Privacy policy

Who we are

Revela is a behavioural suitability platform operated by Old Shoreham Behavioural Technologies (OSBT). We provide the platform to regulated financial firms. In data protection terms, the firm that invited you to an assessment is the controller of your personal data; OSBT processes that data on the firm’s behalf and on its instructions.

What we collect

When you complete an assessment we record the interactions the instruments are designed to measure: your choices in the behavioural games (with their timing), your responses to video scenarios (swipe direction, response latency, rewatches), and the stated risk figure you give. Your adviser separately records the fact-find information a suitability decision requires, such as capacity for loss and required return, and identity details for the firm’s own regulatory checks.

We do not record video or audio of you. Video profiling means watching short clips and responding; the camera and microphone are never accessed, and our pages send a Permissions-Policy header that disables both.

How it is used

Assessment interactions are scored server-side into a behavioural profile and reconciled into a recommended risk level for your adviser. Inputs and outputs are retained together as a sealed record so the firm can evidence, and if needed reconstruct, the basis of its advice. Your data is visible only to your firm; the platform is tenant-scoped and firms cannot see one another’s records. We do not sell personal data or use it for advertising.

Retention and your rights

Records are kept for as long as the firm’s regulatory obligations require, which for suitability evidence is typically several years after the advice relationship ends. Requests to access, correct or erase your data should go to the firm that advised you, as controller; we support firms in meeting those requests, subject to their legal duty to retain advice records.

Service providers

We use a small number of infrastructure providers to run the platform: hosting and content delivery, a managed database with authentication, and transactional email for sending assessment invitations. Each processes data only as needed to provide its service.

Contact

Questions about this policy can be sent through the contact page.