Compliance with Data Protection Laws

Revosuite is committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the Moroccan Law 09-08 (CNDP) on the protection of individuals with regard to the processing of personal data.

• Lawfulness, Fairness, and Transparency: We process data lawfully and transparently.
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes.
• Data Minimization: We only collect data that is necessary.
• Accuracy: We keep data accurate and up to date.
• Storage Limitation: We keep data only for as long as necessary.
• Integrity and Confidentiality: We process data securely.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for every user within Your organization to access our Service or parts of our Service.
• Application refers to Revosuite, the software platform provided by the Company.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Benchmark Middle East, Al Thuraya 1 Tower, Dubai Media City, UAE, United Arab Emirates.
• Country refers to: United Arab Emirates
• Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a detailing visit).
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Job title
• Profile Picture
• Country
• Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Revosuite platform application automatically collects data like timestamps associated with using the service, location associated with using detail aids presented in the service, explicit actions performed on one or more applications/s part of the subscription like (but not limited to) actions documented on specific HCPs, process workflows, and any notes, comments or feedback needed to achieve the value identified by the service. This data is used to provide the business intelligence required by the subscription.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

• Cookies or Browser Cookies: A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
• Web Beacons: Certain sections of our Service and our emails may contain small electronic files known as web beacons that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including monitoring the usage of our Service.
• To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
• For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the products, items, or services You have purchased or of any other contract with Us through the Service.
• To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation.
• To provide You with news, special offers, and general information about other goods, services, and events that we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
• To manage Your requests: To attend and manage Your requests to Us.
• For business transfers We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
• For research and improvement: We may use information for internal purposes, such as data analysis, identifying usage trends, and determining the effectiveness of our campaigns. We may also use aggregated and anonymized data to train machine learning models and improve our algorithms. We do not use your proprietary, identifiable business data to train models for the benefit of other clients without your explicit consent.

We may share Your personal information in the following situations:

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

• Active Accounts: We retain data for the duration of your active subscription.
• Inactive/Cancelled Accounts: We retain your account data for a period of [12 months] after subscription cancellation to allow for easy reactivation. After this period, data is permanently deleted or anonymized.
• Legal Compliance: We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

International Data Transfers

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ.

We use Amazon Web Services (AWS) to host our data. Our servers are located in the following regions::

• eu-central-1 (Frankfurt, Germany)
• us-east-1 (N. Virginia, USA)
• us-east-2 (Ohio, USA)

Where Personal Data is transferred from the EEA or Morocco to a country not recognized as providing an adequate level of data protection (such as the United States), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate legal mechanisms, to ensure your data remains protected in accordance with GDPR and Moroccan Law 09-08.

AWS maintains robust compliance with the GDPR. You can review the details of their compliance here: AWS GDPR Compliance Center.

Data Transfer Safeguards

In addition to these legal frameworks, we have taken appropriate technical safeguards to protect your personal data during these transfers, including:

• Encryption: We use secure connections (SSL/TLS) to transfer your data.
• Access Control: We only allow authorized personnel to access your personal data.
• Regular Audits: We regularly update access authorizations to ensure that they are not compromised.
• Enhanced Security: We may enforce 2-factor authentication (2FA) using mobile numbers to further secure access to your data.

Account Deletion and Data Removal

As noted above, we retain data for a limited period after your subscription ends to facilitate easy reactivation without incurring new setup costs.

However, you have the right to request the immediate deletion of your data at any time by contacting us. Please be aware that if you request immediate deletion and later decide to resume the Service, you will be treated as a new customer. This means any previous historical data will be lost, and standard setup fees for new accounts will apply.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service
• Protect against legal liability

Your Data Protection Rights (GDPR & CNDP)

Depending on your location, you have specific rights regarding your Personal Data. Revosuite is committed to allowing you to exercise these rights:

• Right to Access: You have the right to request copies of your Personal Data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (Right to be Forgotten): You have the right to request that we erase your Personal Data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your Personal Data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us at: privacy@revosuite.com

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: privacy@revosuite.com