Who is responsible
SuccessRev (successrev.com) is published on a personal, non-commercial basis by one individual, who is the data controller for everything described on this page.
For any question or request about your data, write to privacy@successrev.com
When you sign in with Google
Signing in is handled by Google and Supabase. Google shares with us only your basic profile: your email address, your name, your profile picture and a Google account identifier. Nothing else from your Google account is requested — no contacts, no calendar, no Drive.
We use them for one purpose: recognising you when you come back, so the playbook opens where you left it.
What is synced to your account
So the app follows you from one device to another, it saves with your account:
- your reading position: language, open tab, ticked checklist items, expanded sections, the date you set aside the invitation to give feedback if you did, and when you last changed it — and, unless you object, a few usage counters (see “How we count usage”);
- what you enter in Settings: your company, your name, your account executive’s name, the names of your CRM and chat tools, your currency;
- your deck branding: colour, font and, if you upload one, your logo — and whether its speaker notes include your internal tips;
- your own version of the playbook texts, only if you edit one, and when you last saved it;
- your customer records: for each account its name, ARR and renewal date, whether you archived it; the contacts you add to it (first name, last name, role); each quarterly review (quarter, initiative, priorities, adoption and support figures, outcome, your answers to the generator, the deck plan, ticked checklist items); and the timeline entries you log (type, date, linked contact, note). They are stored in separate tables tied to your account: no other user can read them, and the app’s admin screens never show them.
What stays in your browser
Your customer records are no longer among them: they are stored with your account (see above), follow you from one device to another and survive signing out. Settings still offers an export of them.
The browser also keeps your sign-in session, your language choice, the width of the side menu and whether you have already given feedback. The app uses no cookies of its own, and none of this is used to track you.
How we count usage
To know whether the app is useful, its publisher counts, directly in its own database and with no third-party tool: how many accounts signed in and came back, and how many reached a few key steps — filling in Settings, naming a customer record, getting a plan from the generator, opening the deck form, downloading a deck. For that, the app keeps a few counters with your account: how many days you used it and the date of the last one, how many complete plans you generated, how many decks you downloaded, and whether you reached three of those steps — naming a customer record, getting a plan, opening the deck form; filled-in Settings are read from what you entered there. They hold numbers only — never a record name, never your answers to the generator. The count also reads the dates of your sign-ins and of your last activity. It produces totals only: no one is profiled, and your customer records are out of its reach. You can object at any time with “Don’t count my usage” in Settings, which erases your counters and stops them — the number of decks downloaded stays, because it also decides when the app asks for your feedback, but it is then left out of the count — or by writing to the address above.
When you send feedback
By default, feedback is stored with neither your email address nor your account identifier: it cannot be traced back to you. Only its score, its text, the interface language and the playbook version are kept.
If you tick “Let them reply to me”, your email address and account identifier are stored with it, for the sole purpose of answering you. That box is unticked until you tick it.
When you take the QBR quiz
The quiz at /quiz needs no account and sets no cookie. Your answers are scored in your browser and are never sent.
To know whether the quiz is useful, the page records a few anonymous steps in the publisher’s own database: the page was opened, the quiz was started, finished, or followed by a click on “Sign in” or “Share on LinkedIn”. Each step carries only the role you picked (CSM or manager), the interface language, and on completion the score and the three part scores, plus a random number drawn when the page opens and kept in its memory only, so the steps of one visit can be linked without recognising anyone from one visit to the next. No answer, no name, no email address, no account identifier. Like any web request, it reaches Supabase’s servers, whose own technical logs briefly record the IP address; the quiz table does not. Only totals are ever read.
Who else processes it
- Supabase — database and sign-in, hosted in the European Union (Ireland).
- Vercel — hosts the site’s pages; like any web host, it briefly records technical request logs, including IP addresses.
- Google — signs you in, and serves the typefaces the pages use.
- jsDelivr — serves the sign-in library: each time the app’s pages open, and on the other pages only when you sign in or are already signed in.
Some of these providers are based in the United States. Transfers there are covered by the safeguards the GDPR provides for, such as the European Commission’s standard contractual clauses.
Why we are allowed to
- Your account and its sync: providing the service you asked for (GDPR art. 6(1)(b)).
- Your email address with a feedback: your consent, given by ticking the box (art. 6(1)(a)).
- Hosting logs: keeping the site secure and working (art. 6(1)(f)).
- Counting usage in aggregate, and the quiz’s anonymous steps, to improve the app: legitimate interest (art. 6(1)(f)).
How long it is kept
Your account and what is synced with it are kept as long as you use the app, and deleted on request. An archived customer record is kept until you delete it permanently, which erases it at once with its contacts, reviews and timeline. Feedback is deleted by hand once it has been read and dealt with, and never kept beyond two years. The quiz’s anonymous steps are kept two years at most. Hosting logs follow the host’s own short retention.
Your rights
You can ask to access, correct, export or delete your data, to restrict its use, or to object to it, and withdraw a consent at any time. Write to the address above; we answer within one month. Having your account deleted removes your synced data and any feedback that carries your address.
If you think your data is mishandled, you can also complain to your data protection authority — in France, the CNIL (cnil.fr).
Changes
If this page changes in a way that matters, the date at the top changes with it.