Privacy Policy

Privacy Policy

Effective as of 2026-08-20.

Revenue Leak ("Revenue Leak," "we," "us," or "our") is operated from Ireland and provides a online revenue leak diagnostic that estimates where revenue may be leaking, based on questionnaire answers, and optional paid written reports. This Privacy Policy describes how Revenue Leak processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including our website at https://www.revenueleak.report, our Revenue Leak Check Chrome extension, and related marketing activities) as well as other activities described in this Privacy Policy (collectively, the "Service").

Your rights under GDPR: We process personal data in accordance with the General Data Protection Regulation (GDPR) and Irish data protection law. See the section "Your rights under GDPR (including Ireland)" below for your rights and how to exercise them.

California and U.S. state privacy rights: If you are a resident of certain U.S. states, see the State privacy rights notice section below.

Personal information we collect

Information you provide to us

Personal information you may provide to us through the Service or otherwise includes:

• Contact data, such as your email address when you save a preview link, request report delivery, or complete checkout (Stripe may also collect your email at checkout).
• Profile and questionnaire data, such as your niche or category (for example SaaS, ecommerce, agency, or local services) and the answers you provide in the diagnostic wizard.
• Communications data based on our exchanges with you, including when you contact us by email or otherwise.
• Transactional data, such as information relating to or needed to complete your purchase of a paid report on the Service, including order references and payment confirmation (payment card data is collected directly by Stripe, not by us).
• User-generated content and input data, such as questionnaire answers and diagnostic results (scores, estimated losses, and report content) generated from your inputs.
• Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them (we do not send a regular newsletter; see Email messages below).

Third-party sources

We may combine personal information we receive from you with personal information we obtain from other sources, such as:

• Service providers that provide services on our behalf or help us operate the Service (for example payment confirmation from Stripe).

Automatic data collection

We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:

• Device data, such as your computer or mobile device's operating system type and version, browser type, screen resolution, device type, IP address, unique identifiers (including identifiers used for advertising purposes when analytics or advertising tools are enabled and you have consented), language settings, and general location information such as city, state, or geographic area.
• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
• Communication interaction data such as your interactions with our email communications (for example whether you open and/or forward emails), which we may collect through pixel tags embedded invisibly in our emails.

For more information concerning our automatic collection of data, please see the Tracking & other technologies section below.

We also store in-progress wizard answers in your browser's localStorage (key rlr-wizard-progress) and may keep preview results in sessionStorage for the current browser tab session. Report and preview URLs include a signed token so only people with the link can load that diagnostic.

Tracking & other technologies

Cookies and other technologies. Some of our automatic data collection is facilitated by cookies and other technologies. When analytics are configured and you accept cookies on our cookie banner, we may use Google Analytics to understand site usage and conversion events (for example completing the diagnostic or purchasing a report). When configured and you have accepted cookies, we may also use the Meta Pixelto measure ad performance and site conversions. Google and Meta may set cookies or use similar technologies. See Google's privacy policy and Meta's privacy policy. You can opt out of Google Analytics via Google's opt-out add-on. We store your cookie consent preference in browser localStorage (rlr_analytics_consent).

Browser localStorage used to save diagnostic progress is not used for advertising.

Chrome extension

Revenue Leak Check audits the page in the current tab when you click the extension icon. That check runs entirely in your browser. We do not receive the scanned page, its cookies, or a list of sites you visit. The extension only requests permission to run on the tab you invoked it on. If you click through to run the full diagnostic on this website, that visit is covered by the rest of this policy.

Learn more on the Chrome extension page.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

• Service delivery and operations — provide the Service; run the diagnostic and show your preview; store results so you can return via a saved link; email you a link to your full report after you pay (when email delivery is configured); communicate with you about the Service; and provide support.
• Service improvement and analytics — analyze your usage of the Service, improve the Service, and understand user activity (including which pages are most visited). For example, we use Google Analytics for this purpose when configured and you have consented to analytics cookies.
• Marketing and advertising — send direct marketing communications where permitted (you may opt out as described below); and, when configured and you have consented, use cookies and similar technologies for interest-based advertising (for example through the Meta Pixel).
• Compliance and protection — comply with applicable laws and legal process; protect our, your, or others' rights, privacy, safety, or property; enforce the terms and conditions that govern the Service; and prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity.
• Aggregated, de-identified, or anonymized data — create aggregated, de-identified, or anonymized data from personal information and use it for lawful purposes, including analyzing and improving the Service. We do not attempt to reidentify such data.

Retention

We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, establishing or defending legal claims, or for fraud prevention purposes. We keep diagnostic records and email addresses as long as needed to provide the Service, send your report, handle payment issues, and meet legal obligations. We do not currently run an automatic deletion schedule for old diagnostics. You can ask us to delete your data (see Your choices and How to contact us).

How we share your personal information

We may share your personal information with the following parties (or as otherwise described in this Privacy Policy):

• Service providers — third parties that provide services on our behalf or help us operate the Service (such as hosting, information technology, customer support, email delivery, marketing, and website analytics).
• Payment processors — any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processor, Stripe. Stripe may use your payment data in accordance with its privacy policy, https://stripe.com/privacy.
• Email delivery — when configured, we use Resend to send report and reminder emails. See Resend's privacy policy.
• Advertising partners — third-party advertising companies for the interest-based advertising purposes described above when you have consented to analytics cookies.
• Hosting provider — our app and database are hosted on infrastructure we use to serve the site (for example Vercel and a database service in production).
• Professional advisors — lawyers, auditors, bankers, and insurers, in the course of professional services they render to us.
• Authorities and others — law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for compliance and protection purposes.

We do not sell your personal information for money.

Your choices

• Opt-out of marketing — you may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. You may continue to receive service-related and other non-marketing emails.
• Cookies and other technologies — you can decline analytics cookies on our cookie banner. You can also clear site data in your browser settings, or use "Start over" in the wizard, to remove saved diagnostic progress.
• Do Not Track — some Internet browsers may be configured to send "Do Not Track" signals. We currently do not respond to "Do Not Track" signals.
• Access or deletion — email us to request a copy of your diagnostic data or to ask us to delete it. We will need your email address or diagnostic link to find your record.
• Declining to provide information — we need to collect certain personal information to provide paid report delivery and checkout. If you do not provide information we identify as required, we may not be able to provide those services.

Email messages

If you pay for a report, we may email you a link to access it. Email is optional to see your free preview. If you save a preview with your email but do not purchase, we may send up to two reminder emails with a link back to your preview (typically about 24 hours, then 48 hours). We do not send a regular newsletter.

Other sites and services

The Service may contain links to websites, mobile applications, and other online services operated by third parties. We do not control those services and are not responsible for their actions. We encourage you to read the privacy policies of the other websites and services you use.

Security

We employ technical, organizational, and physical safeguards designed to protect the personal information we collect, including HTTPS, signed access tokens for report links, and industry-standard providers for payments and email. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

International data transfer

We operate from Ireland. Some of our service providers (for example hosting, payment processing, analytics, and email delivery) may process personal data in the United States or other countries outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we rely on appropriate safeguards under the GDPR, such as the EU Standard Contractual Clauses or other mechanisms approved by the European Commission. You may contact us for more information about transfer mechanisms.

Children

The Service is not intended for use by anyone under 18 years of age and is not directed at children. If you are a parent or guardian of a child from whom you believe we have whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent required by law, we will comply with applicable legal requirements to delete the information.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications will be effective upon posting (or as otherwise indicated). Your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service.

How to contact us

Privacy questions or requests: support@revenueleak.report

Email: support@revenueleak.report

Your rights under GDPR (including Ireland)

General. This section applies if you are in Ireland, the United Kingdom, or the European Economic Area ("Europe"). References to "personal information" in this Privacy Policy include "personal data" as defined in the GDPR.

Controller. Revenue Leak is the controller in respect of the processing of your personal data covered by this Privacy Policy. We are established in Ireland and process personal data in accordance with the GDPR and the Irish Data Protection Act 2018.

Legal bases for processing. Our legal bases for processing your personal data include: performance of a contract with you (for example delivering the diagnostic and paid report); legitimate interests (for example improving the Service, security, and direct marketing where permitted); compliance with law; and consent (for example optional analytics and advertising cookies).

Your rights. If you are located in Europe, you may have the right to access, correct, delete, restrict, object to, or request transfer of your personal data, and to withdraw consent where processing is based on consent. You may submit requests by contacting us using the details above.

Supervisory authority. You have the right to lodge a complaint with your local supervisory authority. In Ireland, the supervisory authority is the Data Protection Commission (www.dataprotection.ie).

Data processing outside Europe. As described in the International data transfer section above, some providers may process personal data in the United States or other countries outside the EEA. Where required, we rely on appropriate GDPR safeguards.

State privacy rights notice (U.S. residents)

Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the "State Privacy Laws").

For purposes of this section, "Personal Information" has the meaning given to "personal data," "personal information," or other similar terms in the State Privacy Laws. In some cases, we may decline your request as permitted by law. We may need to verify your identity before processing a request.

Your privacy rights. The State Privacy Laws may provide residents with some or all of the following rights: information about how we collect and use Personal Information; access to Personal Information; correction of inaccurate Personal Information; deletion of Personal Information; opt-out of certain processing for targeted advertising; appeal of a denied request; and nondiscrimination for exercising these rights.

Opt-out of sale or sharing. While we do not sell personal information for money, like many sites, we may use services that help deliver interest-based ads when you have consented to analytics cookies. State Privacy Laws may classify our use of some of these services as "selling" or "sharing" your Personal Information with advertising partners. You can opt out by declining analytics cookies on our cookie banner, using browser-based opt-out tools, or contacting us. We honor Global Privacy Control ("GPC") signals as valid opt-out requests for the sale or sharing of Personal Information where required by applicable law.

Exercising state privacy rights. You may submit requests by emailing us at the contact address above.

Personal information we collect, use, and disclose. The following summarizes our practices currently and during the 12 months preceding the effective date of this Privacy Policy:

Additional information for California residents. California residents may have additional rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act). For details on how to exercise these rights, please see this section and our contact information above.

Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16 years of age.

This Privacy Policy is adapted from templates by General Legal (CC0). See also our Terms of Service at https://www.revenueleak.report/terms.