360REV — Privacy Policy

Document version: 2026-10-19.1

1. What we collect

• Account info: name, email, organization, role
• Usage data: pages visited, features used, performance metrics (anonymized where possible)
• Content you create: CRM records, social posts, campaigns, etc. — your data, processed on your behalf
• Visit statistics: We measure how our site is read with Matomo, which 360REV runs for us on servers in the United States. If you accept our analytics cookie, a random number in that cookie lets us count you once over up to 13 months and see whether you come back. If you decline, we set no cookie and count your visit only by a code that changes every day and cannot identify you. If your browser sends Global Privacy Control or Do Not Track, we set no cookie and do not count your visit at all. Matomo keeps your address with its last parts removed, for country statistics, and deletes visit records after 25 months. You can change your choice at any time under "Cookie settings". Legal basis: consent (GDPR Art. 6(1)(a)) for the cookie; legitimate interest (GDPR Art. 6(1)(f)) for counting without it. Your rights: access, erasure, objection, complaint to your data-protection authority; contact privacy@360rev.com. A browser switched off with ?rev360=ignore is not counted.
• AI pictures: when you make a picture with the AI image generator, the description you type, its keyword and what it is for. We use them only to make that picture and write its details (title, alt text, caption, description, keywords). We clear them 30 days after the picture is made. The picture and the details you keep stay in your Media Library until you delete them.
• Cookies + similar tech: see our Cookie Policy

2. How we use it

• To deliver and improve the Service
• To bill you and prevent fraud
• To respond to support requests
• To send service updates (transactional email)
• To send product news, only if you opt in

3. Who we share it with

Our sub-processors — see the current list. We don't sell your personal data.

When you make an AI picture, its description, keyword and purpose go to our AI image provider, which draws the picture, and to our AI text provider, which writes its details; both are on the list. 360REV keeps its own copy of every AI-generated picture (see section 6 of our Terms of Service) with neutral details that describe only what the picture shows: before a copy is kept, its details are checked against your business name and the names, numbers, emails, links and addresses in your description, and a copy that matches is held back for review. The copy records which workspace made it, and that link is removed when the workspace is deleted.

4. International transfers

We use Standard Contractual Clauses (SCCs) for EU/UK data transfers outside the EEA. The Data Processing Addendum at /legal/dpa-template documents the safeguards.

5. Your rights (GDPR + CCPA)

• Right to access — request a copy of your data via Settings → Privacy → Export
• Right to erasure — request deletion via Settings → Privacy → Delete account
• Right to rectification — edit your data in-app or contact us
• Right to portability — JSON export of all your records
• Right to object / restrict processing — contact us

6. Retention

We retain your data while your account is active. After deletion: 30-day recoverable window, then 60-day retention for legal/forensic needs, then hard-purge. Audit logs are retained 7 years for SOC 2 compliance. AI picture descriptions, keywords and purposes are cleared 30 days after the picture is made; 360REV's copy of an AI-generated picture keeps only its neutral details.

7. Security

Encryption in transit (TLS 1.3) and at rest (AES-256). Sensitive credentials (OAuth tokens, LLM API keys) are encrypted with a separate key. We follow OWASP Top 10 mitigations across the platform.

8. Children

360REV isn't intended for users under 16. We don't knowingly collect data from children.

9. Contact

Data protection officer: privacy@360rev.com

This document is a working draft pending counsel review and will be replaced before general availability.