Privacy Policy
Last updated: June 2026
Reva ("Reva," "we," "us," or "our") provides a done-for-you patient-growth service for med spas. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It covers visitors to our website and the clinics we work with.
Information we collect
Information you give us
When you request a demo or contact us, we collect the details you submit, such as your name, spa name, email address, number of locations, and any message you include.
Patient information we process for clients
To run a clinic's lead response, reactivation, reminders, and review requests, we process information about that clinic's patients on the clinic's behalf, such as names, contact details, and appointment activity. For this information, the clinic is the data controller and Reva acts as a service provider or processor under the clinic's instructions.
Usage information
Like most websites, we may collect basic technical information such as browser type, device, and pages viewed, to keep the site secure and improve it.
How we use information
- To respond to demo requests and communicate with you.
- To deliver and operate the service for clinics, including answering inquiries, reactivating past patients, sending reminders, and requesting reviews.
- To maintain the security, reliability, and quality of the service.
- To comply with our legal and contractual obligations.
How we share information
We do not sell your personal information. We share information only with service providers that help us operate (for example, hosting, database, messaging, and email providers), and only as needed to deliver the service. We may also disclose information when required by law or to protect our rights and the safety of others.
Patient data and HIPAA
Where a clinic shares protected health information with us, we handle it under the terms of our agreement with that clinic, which may include a business associate agreement, and apply administrative, technical, and physical safeguards appropriate to the information. We use patient information only to provide the service and as the clinic instructs.
Data security
We use reasonable safeguards, including encryption in transit and at rest and access controls, to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Data retention
We keep information for as long as needed to provide the service and for legitimate business or legal purposes, then delete or de-identify it. Clinics may request deletion of their data in line with our agreement.
Your choices and rights
You may opt out of marketing messages at any time. Depending on where you live, you may have rights to access, correct, or delete your personal information. To make a request, contact us at the address below. If your request concerns patient information held for a clinic, we will refer you to that clinic.
Cookies
Our website uses only the cookies needed to function. We do not use it for cross-site advertising.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the date above. Continued use of the site means you accept the updated policy.
Contact us
Questions about this policy or your information? Email lachu.connect@gmail.com.
This page is a starting template, not legal advice. Because Reva may handle patient data, please have a qualified attorney review and adapt it (and add your legal entity name, address, and effective date) before you rely on it.