Privacy Policy

Last Updated: January 27, 2026

The Revenue Council ("The Council," "we," "our," or "us") is committed to protecting thy privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard thy information when thou uses our services. Please read this policy carefully to understand our practices regarding thy personal data.

1. Information We Collect

1.1 Information Thou Provides

We collect information that thou voluntarily provides when registering for an account, subscribing to our services, or interacting with our community:

• Account Information: Email address, password (securely hashed)
• Profile Information: Name, professional title, company (optional)
• Payment Information: Processed securely through Stripe (we do not store thy card details)
• Discord Information: Discord user ID, username, and avatar when thou links thy account
• Benchmark Data: Industry data thou voluntarily submits for community benchmarking
• Communications: Messages and feedback thou sends to us

1.2 Information Collected Automatically

When thou accesses our services, we may automatically collect certain information:

• Usage Data: Pages visited, features used, actions taken within the platform
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies and authentication tokens (see Cookie Policy below)

2. How We Use Thy Information

We use the information we collect for the following purposes:

• To provide and maintain our services
• To process thy subscription and payments
• To manage thy Discord access and community roles
• To generate anonymized industry benchmarks (never identifying individuals)
• To send transactional emails (subscription confirmations, billing updates)
• To communicate important service announcements
• To respond to thy inquiries and support requests
• To detect and prevent fraud or abuse
• To improve and optimize our services

3. Third-Party Services

We work with trusted third-party services to provide our platform. These services have their own privacy policies governing the use of thy information:

4. Data Sharing and Disclosure

We do not sell thy personal information. We may share thy information only in these circumstances:

• Service Providers: With third-party services as described above
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: When thou explicitly consents to sharing
• Aggregated Data: We may share anonymized, aggregated benchmark data that cannot identify thee

5. Data Retention

We retain thy personal information for as long as thy account is active or as needed to provide our services. Specifically:

• Account Data: Retained until account deletion is requested
• Payment Records: Retained for 7 years for tax and legal compliance
• Benchmark Submissions: Retained indefinitely in anonymized form for aggregate statistics
• Activity Logs: Retained for 90 days for security purposes

Upon account deletion, we will remove thy personal information within 30 days, except where retention is required by law.

6. Thy Rights

Thou hast the following rights regarding thy personal information:

• Access: Request a copy of the personal data we hold about thee
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of thy account and personal data
• Portability: Request thy data in a portable format
• Objection: Object to certain processing of thy data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, contact us using the information provided below. We will respond to thy request within 30 days.

7. Cookie Policy

7.1 What Cookies We Use

We use essential cookies to operate our services:

• trc_refresh: Authentication token (httpOnly, secure) - expires in 7 days
• trc_access: Session token (httpOnly, secure) - expires in 15 minutes

7.2 No Third-Party Tracking

We do not use advertising cookies or third-party analytics trackers. Our cookies are strictly necessary for the operation of our services.

7.3 Managing Cookies

Thou may configure thy browser to refuse cookies, but this will prevent thee from using our services as authentication requires cookies to function.

8. Data Security

We implement appropriate technical and organizational measures to protect thy personal information:

• Passwords are securely hashed using bcrypt
• All data transmission uses TLS/SSL encryption
• Payment data is handled by PCI-compliant Stripe
• Access to personal data is restricted to authorized personnel
• Regular security audits and monitoring

While we strive to protect thy data, no method of transmission or storage is 100% secure. Thou should protect thy account credentials and notify us immediately of any unauthorized access.

9. International Data Transfers

Our services are hosted in the United States. If thou accesses our services from outside the United States, be aware that thy information may be transferred to, stored, and processed in the United States. By using our services, thou consents to this transfer.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notification within our platform at least 14 days before taking effect. Continued use of our services after such notification constitutes acceptance of the updated policy.

12. Contact Us

If thou hast questions about this Privacy Policy or wishes to exercise thy rights, contact us:

By using The Revenue Council's services, thou acknowledges that thou hast read and understood this Privacy Policy.