Privacy Policy
Last updated: July 27, 2026
1. Introduction
Welcome to Evelant. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (Evelant.app) or use our browser extension, and tell you about your privacy rights and how the law protects you.
2. Data We Collect
Account Data: When you register for an account using email/password or third-party OAuth providers (like Google), we collect your email address and profile name.
Messages & Context: To provide AI assistant features, we process the text you input into the extension and, strictly when necessary and initiated by you, the text content of the active web page you are viewing. This data is transmitted securely to our servers and then to our AI providers (such as OpenAI or Google).
Usage Data: We may collect anonymous data about how the extension and application are accessed and used to improve our service.
3. How We Use Your Data
- To provide, maintain, and improve the Evelant service.
- To process your AI queries and return responses.
- To manage your account and authenticate you.
- To communicate with you regarding updates, security alerts, and support messages.
4. Third-Party Services & AI Providers
Evelant acts as an intermediary. Your prompts and the necessary page context are sent to third-party Large Language Model (LLM) providers to generate responses.
We do NOT sell your personal information. We configure our API requests so that our AI providers do NOT use your data to train their models, adhering to enterprise data privacy standards.
5. Subprocessors
We use the following third-party service providers (“subprocessors”) to operate Evelant. Each is contractually bound to protect your data:
| Provider | Purpose | Data transferred |
|---|---|---|
| Supabase | Database & authentication | Account data, messages, usage logs |
| LemonSqueezy | Payment processing | Email, billing address, payment method tokens |
| Google (Gemini) | AI inference | Prompts, page context (no training use) |
| OpenAI | AI inference | Prompts, page context (no training use) |
| Anthropic | AI inference | Prompts, page context (no training use) |
| Tavily | Web search | Search queries triggered by user |
6. Data Retention
- Messages & chat history: Stored until you delete them from your dashboard or request account deletion.
- Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
- Analytics events: Retained for up to 12 months, then aggregated or deleted.
- Billing records: Retained for 7 years to comply with financial regulations, even after account deletion.
Your data is never used to train AI models. This applies to all three LLM providers we use (Google, OpenAI, Anthropic).
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Your data is encrypted in transit using HTTPS/TLS.
8. Cookies & Local Storage
The web dashboard uses cookies primarily for authentication and session management. The browser extension uses secure local storage on your device to store user preferences and your unique extension session token.
9. Your Rights
You have the right to request access, correction, or deletion of your personal data stored on our servers. You can manage your account directly from your dashboard settings or contact us to permanently delete your account and associated chat history.
10. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at: [email protected].