This page covers REV23, the hosted service. REV23 Desktop keeps studio records in a SQL Server database on the studio's main PC. The studio manages access to that PC, its network, and Desktop users, and is responsible for backups. The Cloud and Azure protections below do not apply to Desktop.
Your client records and private business records belong to your business. REV23 stores and processes them to run the service; we do not sell your client records, use them for marketing, or share them with Painful Pleasures or its related brands. REV23 Account and professional contact information is covered separately by our Privacy Policy.
Your Cloud stays separate
Each Cloud has its own database and private file storage, separate from other Clouds. If your business has more than one studio in a Cloud, those studios share that Cloud's records according to the access you set.
How the records are protected
- Azure SQL encrypts your Cloud's database and backups at rest. Azure Blob Storage encrypts its files at rest, and connections use TLS.
- Client photos, IDs, attachments, and signed PDFs are kept in private Azure Blob containers. Authorized access to a file uses an expiring, read-only link.
- REV23 uses Azure managed identities and Key Vault to control service access to data and credentials.
REV23 staff can technically access the systems we host and may access records to run, support, or troubleshoot the service. The app's Data Protection page gives more detail about client records and the services that process them.
You control your team's access
You decide which staff members can see and work with your records. When you deactivate someone, their signed-in staff access ends after any existing session expires, within 15 minutes. The appointments, sales, and signed forms they worked on stay with your Cloud. If they later open their own Cloud, your records do not move with them. File links they already received can still work until they expire, and deactivation cannot take back files they downloaded.
Getting your records
A user with export permission can download your client list as a CSV. You can also download signed release-form PDFs in REV23.
A transfer of Cloud ownership requires authorization from the current owner. Keep copies of records you need before your Cloud is deleted; the Terms of Service explain when deletion can occur.
How we use broader trends
We may analyze business, service, and usage data across Clouds to improve REV23 and produce aggregated or de-identified insights. We may share those insights with Painful Pleasures and related brands, but they must not identify clients or reveal a Cloud's private records. We do not use or permit them to re-identify clients.
This page explains the data provisions in our Terms of Service in plain language. For information about people who use REV23, read our Privacy Policy.