Privacy Policy
Last updated: September 9, 2026
1. Introduction
Welcome to Evelant. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (Evelant.app) or use our browser extension, and tell you about your privacy rights and how the law protects you.
2. Data We Collect
Account Data: When you register for an account using email/password or third-party OAuth providers (like Google), we collect your email address and profile name.
Messages & Context: To provide AI assistant features, we process the text you input into the extension and, strictly when necessary and initiated by you, the text content of the active web page you are viewing. This data is transmitted securely to our servers and then to our AI providers (such as OpenAI or Google).
Voice Input (Voice Ask): Voice Ask is an optional feature you trigger explicitly with the Alt+S shortcut, and it can be turned off entirely from the extension popup. Your microphone is accessed only while a Voice Ask session is active — never in the background, and never without you starting it. Speech is transcribed to text by your browser's built-in Web Speech API, which is provided by Google as part of Chrome; the audio itself is handled by that browser service and is never recorded, stored, or transmitted to Evelant's servers. Only the resulting text transcript is sent to us, and it is then treated exactly like a typed message as described above. We do not retain the audio at any point.
Usage Data: We may collect anonymous data about how the extension and application are accessed and used to improve our service.
3. How We Use Your Data
- To provide, maintain, and improve the Evelant service.
- To process your AI queries and return responses.
- To manage your account and authenticate you.
- To communicate with you regarding updates, security alerts, and support messages.
4. Third-Party Services & AI Providers
Evelant acts as an intermediary. Your prompts and the necessary page context are sent to third-party Large Language Model (LLM) providers to generate responses.
We do NOT sell your personal information. We configure our API requests so that our AI providers do NOT use your data to train their models, adhering to enterprise data privacy standards.
5. Subprocessors
We use the following third-party service providers (“subprocessors”) to operate Evelant. Each is contractually bound to protect your data:
| Provider | Purpose | Data transferred |
|---|---|---|
| Supabase | Database & authentication | Account data, messages, usage logs |
| LemonSqueezy | Payment processing | Email, billing address, payment method tokens |
| Google (Gemini) | AI inference | Prompts, page context (no training use) |
| OpenAI | AI inference | Prompts, page context (no training use) |
| Anthropic | AI inference | Prompts, page context (no training use) |
| Tavily | Web search | Search queries triggered by user |
6. Data Retention
- Messages & chat history: Stored until you delete them from your dashboard or request account deletion.
- Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
- Analytics events: Retained for up to 12 months, then aggregated or deleted.
- Billing records: Retained for 7 years to comply with financial regulations, even after account deletion.
Your data is never used to train AI models. This applies to all three LLM providers we use (Google, OpenAI, Anthropic).
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Your data is encrypted in transit using HTTPS/TLS.
8. Cookies & Local Storage
The web dashboard uses cookies primarily for authentication and session management. The browser extension uses secure local storage on your device to store user preferences and your unique extension session token.
9. Your Rights
You have the right to request access, correction, or deletion of your personal data stored on our servers. You can manage your account directly from your dashboard settings or contact us to permanently delete your account and associated chat history.
10. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at: [email protected].