Effective Date: 29 October 2025
Last Updated: 26 July 2026
This Privacy Policy is provided by Revenue Plumber, operated by VALUESHIPS Sp. z o.o., having its registered office at ul. Wielka 67, 53-340 Wrocław, Poland, Tax Identification Number (NIP): PL8943161057 (referred to as "Revenue Plumber", "we", "us" or "our").
Terminology used within this Privacy Policy corresponds with definitions established in Revenue Plumber's Terms of Service. This Policy comprehensively outlines our practices regarding the collection, processing and protection of personal data for all users of our platform and services. By utilizing our website or Service, you ("Customer" or "you") acknowledge acceptance of this Privacy Policy and confirm that all personal data you provide is accurate and that you possess appropriate authorization to share such information.
Our data processing activities strictly adhere to this Privacy Policy and comply with all applicable regulations, including but not limited to: Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), the Polish Personal Data Protection Act, the Polish Telecommunications Law Act and all other relevant data protection legislation within the European Union and Poland.
Revenue Plumber operates in multiple capacities within the data processing ecosystem:
As Data Controller: When you create and manage your account profile, submit contact information or interact directly with our platform.
As Data Processor: When you utilize our Service to process your own customers' data or when you submit data through our platform for your business operations.
As Sub-processor: When we receive and process data on your behalf through third-party integrations that you have authorized. Where we act as a sub-processor, we do so under a separate agreement with the party that engages us.
Data security represents a fundamental priority for Revenue Plumber. We implement comprehensive technical and organizational measures to safeguard personal data throughout all processing stages. Our infrastructure operates exclusively within EU/EEA territories, ensuring compliance with European data protection standards.
Access to personal data is strictly controlled and limited to authorized personnel who require such access for legitimate business purposes as outlined in this Policy. Our security protocols undergo regular assessment and continuous enhancement to address evolving threats and maintain industry best practices.
Data Protection Officer: Dorian Sawczuk
Contact: dorian_sawczuk@revenue-plumber.com
Revenue Plumber processes personal data exclusively for specified, explicit and legitimate purposes. When acting as a processor or sub-processor, we strictly adhere to the instructions provided by our Customers, except where additional processing is required by law or explicitly consented to by the data subject.
Note: Personal data pertains exclusively to natural persons. Information relating to legal entities or corporations does not constitute personal data under applicable regulations.
| Data Category | Information Collected | Processing Purpose |
|---|---|---|
| Identity Information | Organization name, Business registration number (NIP), VAT identification number or for sole proprietors: Full name, Business identification numbers | Account identification and verification within our Service platform |
| Communication Data | Business address, Email addresses, Preferred contact methods | Facilitating business communications and service-related correspondence |
| Financial Information | Banking details, Payment method information, Billing address | Processing subscription payments and maintaining accurate financial records |
| Customer-Provided Analytics Data | Revenue metrics, Customer interaction data, Billing information, Billing history, Usage patterns, Support conversation history | Delivering core Service functionality including churn prediction and revenue optimization |
We may utilize your business contact information to send relevant communications about our services, product updates and industry insights that align with your business interests. Such communications are sent in accordance with applicable regulations and our legitimate business interests.
You maintain complete control over marketing communications and may opt-out at any time through:
Upon receiving your opt-out request, we will promptly cease sending marketing communications, typically within 48 hours. Please note that transactional communications essential to Service delivery will continue.
We maintain personal data only for the duration necessary to fulfill the purposes described in this Policy and to comply with our legal obligations. Our retention schedule follows these principles:
Retained throughout the duration of your subscription and for 30 days following account termination to facilitate potential reactivation.
Processed until consent withdrawal or 3 years from last engagement, whichever occurs first.
Maintained for 5 years following the relevant tax year in accordance with Polish tax regulations.
Anonymized after 12 months for aggregate analysis and Service improvement purposes.
We implement appropriate safeguards to ensure secure data handling throughout retention periods and systematic deletion upon expiration of retention requirements.
Under the GDPR and Polish data protection law, you possess comprehensive rights regarding your personal data:
Request confirmation of whether we process your personal data and obtain detailed information about such processing, including copies of the data itself.
Request immediate correction of inaccurate data or completion of incomplete personal information.
Request deletion of your personal data when it's no longer necessary for the purposes collected or when you withdraw consent (where consent was the legal basis).
Request limitations on how we process your data under specific circumstances outlined in the GDPR.
Receive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller.
Object to processing based on legitimate interests or for direct marketing purposes.
Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Exercising Your Rights: Submit requests to dorian_sawczuk@revenue-plumber.com. We will respond within one month, with possible extensions for complex requests as permitted by law.
Supervisory Authority: If you believe your data has been processed unlawfully, you may lodge a complaint with the Polish Data Protection Authority (GIODO) or any competent EU supervisory authority. A complete list is available at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
The relationship between Revenue Plumber, our Customers and third-party services involves complex data processing arrangements governed by this Policy and applicable regulations.
Our Service functionality depends partially on data received from third-party platforms that you authorize. By connecting these services, you explicitly authorize Revenue Plumber to act as either a processor or sub-processor of such data.
When using Revenue Plumber, Customers must:
All parties involved in data processing through Revenue Plumber commit to:
We engage the following service providers to process personal data on our behalf. Each of them is bound by a written data processing agreement imposing data protection obligations no less protective than those set out in this Privacy Policy. Where a provider processes personal data outside the European Economic Area, we rely on the transfer mechanism stated below.
| Provider and registered address | Purpose | Legal basis | Consent category | Place of processing and transfer mechanism |
|---|---|---|---|---|
| Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland | Billing, subscription management and payment processing for Revenue Plumber accounts | Art. 6(1)(b) GDPR, performance of a contract. In respect of payment services Stripe also acts as an independent controller under applicable payment services and anti-money laundering law | Strictly necessary | EU Ireland / USA. EU-US Data Privacy Framework and Standard Contractual Clauses under Stripe's DPA |
| Fakturownia sp. z o.o., ul. Juliana Smulikowskiego 6/8, 00-389 Warsaw, Poland (KRS 0000572426, NIP 5213704420) | Issuing and storing invoices and accounting records | Art. 6(1)(c) GDPR, compliance with a legal obligation under Polish accounting and tax law | Strictly necessary | EU Poland. No transfer outside the EEA |
| HubSpot Ireland Limited, HubSpot House, 1 Sir John Rogerson's Quay, Dublin 2, D02 CR67, Ireland (CRO 515723) | Customer relationship management, sales communication and handling of enquiries | Art. 6(1)(f) GDPR, legitimate interest in managing our commercial relationships | Strictly necessary | EU Germany / USA. EU-US Data Privacy Framework and Standard Contractual Clauses under HubSpot's DPA |
| Smartsupp.com, s.r.o., Šumavská 524/31, Veveří, 602 00 Brno, Czech Republic (Company ID 03668681) | Live chat on our website | Art. 6(1)(f) GDPR, legitimate interest in providing support; Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Act for the associated cookies | Functional | EU Czech Republic. No transfer outside the EEA |
| ChartMogul GmbH & Co. KG, c/o WeWork, Kemperplatz 1, 10785 Berlin, Germany | Subscription and revenue analytics, customer lifecycle reporting | Art. 6(1)(f) GDPR, legitimate interest in analysing our own business performance | Strictly necessary | EU Germany, with onward processing in the USA, the United Kingdom and Luxembourg by ChartMogul group entities and infrastructure providers. Standard Contractual Clauses under ChartMogul's DPA |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland (CRO 368047) - Google Ads | Conversion measurement and remarketing for our own advertising | Art. 6(1)(a) GDPR, consent; Art. 399 of the Polish Electronic Communications Act | Marketing | EU Ireland / USA. EU-US Data Privacy Framework and standard contractual clauses under Google's Data Processing Terms |
| Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (company registration number DK34624607) - Cookiebot | Collecting, recording and demonstrating cookie consent | Art. 6(1)(c) GDPR, compliance with the obligation to demonstrate consent under Art. 7(1) GDPR | Strictly necessary | EU Denmark and EU Ireland. No transfer outside the EEA |
| PostHog, Inc., 2261 Market St. #4008, San Francisco, CA 94114, USA | Product analytics and behavioural analytics within the application | Art. 6(1)(f) GDPR, legitimate interest in improving the service; Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Act for analytics on our public website | Analytics | EU Germany (PostHog EU Cloud, AWS eu-central-1), with administrative access from the USA and the United Kingdom. EU-US Data Privacy Framework and Standard Contractual Clauses under PostHog's DPA |
| Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, USA (a Delaware corporation) | Hosting of the application, website and databases | Art. 6(1)(b) GDPR, performance of a contract | Strictly necessary | EU Netherlands (Railway EU West region), with administrative access from the USA. Standard Contractual Clauses under Railway's DPA |
| Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland (CRO 760497) | AI features: data analysis, content generation and the in-product AI agent | Art. 6(1)(b) GDPR, performance of a contract | Strictly necessary | USA. EU-US Data Privacy Framework certification held by Anthropic, PBC, and Standard Contractual Clauses under Anthropic's DPA |
| Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin 1, D01 W2Y3, Ireland (CRO 558379) | Delivery of in-product notifications and alerts to our internal workspace | Art. 6(1)(f) GDPR, legitimate interest in operating and monitoring the service | Strictly necessary | EU Ireland / USA. EU-US Data Privacy Framework and Standard Contractual Clauses under Slack's DPA |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland (CRO 368047) - Google Workspace | Delivery of transactional email, including account notifications, password resets and alerts | Art. 6(1)(b) GDPR, performance of a contract | Strictly necessary | EU Ireland / USA. EU-US Data Privacy Framework and Standard Contractual Clauses under Google's Data Processing Terms |
Where a provider is listed as processing data in the European Economic Area but has personnel outside it, remote administrative access by that personnel constitutes a transfer and is covered by the mechanism stated above.
This list does not cover the sub-processors we engage when acting as a processor on behalf of our customers. Those are set out in Schedule 2 to our Data Processing Agreement.
Our website employs cookies to enhance user experience, analyze platform usage and deliver relevant content. Cookies are small data files stored on your device that help us remember your preferences and improve our services.
Essential Cookies: Required for basic platform functionality. Cannot be disabled without impacting core features.
Performance Cookies: Help us understand platform usage patterns to improve user experience.
Functional Cookies: Remember your preferences and settings for personalized experience.
Analytics Cookies: Provide insights into visitor behavior and platform performance metrics.
Marketing Cookies: Enable targeted advertising and measure campaign effectiveness (only with consent).
The list below is generated automatically by our consent provider and shows the specific cookies used on this website, updated as our site changes.
Upon first visiting our website, you'll encounter our cookie consent banner. You can accept all cookies, customize your preferences or decline non-essential cookies. Your preferences can be modified at any time using the "Cookie Settings" button at the bottom of this page or through your browser settings.
Browser Controls: Most browsers allow you to refuse or delete cookies through their settings menu. Please note that disabling certain cookies may impact platform functionality.
While our primary infrastructure operates within the EU/EEA, certain third-party services may involve data transfers to other jurisdictions. We ensure all international transfers comply with GDPR requirements through:
Revenue Plumber is designed for business use and is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will promptly delete the information and terminate the associated account.
We reserve the right to modify this Privacy Policy to reflect changes in our practices, legal requirements or service offerings. Material changes will be communicated via email to registered users at least 30 days before taking effect. Continued use of our Service after changes constitutes acceptance of the updated Policy.
The current version of this Policy supersedes all previous versions. We maintain an archive of previous Policy versions for transparency, available upon request.
For any questions, concerns or requests regarding this Privacy Policy or our data processing practices, please contact:
Revenue Plumber Privacy Team
Email: support@revenue-plumber.com
Data Protection Officer: dorian_sawczuk@revenue-plumber.com
Address: ul. Wielka 67, 53-340 Wrocław, Poland