How Revision handles your information

Revision is run by Daniel Dashwood, a designer in New Zealand. In this policy, “we” and “us” mean Daniel Dashwood, and “Revision” means the website and app at revisionboards.com.

Revision lets designers upload design boards and share them with clients through one link. Clients can view the boards and leave comments. For anything this policy doesn’t answer, email hello@revisionboards.com.

• If you manage projects. You sign in with Google through Clerk, our sign-in provider. Google shares your name, email address and profile photo. Revision uses your email address to email you about your projects. We never see your Google password.
• Boards and project details. The images you upload, the tiles and thumbnails Revision makes from them, the board names it takes from their file names, and the project names, client names, sections and settings you add. Revision also keeps a history for each project of who added, replaced, published or deleted what, and when.
• If you comment or approve with Google. Your name, email address and profile photo, from Google via Clerk. We store your comment, where it’s pinned on the board, and when it was posted, edited or resolved. If you approve a project or request changes, we store your decision, your name and any note you add.
• If you comment as a guest. Where a project allows it, you can comment with just a name, and an email address if you’d like to hear about replies. We don’t check that the email address is yours. Revision also stores a hash of a random token kept in a cookie, so it can recognise your browser and let you edit your own comments.
• Project passwords. When a designer sets a password on a project, Revision stores a salted scrypt hash of it, not the password itself. It can check a password you enter, but can’t read the password back.
• Email addresses for updates. The addresses a designer adds to a project’s update list, and, for each client address Revision has emailed, whether it has unsubscribed.
• Technical data. Our host, Vercel, keeps logs of requests to Revision, which can include your IP address, browser details and the page requested. Clerk records the browser, IP address and approximate location of each sign-in. Revision checks whether you’re on a phone to open mobile versions of boards, but doesn’t store it. Revision has no analytics, advertising or tracking scripts.

• To sign you in, and to keep each designer’s workspace private to them.
• To store boards and show them to the people a designer shares them with.
• To show comments and approvals with the name and photo of the person who left them.
• To send email. Designers hear when someone comments, replies, approves or requests changes. People in a comment thread hear when someone replies, if Revision has an email address for them. Addresses on a project’s update list hear when the designer sends an update, and anyone who commented on the project with an email address is suggested for it.
• To keep Revision working and safe, for example by limiting how fast guests can post, and by looking into problems.

We don’t sell your information or use it for advertising.

• Anyone with a project’s share link can view its published boards. If the designer has set a password, they need that too. Draft boards are only visible to admins.
• Everyone who can view a project can see its comments, with each commenter’s name and photo, and the name of whoever last approved it or requested changes. Email addresses aren’t shown on the share link.
• Board images are stored as files at long, random web addresses. Anyone who has the direct address of one of those files can open it, even on a password-protected project.
• When a link to a project without a password is pasted into an app like Slack or Messages, its preview shows the project name and a thumbnail of a board.
• Each designer’s projects, clients and comments sit in their own workspace, which only they can see and manage. A designer sees the email addresses of people who commented on their projects when sending updates.

Revision relies on these companies to run. Each handles information on our behalf, under its own terms.

• Vercel hosts the app and stores uploaded files.
• Neon hosts the database.
• Clerk handles sign-in and keeps the accounts of everyone who signs in.
• Google confirms who you are when you sign in with Google.
• Resend sends Revision’s emails.

Revision’s app, database and uploaded files are in Sydney, Australia. Vercel’s network keeps temporary copies of files in other countries so they load quickly wherever you are. Clerk and Resend are based in the United States, so sign-in details and emails may also be processed there.

Revision only sets the cookies it needs to work. There are no analytics or advertising cookies.

• revision_share remembers that you entered a project’s password, so you aren’t asked again. It’s only sent to that project’s link, lasts 30 days, and stops working if the password changes.
• revision_guest remembers you as a guest commenter, so you can edit or delete your comments. It’s only sent to share links, and lasts a year or until you click “Not you?” to forget it.
• Clerk’s cookies, such as __session and __client_uat, keep you signed in. Clerk loads on the sign-in page, share links and admin pages.

Revision also uses your browser’s own storage, which stays on your device, to remember things like which boards you’ve already seen on a link so new ones can be marked, a comment you were writing while you signed in (for up to 30 minutes), and an admin’s light or dark theme.

• Projects, boards, comments and history stay until a designer deletes them. Deleting a project deletes its boards and image files, comments, approvals, history and update list. Deleting a board deletes its files and comments.
• You can delete your own comments from the share link at any time. The project’s history keeps a note that you commented, with your name, until the project is deleted.
• The accounts of people who signed in, and guest commenters’ names and email addresses, stay until you ask us to delete them.
• If you unsubscribe, we keep a record of your address so it isn’t emailed again.
• Vercel keeps request logs, and Resend keeps copies of sent emails, for a limited time. Clerk keeps sign-in records with your account.
• Deleted information can stay in our providers’ backups for a short time.

There’s no self-serve way to delete an account yet. To have your account, guest details or comments deleted, email hello@revisionboards.com.

Under New Zealand’s Privacy Act 2020, you can ask for a copy of the personal information we hold about you, and ask us to correct it if it’s wrong. You can also ask us to delete it. Email hello@revisionboards.com and we’ll reply as soon as we can, and within 20 working days.

Every email Revision sends to a client ends with a link to stop them.

If you’re unhappy with how we’ve handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

If Revision changes what it collects or how it uses it, we’ll update this page and its effective date. Our Terms of Service cover the rest of how Revision works.

Daniel Dashwood
New Zealand
hello@revisionboards.com