Privacy Policy

Last updated: March 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Name (optional)
• Organization name (if applicable)

1.2 Usage Data

We automatically collect information about your use of the service:

• Conversation logs (encrypted)
• Feature usage patterns
• Error logs and performance data
• Device and browser information
• IP address

1.3 Payment Information

If you subscribe to a paid plan, we use Stripe to process payments. We do not store your full credit card number; Stripe handles all payment data securely.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the EVE AI Core service
• Process transactions and send related information
• Send you technical notices and support messages
• Respond to your comments, questions, and requests
• Analyze usage patterns to improve our service
• Detect, prevent, and address technical issues
• Research and develop new features

3. Data Storage and Security

3.1 Storage

Your data is stored on secure servers. Conversation data may be stored locally on the server for session continuity and is encrypted at rest.

3.2 Security Measures

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Regular security audits
• Access controls and authentication
• Secure password hashing (bcrypt)
• Hardware-isolated governance enforcement (AIMS)
• Cryptographic attestation of all verification decisions
• Deterministic policy enforcement that cannot be bypassed

4. Governance Data Processing

EVE AI Core processes AI model outputs through our governance pipeline. This includes intent classification, charter compliance checks, and CRD scoring. No personal data is used in the governance verification process — only the AI output text is analyzed.

5. Audit Trail Data

Our cryptographic audit trail records verification decisions with SHA-256 hash chains. These records contain governance metadata (scores, verdicts, timestamps) but do not include personally identifiable information.

6. Data Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: With third parties who help us operate our service (e.g., Stripe for payments)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

7. Your Rights

You have the following rights regarding your data:

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for the service to function (authentication tokens)
• Analytics Cookies: Help us understand how the service is used
• Preference Cookies: Store your settings and preferences

You can control cookies through your browser settings.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time.

10. Children's Privacy

EVE AI Core is not intended for users under 18 years of age. We do not knowingly collect information from children under 18.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the appropriate channels listed on our website.