Privacy Policy

Reveloris is the data controller for the personal data described in this policy. Reveloris is founded and operated by Robert Bergersäter and is based in Sweden.

Reveloris is the trading and public brand. The Kyvex legal entity remains the contracting party for agreements, billing and statutory notices, and is named where those contexts require it.

For any privacy or data protection matter, contact privacy@reveloris.com. General business enquiries go to r@reveloris.com.

This policy applies to:

• — visitors to reveloris.com;
• — people who submit the process inquiry form or contact Reveloris by email or LinkedIn;
• — ordinary business correspondence with prospective clients, clients, partners and contacts.

The site is intended for a professional B2B audience and is not directed at children.

Information you submit. When you use the inquiry form, Reveloris receives the name, work email address, organisation and industry you provide, together with the optional role field, the process description and any information you add about what makes that process difficult. The form also records which page the inquiry came from, the time of submission and your acknowledgement of this policy.

Correspondence. If you email or message Reveloris, the content of that correspondence and your contact details are processed in order to respond and to keep an ordinary record of the exchange.

Technical and security data. Serving the site and protecting the inquiry form necessarily involves processing standard technical data such as IP address, request metadata and user-agent information. To limit abuse of the form, Reveloris stores a one-way hashed value derived from the submitting IP address together with a submission count — the IP address itself is not stored in that record.

No other categories of personal data are collected through this website. There are no accounts, no user profiles and no tracking pixels.

Responding to your enquiry. Where your message concerns a possible engagement, this is processing necessary to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). Where it is general business correspondence, Reveloris relies on legitimate interests (Article 6(1)(f) GDPR) in responding to inbound contact and conducting ordinary business communication.

Business relationship management and recordkeeping. Legitimate interests (Article 6(1)(f) GDPR) in maintaining a record of enquiries, conversations and engagements.

Security, abuse prevention and site operation. Legitimate interests (Article 6(1)(f) GDPR) in keeping the site available and preventing spam and misuse of the form.

Legal obligations. Where retention or disclosure is required by law, for example accounting obligations, the basis is Article 6(1)(c) GDPR.

The acknowledgement checkbox on the inquiry form confirms that you have read this policy. It is a transparency measure, not the legal basis for the processing described above. Reveloris does not send marketing newsletters from this website and does not ask for marketing consent here. If any future processing does rely on consent, that will be made explicit and you will be able to withdraw it at any time.

Reveloris uses a small number of service providers that process personal data on its behalf, under contract and only on instruction:

• — Lovable — hosting and delivery of the website and its server-side functions.
• — Supabase — the managed database used to store inquiry submissions and the form rate-limiting records.
• — Resend — transactional email delivery of the notification sent to Reveloris when an inquiry is submitted.

In addition, ordinary email correspondence is handled by Reveloris's email provider. Personal data may also be disclosed to professional advisers or authorities where required by law. Reveloris does not sell personal data and does not share it for advertising purposes.

Some of the service providers above, or their sub-processors, may process data outside the European Economic Area. Where that happens, Reveloris relies on the transfer safeguards provided for under Chapter V of the GDPR, such as an adequacy decision or standard contractual clauses, as applicable to the provider concerned. You can request further detail about the arrangements relevant to your data at privacy@reveloris.com.

Personal data is kept only as long as it is needed for the purpose it was collected for. In practice that means:

• — enquiries and correspondence are retained for the duration of the enquiry and any resulting relationship, and afterwards for as long as there is a reasonable prospect of continued contact or a legitimate recordkeeping need;
• — data required for legal, accounting or dispute-related purposes is retained for as long as the relevant obligation or limitation period applies;
• — rate-limiting records are short-lived and are only used to enforce the submission limit.

When data is no longer needed it is deleted or anonymised. You can ask for your enquiry to be deleted sooner at any time.

Subject to the conditions in the GDPR, you have the right to request access to your personal data, to have inaccurate data corrected, to have data erased, to have processing restricted, and to object to processing based on legitimate interests. Where processing is based on consent or on a contract and carried out by automated means, you also have the right to data portability. Where processing relies on consent, you may withdraw that consent at any time without affecting processing carried out beforehand.

To exercise any of these rights, email privacy@reveloris.com. Requests are answered without undue delay and normally within one month.

If you believe your data has been handled incorrectly, you are welcome to raise it directly with Reveloris first. You also have the right to lodge a complaint with a supervisory authority. In Sweden this is Integritetsskyddsmyndigheten (IMY), imy.se. Individuals in the EEA may also contact the supervisory authority in their own country of residence or workplace.

Reveloris takes appropriate technical and organisational measures to protect personal data, including encrypted connections to the site, access controls on the inquiry database, restricting access to inquiry data to those who need it, and rate limiting on the public form. No online service can be guaranteed completely secure, and this policy makes no certification or absolute security claim.

reveloris.com uses no analytics service, no advertising or profiling cookies, no tracking pixels, no advertising tags and no social media trackers. Your visit is not measured by any third-party analytics provider and no identifiers are stored on your device.

Because no non-essential cookies are used and no personal data is stored on your device, no cookie consent banner is required or shown. Should privacy-friendly measurement be introduced in the future, this policy will be updated and any consent required will be obtained beforehand.

Reveloris does not carry out automated decision-making or profiling producing legal or similarly significant effects on the basis of data collected through this website. Enquiries are read and answered by a person.

This policy may be updated as the site, the services or the legal requirements change. The current version is always published at reveloris.com/privacy with the date it was last updated. Material changes will be reflected in that date.

Last updated: 19 August 2026