Virginia Data Protection Act Notice to Virginia Residents

Last Updated: June 23, 2026

The Virginia Data Protection Act (“VDPA”) provides certain rights to residents of Virginia (referred to as “consumers”) regarding their Personal Information (referred to as “personal data”).

This notice (the “VDPA Notice”) applies to the Personal Information of consumers that is collected and/or processed by or on behalf of Revelio Labs, Inc. (“Revelio Labs,” “we” “us” or “our”) and supplements our Privacy Policy (https://www.reveliolabs.com/privacy). All capitalized terms herein have the meanings given in the VDPA or the Privacy Policy. Please note that this VDPA Notice does not apply to Personal Information associated with our employees and job applicants. In the event of any conflict between this VDPA Notice and terms in the Privacy Policy, the provision that is more protective of your Personal Information shall control to the extent of such conflict.

If you are located outside of the State of Virginia, this VDPA Notice does not apply to you and you should refer to our Privacy Policy.

1. The Personal Information We Collect, Why We Collect it, and How Long We Keep it

We may collect the categories of Personal Information (including sensitive information) listed in the tables below for the specific business purposes listed next to them.

Revelio determines the retention periods of each category of Personal Information based on the following criteria:

  • The purposes for which Revelio processes the Personal Information (Revelio needs to retain the data as long as necessary for such purposes); and
  • Tax, legal and regulatory obligations and requirements (laws or regulation may set, or recommend, a minimum period for retention of your Personal Information).
Personal Information Category Business Purpose
Identifiers, such as your full name, mailing address, telephone numbers, email address, online identifier, IP, LinkedIn URL
  • Provide information about the Services and respond to inquiries
  • Provide newsletters and send email alerts (including marketing emails)
  • Provide the Services
  • Administer and maintain Revelio operations, including for safety purposes
  • Comply with applicable laws and regulations
  • Respond to law enforcement requests and as required by applicable law or court order
Professional or employment-related information, such as title, company name, office phone number and company email address
  • Same business purposes as for Identifiers (see above)
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement
  • Evaluate access and use of the Services
  • Compile reports on activity and analyze performance metrics
  • Collect demographic data
  • Collect and evaluate other information relating to device and internet usage

2. How We Obtain Your Personal Information

We receive your Personal Information directly from you, from publicly available sources, and automatically from your online activity.

3. What Kind of Personal Information We Disclose to Others

We may disclose the following categories of Personal Information to the following categories of service providers and/or contractors for a business purpose.

Personal Information Category Category of Service Provider/Contractor
  • Identifiers
  • Professional or employment-related information
  • Internet or other electronic network activity information
  • Our business partners, parent company, affiliates and subsidiaries, for our and their business purposes (e.g., jointly offering products/services)
  • Third-party contractors and service providers that provide services to us in the operation of our business and assistance with the Services (e.g., marketing and advertising companies, consulting service organizations, IT and cloud service providers, payment processing, and customer service)
  • All categories of Personal Information mentioned above
  • Service Providers that provide IT and customer service
  • Data storage companies, including cloud providers
  • Our parent company, subsidiaries, affiliates and/or other companies under common control with us

4. Your Rights and Choices

The VDPA provides consumers with specific rights regarding their Personal Information. Revelio Labs will usually be a business processing your Personal Information. If Revelio Labs is acting as a service provider or contractor on behalf of another business, please contact the business that collected your Personal Information in the first instance to address your rights with respect to such data.

a) Right to Know

You have the right to know:

  • Whether or not we process your Personal Information. If you would like to know this, please contact us as described in Section 5 (“Exercising Your Privacy Rights”) below.

  • The categories of Personal Information we process, the purpose of processing, as well as what kind of Personal Information we share and with whom we share it. Please see for this information Sections 1-3 of this VDPA Notice.

  • The categories of Personal Information that we sell, process for purposes of targeted advertising, or process to assist with automated decision-making. We sell, process for purposes of targeted advertising, or process to assist with automated decision-making the following categories of Personal Information:

    • Identifiers;
    • Professional or employment-related information; and
    • Internet or other electronic network activity information.

    You have the right to opt out of such use of your Personal Information. For information on how to do so, please see Section 5 (“Exercising Your Privacy Rights”) below.

b) Right to Data Portability

You have the right to obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. If you would like to obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format, please contact us as described in Section 5 (“Exercising Your Privacy Rights”) below.

c) Right to Delete

You have the right to request deletion of your Personal Information. We will honor such request, but might not be able to fulfill your request if we (or our service providers) are required to retain your Personal Information. Examples of such exceptions are:

  • Completing a transaction or performing a contract we have with you;
  • Detecting and addressing data security incidents, and repairing or upkeep of our IT systems;
  • Protecting against fraud or other illegal activity;
  • Complying with applicable law or a legal obligation, or to exercise rights under the law (e.g. the right to free speech); or
  • Using your Personal Information internally to improve our Services.

d) Right to Correct

You have the right to request that we correct inaccurate Personal Information about you. We will honor such request, but might not be able to fulfill your request if it is impossible to do so or would involve disproportionate effort, or if we have a good-faith, reasonable, and documented belief that a request to correct is fraudulent or abusive.

e) Right to Opt-Out

You have the right to opt out of the following:

  • The sale of your Personal Information;
  • The sharing of your Personal Information for targeted advertising; and
  • The use of your Personal Information for profiling to produce or assist with decisions that produce legal or similarly significant effects for you.

Please note that while we do not “sell” your Personal Information, and have not done so in the past, we may, as described above, “share” your Personal Information with third parties for cross-context behavioral advertising. If you wish to opt-out of such sharing, please contact us as described below.

f) Right to Revoke Consent

If our processing of your Personal Information is based on your consent, you have the right to refuse or revoke your consent at any time. If you would like to revoke your consent to our processing of your Personal Information, you can do so by contacting us at info@reveliolabs.com.

g) Anti-Discrimination Right

We are prohibited from discriminating against you for exercising any of the above rights.

5. Exercising Your Privacy Rights

To exercise the rights described above, please submit a request to us by emailing us at: info@reveliolabs.com.

a) What we need to know to fulfill your request

In order to fulfill your request, we may need you to (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you.

b) How you will hear back from us

We will confirm receipt of your request within ten (10) business days of its receipt, and endeavor to respond within forty-five (45) calendar days of its receipt. If we require more time, we will notify you of the extension and provide an explanation of the reason for the extension in writing, and we will provide you with a response no later than ninety (90) calendar days of receipt of the request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We may charge a reasonable fee to process or respond to your requests if they are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will inform you of the reasons for this decision and provide you with a cost estimate before completing your request.

c) Your right to appeal

You can appeal our refusal to take action on a request within a reasonable period of time after you have received this decision. You can do so by contacting us in the ways described below. We will get back to you within 60 days of receipt of an appeal and inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny the appeal, we will provide you with a method through which you may contact the Attorney General to submit a complaint.

6. Changes to this VDPA Notice

This VDPA Notice is effective as of the date of the Last Update stated at the top of this VDPA Notice. We may change this VDPA Notice from time to time with or without notice to you. By visiting or accessing the Websites or the Services, or otherwise engaging or interacting with us after we make any such changes to this VDPA Notice, you are deemed to have accepted such changes. Please be aware that, to the extent permitted by applicable law, and without prejudice to the foregoing, our use of your Personal Information is governed by the VDPA Notice in current effect. Please refer back to this VDPA Notice on a regular basis.

7. How to Contact Us

If you have any questions or comments about this VDPA Notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under Virginia law, please do not hesitate to contact us via email at: info@reveliolabs.com.