Privacy Policy

Last updated: October 3, 2026

This policy explains how CXFormula LLC ("CXFormula", "we", "us") handles personal data for RAVE™. It has two parts, because we play two different roles:

• Part A covers our customers and their team members (people who use the RAVE™ dashboard) and visitors to rave.cxformula.com. Here we decide how data is used: we are the controller (or "business").
• Part B covers people who visit or buy from our customers' websites where RAVE™ runs. Here we process data on the customer's behalf and under its instructions: we are a processor (or "service provider"), and the customer is the controller. Our Data Processing Agreement governs that work.

Questions or requests: support@cxformula.com. CXFormula LLC, 60 Whitney Road, Suite 13, Mahwah, NJ 07430, USA.

Part A — RAVE™ customers, users and our website

What we collect and where it comes from

• Account and profile data (from you): your email address (used to sign in by emailed link), account and workspace names, and optionally company, phone, country, logo and brand colors.
• Team data (from the person who invites you): your email, role and which workspaces you can access.
• Billing data (from you, through Stripe): billing name, email and address, plan and invoice history. Card details are collected and held by Stripe; we never receive your full card number.
• Usage data (from your use of the dashboard): actions you take, settings you change, AI coach requests, and an audit log of sensitive changes.
• Integration secrets (from you): API keys you connect for verified imports (ActiveCampaign, HighLevel, ClickFunnels, Stripe), which we store encrypted (AES-256-GCM).
• Signup source (from your browser): when you first arrive at rave.cxformula.com with campaign tags or from another site, we remember the UTM tags, the referring site, the landing page and your country (from your IP address) in a first-party cookie, and save them on your account if you sign up. See our Cookie Notice.
• Support messages (from you): what you send to support@cxformula.com or hello@cxformula.com.
• Technical data: our hosting providers process your IP address, browser and request details to deliver pages and protect the Service. We use your IP address briefly to rate-limit requests and to look up your country; RAVE™ does not store it in its database.

We don't use third-party analytics or advertising tools on rave.cxformula.com or in the dashboard.

How we use it, and our legal bases

Part B — Visitors to our customers' websites

If you visited or bought from a site that uses RAVE™, that business decides what RAVE™ collects and is responsible for telling you about it. Please read its privacy notice, and send requests to it first. Here is what RAVE™ itself does with that data.

Activity shown on cards

When you sign up, buy or engage on a customer's site, RAVE™ may receive an activity entry from the customer's tools (webhook or API), from the RAVE™ pixel on the page, or from an import. An entry can contain:

• your first name and last initial. If the source sends a full last name, we keep only its first letter and discard the rest before anything is stored. We never store last names;
• your email address, which we turn into a one-way SHA-256 hash on arrival. We never store your raw email. The hash lets us remove duplicates and honor deletion requests. It is still treated as personal data;
• your approximate location (city, region, country), either sent by the source or looked up from your IP address by our host at the moment the entry arrives. We store the location, not the IP address;
• the action (for example signup or purchase), the offer or content name, the funnel step, the time, and a profile image link if the source sends one;
• the random visitor ID described below, if the entry came from the pixel.

What other visitors can see: at most your first name and last initial (for example "Sarah K."), your city and region, what you did and when. We never store your last name or your raw email. The customer can show first names only, or no names at all ("Someone"). Cards show only entries from the customer's chosen lookback window (30 days by default).

Pixel measurement

The RAVE™ pixel stores a random visitor ID in your browser's local storage and a few per-visit flags in session storage. It sets no cookies. It sends RAVE™ the page path you are on, page views, a heartbeat every 30 seconds while the tab is visible (for "people viewing now" counts), and which cards were shown, hovered or clicked, and whether you later reached the customer's goal. This is used for live counts, analytics and A/B measurement for that customer only. Details are in the Cookie Notice.

If the customer turns on form capture for a page, the pixel reads the email, first name and last name fields when you submit a form on that page and sends them to RAVE™ as a signup. It does not read other fields. A customer can also send the same fields from its page with Rave.track.

What we don't do

• We don't sell personal data or share it for cross-context behavioral advertising, and we don't use visitor data for our own marketing.
• We don't combine one customer's visitor data with another's, or build profiles of people across customers' sites.
• We don't send visitor names or emails to our AI provider.

Who we share data with

• Service providers (sub-processors) who help us run RAVE™, under contracts that limit their use of the data:
  • Supabase, Inc.: database, authentication and file storage (United States (AWS us-east-2, Ohio))
  • Vercel, Inc.: application hosting, serverless functions, IP-based location lookup (United States (global edge network))
  • Cloudflare, Inc.: dNS and content delivery (Global network)
  • Stripe, Inc.: subscription billing and payments (United States)
  • Anthropic, PBC: rAVE™ AI coach (only when a user asks the coach for suggestions) (United States)
  • Resend, Inc.: transactional email (once enabled) (United States)
  The full list, and how we announce changes, is in our DPA.
• Our customers: visitor data collected for a customer is available to that customer's users (and, for agency accounts, to the agency that manages it).
• The public: the limited card details described in Part B, on the customer's site.
• Legal and safety: when the law requires it, or to protect rights, safety and the Service. We will push back on overbroad requests and tell the affected customer when allowed.
• Business transfers: to a buyer or successor if CXFormula is sold or merged, under this policy.

How long we keep data

• Activity entries are shown only within each campaign's lookback window and are kept while the customer's account is open (they power analytics and conversion history) until the customer deletes them, the person asks us to delete them, or the account is deleted.
• Page-view, heartbeat and card-interaction records are kept while the account is open, for analytics and A/B results.
• Account data is kept while the account is open. After an account is closed, we delete or de-identify its data within 90 days of the customer's request, except billing, tax and audit records we must keep (generally up to 7 years) and backups, which roll off on our database provider's schedule.
• The signup-source cookie expires after 90 days. The pixel's visitor ID stays in the browser until it is cleared.

Security

Data is encrypted in transit (HTTPS) and at rest. Every database table has row-level security so each customer can reach only its own workspaces. Integration keys are encrypted with AES-256-GCM, emails are hashed, and staff access to customer accounts is limited, time-bound and audit-logged. No system is perfectly secure; if a breach affects your data, we will notify you and, where we are a processor, the customer, as the law requires.

International transfers

RAVE™ is run from the United States and our database is hosted in the United States (Ohio). If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to the U.S. We rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments), and on our providers' own transfer safeguards, to protect it.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct it, delete it, or restrict how it is used;
• object to processing based on legitimate interests, and to direct marketing at any time;
• data portability, and to withdraw consent where we rely on it;
• complain to your data protection authority (in the UK, the ICO).

California residents (CCPA/CPRA): you have the right to know what personal information we collect, use and disclose; to delete and correct it; to opt out of sale or sharing; and to limit use of sensitive personal information. We do not sell or share personal information (as those terms are defined in the CCPA), do not use sensitive personal information to infer characteristics, and will not discriminate against you for using your rights. The categories we collect are listed above: identifiers (name, email, visitor ID), commercial information (plans, purchases and activity), internet activity (pages viewed and card interactions), approximate geolocation, and professional information (business name). You can use an authorized agent; we may ask them for proof of authority.

How to make a request: email support@cxformula.com. We will verify your request (usually by confirming control of the email address involved) and answer within one month (GDPR) or 45 days (CCPA), and tell you if we need more time. If your request is about a customer's website (Part B), we will pass it to that customer and help them answer it.

Delete your activity from every RAVE™ customer at once

Enter your email on our delete my data page. To make sure only the owner of an address can delete its activity, we email a one-time confirmation link to that address. The link works for 24 hours, and nothing is deleted until you click it. When you confirm, we delete every activity entry that matches your email's hash across all RAVE™ customers, plus the page-view, heartbeat and card-interaction records of the browser visitor IDs those entries were linked to. Requests are rate-limited to prevent abuse. Until online requests are available, the page asks you to email support@cxformula.com instead. Please note:

• We can only match entries that included your email. Entries with a name but no email can be removed by the site owner, or by us on request.
• Page-view records that were never linked to an entry with your email can't be traced to you. Clearing your browser's site data for the customer's site removes the visitor ID.
• We keep a record of each request (your email's hash and the request and confirmation times) to show that we honored it. We don't keep your email address.
• A business could send your activity again later (for example, if you buy again). You can repeat the request anytime.
• Customers can also delete a person's entries, and the linked visitor records, for their own workspace through the RAVE™ API (POST /api/v1/data-deletion).

Children

RAVE™ is a business service and is not directed to children under 16. We don't knowingly collect their personal data. Customers must not send us children's data. If you believe we have some, contact us and we will delete it.

Changes to this policy

We will post updates here and change the "Last updated" date. If a change materially affects how we use personal data, we will notify account owners by email or in the dashboard before it takes effect.

Contact

CXFormula LLC, 60 Whitney Road, Suite 13, Mahwah, NJ 07430, USA. Privacy and data requests: support@cxformula.com. Sales: hello@cxformula.com.