Solutions: Data & Technology Overview — Revieve

Revieve Solutions: Data & Technology Overview

Effective Date: April 3, 2026

Overview

Revieve provides AI-powered technology solutions to brands and retailers ("Clients"), including advisor and personalization experiences.

Revieve does not provide these services directly to consumers.

When an end user interacts with a Revieve-powered solution, the relevant Client acts as the data controller and is responsible for providing privacy disclosures and obtaining any required consents.

Revieve acts solely as a data processor and does not independently determine the purposes or means of processing such data. Revieve processes data only on behalf of and under the instructions of its Clients in accordance with applicable agreements.

This page reflects current data processing practices for Revieve Solutions and provides a consolidated overview of information previously described across Revieve materials.

What This Page Covers

This page provides a high-level overview of how Revieve technology processes data when used as part of Client-operated solutions.

It does not replace:

  • the privacy policy of the Client providing the experience
  • any agreement between Revieve and its Clients
  • any legally required consumer notice or consent mechanism provided by the Client

How Revieve Technology Works

Revieve technology enables processing of user-provided inputs within Client-operated experiences to generate personalized outputs such as product recommendations, insights, and guidance.

This processing may include:

  • image-based analysis (where applicable)
  • user-provided preferences and selections
  • interaction data within the solution

Advisor Solution (Standard Experience)

Data for the Advisor Solution is processed as follows:

Information temporarily collected and processed (not stored)

  • First 8-octets of the end user's IP address for country and city-level location purposes.
    Deleted after user session is closed. Used for identifying relevant territory and enabling accurate recommendations.
  • Selfie image of end users for skin analysis purposes.
    Deleted immediately after analysis is completed. Used to conduct analysis and extract metrics in numeric values. The image is processed transiently for the purpose of generating numerical analysis outputs and is not retained, stored, or used to identify an individual. The image is present on the consumer's device only and is immediately discarded. The solution uses abstracted numeric values only.

    Any required user disclosures and consents associated with such processing are the responsibility of the Client, as the data controller, operating the experience.

Information collected and stored in an anonymized format

  • An identification number created for the e-commerce site visitor. An anonymized, abstracted ID used to count visitors of the solution.
  • End user approximate location (city-level) as collected by GeoIP. Used only with shopper/consumer consent and for improving relevance of recommendations.
  • Product recommendations provided to the end user. Linked to the Client's product identification numbers and used to track products presented by the solution.
  • User preferences and selections provided through the solution. Used to educate the consumer and provide relevant recommendations.
  • Environmental information (e.g., weather and forecast based on location). Used to improve accuracy and relevance of recommendations.
  • Information derived from the end user's selfie. Transformed into numerical scores and attributes. The selfie itself is not stored.

How anonymization works

User data is anonymized by automatically generating a unique, session-specific user ID without any personally identifiable information. This ensures the solution operates without knowledge or context of the user's identity.

Pro Version (Optional Feature)

Certain Clients may enable an optional Pro version of the Advisor Solution (such as Skin Coach). This represents a separate, optional experience and requires explicit user participation.

In addition to the processing described above, the Pro version may include:

  • email address
  • authentication-related data (such as password hashes)
  • selfies associated with a user account
  • historical results and tracking data

These features are:

  • fully optional
  • enabled and controlled by the Client
  • subject to the Client's privacy policy and consent mechanisms

Any such data is collected and processed under the direction and control of the Client, as the data controller, including responsibility for obtaining any required user consents.

What Revieve Does Not Do

Revieve does not:

  • sell personal data
  • use data to identify individual users
  • access or receive directly identifiable personal information in the standard Advisor experience
  • use Client data for independent advertising or profiling

Revieve does not train its models on consumer personal data collected through its solutions and does not use such data to develop generalized or shared models.

Revieve may use aggregated and anonymized data, only where permitted under its agreements with Clients, in a manner that does not identify any individual or Client, for:

  • analytics
  • benchmarking
  • service improvement

Data Security and Access

Revieve applies appropriate technical and organizational measures designed to protect data processed through its solutions. Access to data is strictly limited and controlled in accordance with internal policies and contractual obligations.

Data Retention

Temporary data described above is processed for the purpose of providing the solution and is not stored.

Where data is stored in anonymized or account-based form, retention is governed by Client configuration, contractual obligations, and applicable law.

Privacy Requests

Because Revieve acts as a data processor, requests relating to access, correction, or deletion of personal data should be directed to the Client providing the experience.

Revieve supports its Clients in responding to such requests in accordance with applicable law.

Learn More

For general information about Revieve's data processing commitments, please see:
https://www.revieve.com/company/dpa/

Data processing obligations are governed by the specific agreement between Revieve and each Client, and may vary depending on the applicable contractual terms. In the event of any conflict, the terms of the applicable agreement between Revieve and the Client prevail.

This page is provided for general informational purposes only and does not form part of any contractual agreement.

Contact

If you have questions about this page or Revieve's role as a data processor, please contact:

Revieve Oy
support@revieve.com