Privacy Policy

Revenue Unit respects your privacy. This Privacy Policy explains what personal data we collect through revenueunit.com, how we use it, how we protect it, and your rights under the General Data Protection Regulation (GDPR) and Estonian data protection law (Personal Data Protection Act / Isikuandmete kaitse seadus).

1. Who We Are

Pivo7 OÜ (trading as Revenue Unit) is the data controller for the personal data collected through this website.

If you have any questions about this policy or want to exercise your rights, contact us at the email above.

2. What Data We Collect

We collect personal data in the following situations:

When you subscribe to Revenue Unit Intel (our newsletter)

• Email address
• IP address (collected by Beehiiv for compliance and anti-spam)
• Date and time of subscription and confirmation of consent
• Email engagement data: opens, clicks, reading patterns (tracked by Beehiiv to measure newsletter performance)

When you contact us or request a conversation

• Name
• Email address
• Company name (if provided)
• Message content

When you book a conversation through Proton

• Name and email address
• Selected meeting time
• Any information you provide when booking

When you use the Free Assessment

• Your answers to the 44 diagnostic questions
• If you choose to save or share your results: email address (otherwise, assessment data is processed locally in your browser and not stored by us)

When you visit the website

• Technical data: IP address, browser type, device type, operating system, referring page, pages visited, time spent
• Cookie-based data: see our Cookie Policy

We do not collect special category data (health, political views, religious beliefs, etc.).

3. Why We Collect It and Legal Basis

Under GDPR, we can only process your data if we have a valid legal basis. Here's ours:

4. How Long We Keep Your Data

• Newsletter data: until you unsubscribe, plus one year for compliance records
• Contact form data: up to 3 years after last interaction
• Booking data: up to 2 years after the meeting
• Assessment data (if saved): up to 2 years, then deleted
• Technical and cookie data: see our Cookie Policy for specific retention periods

We only keep data for as long as we need it to serve the purposes above.

5. Who Has Access to Your Data

Your data is only accessed by Revenue Unit team members who need it to do their work, and by the trusted service providers we use to operate the site:

• Beehiiv, Inc. (United States) — newsletter delivery, open/click tracking, and subscriber analytics. Beehiiv is bound by a Data Processing Agreement with Pivo7 OÜ and complies with GDPR. See Beehiiv's Privacy Policy for details.
• Proton AG (Switzerland) — end-to-end encrypted email, file storage, and meeting/booking infrastructure. See Proton's Privacy Policy for details.
• Google LLC (United States) — Google Analytics, used to understand aggregate site usage. Analytics data is anonymized where possible and only collected after consent through the cookie banner. See Google's Privacy Policy for details.

All processors are bound by Data Processing Agreements (DPAs) that require them to protect your data to the same standard we do.

We do not sell, rent, or share your data with advertisers or third parties for marketing purposes.

6. International Transfers

Some of our service providers operate outside the European Economic Area (EEA):

• Beehiiv and Google are based in the United States. Data transfers are protected by Standard Contractual Clauses approved by the European Commission, as required by GDPR.
• Proton is based in Switzerland, which is recognized by the European Commission as providing an adequate level of data protection (Adequacy Decision).

Where international transfers are required, we ensure appropriate safeguards are in place so your data remains protected at GDPR-level standards regardless of where it's processed.

7. How We Protect Your Data

• We use Proton for email, file storage, and internal communications — Proton offers end-to-end encryption and is based in Switzerland under strict privacy law
• The website uses HTTPS encryption for all data transmitted
• Access to personal data is restricted to authorized personnel only
• We review our security practices regularly

8. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data (the "right to be forgotten")
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest or for direct marketing
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at hithere@revenueunit.com. We will respond within 30 days.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee. EU residents can also lodge a complaint with the supervisory authority in their country of residence.

9. Children's Data

This website is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top and, for significant changes, notify subscribers by email. Your continued use of the website after changes means you accept the revised policy.

11. Contact

For any question, concern, or request related to your personal data, contact us at: