to viewers. All data is encrypted in transit (HTTPS/TLS) and at rest.
5. How long we keep your data
Account information: while your account is active and for 90 days after deletion, for backup recovery
Recording content: while your account is active. Deleted recordings are permanently removed from our servers within 30 days
Usage analytics: retained for up to 24 months in aggregate form
Support communications: retained for 3 years for reference and legal purposes
If you close your account, all associated data is deleted or anonymized within 90 days.
6. Your rights
Depending on where you live (GDPR for EU/UK, CCPA for California, similar frameworks elsewhere), you have the right to:
Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to specific processing
Data portability (receive your data in a machine-readable format)
Withdraw consent for optional processing at any time
To exercise any of these rights, email us at hey@reveal.software. We respond within 30 days.
7. How to request deletion
You can delete your account at any time from your account settings in the Reveal web application, and you can delete a workspace from its settings page under Danger zone → Delete workspace.
You can also email us at hey@reveal.software with the subject line “Delete my data” and we will process the deletion within 30 days.
Deleting your account permanently removes:
Your account information
All recordings you created
All guides you created
Your workspace data
Note that if a customer is displaying a guide you created inside their product, we will retain a copy of that guide until the customer removes it, as they may have integrated it into their onboarding flow.
For step-by-step instructions, see our Data Deletion page.
8. The Chrome extension
The Reveal Guide Recorder extension:
Is inactive until you open it from the browser toolbar and start a recording. Its content script is present on web pages only so that recording can start instantly and continue across page navigations during a recording.
Stores your sign-in session, recording preferences and in-progress recording steps in the browser’s extension storage, on your device, until they are uploaded to your workspace.
Uploads recording content only to Reveal’s servers, and only for the workspace you are signed in to.
Uses camera and microphone access only while you are recording or previewing your camera, and releases both devices when you stop.
On websites whose security headers block camera and microphone access, may relax that header for that single tab, only when you ask it to, and only until the tab is closed.
Does not include advertising, does not track your browsing, and does not load or run code from outside the extension package.
The use of information received through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
9. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies for advertising. Our dashboard analytics (Vercel Web Analytics) does not use cookies.
10. Children’s privacy
Reveal is not intended for use by children under 16. We do not knowingly collect data from anyone under 16. If you believe we have collected such data, email us at hey@reveal.software and we will delete it.
11. Changes to this policy
We may update this policy. If we make material changes, we will notify you by email or through the product. The “Effective Date” at the top of this policy indicates when it was last updated.
12. Contact us
For any questions about this policy or your data:
Email: hey@reveal.software
Address: Sântelec 103, 417278 Bihor County, Romania
Legal entity: Reveal Software SRL, registration number J2026007820001, fiscal code (CUI) 53782285
We aim to respond to all privacy inquiries within 5 business days.
Company details
Company
Reveal Software SRL
Registered office
Sântelec 103, 417278 Bihor County, Romania
Fiscal code (CUI)
53782285
Trade Register no.
J2026007820001
EUID
ROONRC.J2026007820001
