Privacy Policy

EvaRole (“we”, “us”, “our”) is a platform for building and running AI workers (“Evas”) that act in your connected apps under your approval. Our service is available at evarole.com.

Questions about this policy can be sent to privacy@evarole.com.

• Account data — your name and email address when you register.
• Workspace content — role definitions, knowledge items, training session transcripts, blueprints, and provenance events you create inside EvaRole.
• Connected data sources — when you connect Google Analytics, Google Search Console, Meta Ads, or Google Ads, we fetch only the metrics needed to run the requested capability. We do not store raw third-party data beyond the generated report.
• Usage data — pages visited, capability runs, and error logs. Collected to improve the product.
• Billing data — handled entirely by Stripe. We never see or store your card number.

• Provide, operate, and improve the EvaRole platform.
• Generate AI-assisted outputs (reports, blueprints, knowledge items) on your behalf using the data you provide.
• Send transactional emails — account verification, password reset, and billing receipts.
• Comply with legal obligations.

We do not sell your data to third parties. We do not use your workspace content to train AI models.

Access tokens obtained through Facebook Login are stored securely and used only to fetch the advertising insights you request — campaign names, spend, impressions, clicks, CTR, and similar performance metrics. We do not access your personal Facebook profile, posts, friends, or messages.

You can revoke our access at any time from your Facebook Business Integrations settings, and you can disconnect the connector inside EvaRole. Our use of Meta data complies with the Meta Platform Terms and Developer Policies.

• Vercel — application hosting and edge delivery.
• Neon — database hosting (AWS infrastructure, United States).
• Anthropic — AI model API used to generate reports and structured outputs.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Google, Meta — OAuth and data connectors (only when you explicitly connect them).

Your data is stored in a Neon Postgres database hosted on AWS in the United States. Data in transit is encrypted via TLS. Data at rest is encrypted by the hosting provider. Access to production data is restricted to authorised personnel and is logged.

We retain your account and workspace data for as long as your account is active. If you delete your account we will remove your personal data within 30 days, except where retention is required by law.

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email privacy@evarole.com.

If you are located in the EEA or UK, you have additional rights under GDPR / UK GDPR, including the right to lodge a complaint with your local supervisory authority.

We use a single session cookie to keep you signed in. We do not use advertising or tracking cookies.

The Service is not intended for, and may not be used by, anyone under 18.

We may update this policy from time to time. Material changes will be communicated by email or by a notice inside the platform. The “Last updated” date at the top of this page reflects the most recent revision.

Email: privacy@evarole.com