Evo legal
Privacy Policy
Effective 2026-06-10 · version 2026-06-10
This policy explains what Evo collects, how it's used, and the choices you have. The short version: we collect what's needed to run your venture record, we don't sell your data, and you can export or delete it. This is an interim plain-language version; an attorney-reviewed version will replace it under a new effective date.
1. What we collect
Your email address (sign-in is by magic link — no passwords), the venture information you enter (onboarding answers, captured facts, step progress, notes), basic product-usage events (e.g. signed in, completed a step), and standard technical logs. Payments, if you subscribe, are processed by our payment provider — we never see your full card number.
2. How we use it
To run the service: build and keep your Company Record current, send the emails you ask for (sign-in links, reminders you enable), understand product usage in aggregate, and keep the service secure. We do not sell your personal information and we do not use your venture data for advertising.
3. AI processing
When you use AI features (drafts, Ask Evo), the relevant venture context is sent to our AI provider (Anthropic) to generate the response. We don't permit our AI provider to train on your data under the API terms we use.
4. Who we share it with
Only service providers that run Evo for us — hosting (Vercel), database and authentication (Supabase), AI (Anthropic), analytics, and payments — each bound to process your data only to provide their service. We may disclose data if legally required. If Evo is ever acquired, your data transfers with the same protections.
5. Retention
We keep your data while your account is active. If you delete your account, we delete your venture data within a reasonable period, except records we must keep (e.g. billing records, your terms acceptances).
6. Your rights
You can access and export your data from within the product, ask us to correct or delete it, and object to or restrict certain processing. Depending on where you live (e.g. EEA/UK GDPR, US state privacy laws), some of these are legal rights — contact us and we will honor them.
7. Security
Data is encrypted in transit, access is scoped so each account can only reach its own rows, and sign-in is passwordless. No system is perfectly secure — if a breach affects your data we will notify you as required by law.
8. Changes to this policy
When this policy changes, we publish the new version with a new effective date and ask you to review and accept it before continuing. Your acceptance of each version is recorded.
Questions about this document? Contact us at legal@evoai.vip. When this document changes, its version (the effective date above) is bumped and you will be asked to review and accept the updated terms before continuing to use Evo.