Evnao (“we”, “us”) respects your privacy. This Privacy Policy explains how we handle personal data when you visit our website or use our platform. Applicable privacy duties depend on where Evnao, the workspace owner, and the end user are located. This policy describes current product behavior; it is not a certification of compliance for every customer or jurisdiction.
We use your data to provide and maintain the Service, process payments, communicate updates and security notices, comply with law, and improve the product. Resolved and closed conversation data is deleted by Evnao's scheduled retention job after the workspace's configured plan window. The immediate-deletion setting removes eligible resolved conversations on the next cleanup run; it does not by itself change an external AI provider's separate processing policy.
Knowledge suggestions: Evnao may create draft knowledge suggestions from resolved conversations when the workspace uses that feature. Drafts require owner review before publication. Evnao does not currently guarantee automated removal of every item of personal or sensitive information, so owners must review suggestions before publishing them.
AI training: Evnao does not use Customer Data to train or fine-tune Evnao's own general-purpose generative-AI models. We may use limited operational telemetry to secure, troubleshoot, measure, and improve the Service; that operational use is not model training. AI providers process submitted content under their own applicable service terms as described below.
Attachment use: An attachment may be stored only for human support review. Evnao sends attachment content to an AI provider only when the customer's request calls for supported inspection. Audio and video attachments are not transcribed, synthesized, cloned, or automatically analyzed as voice or video.
Owner-directed knowledge building: When a Pro workspace owner confirms a Knowledge Base build, Evnao retrieves only the public pages, connected-store fields, connected business social content, files, or existing Evnao knowledge that the owner selected. Connecting, listing, or retrieving those sources does not itself consume an AI response. Selected source content is sent to Evnao's managed AI provider only when analysis is required. The resulting items remain private drafts until the owner edits, discards, or publishes them.
We process data under the following bases:
Evnao uses the following service providers for its current managed platform. A provider receives only the categories reasonably needed for its role:
The Z.ai API terms state that API end-user content is not used to develop or improve its services unless the API customer explicitly agrees; Evnao has not implemented such an opt-in. Google's paid service terms state that prompts and responses are not used to improve Google products. Evnao therefore disables Google AI processing unless an operator explicitly confirms that the configured key is attached to a billed Cloud project. This is not a universal provider-side Zero Data Retention promise.
A workspace may separately choose to connect Meta services (WhatsApp Business, Instagram, and Messenger), Telegram, Shopify, Zendesk, Calendly, customer-configured HTTPS destinations. Those services receive only data needed for the owner-authorized connection, request, or action. Providers may process data outside the Customer’s country; applicable transfer mechanisms and local requirements must be assessed for the deployment.
Business-data connections use owner-approved permissions and encrypted provider tokens; Evnao does not request a store database password. Current store access is read-only. Owners can change the selected read permissions or disconnect a provider, and Evnao logs when connected business data is accessed and for what product purpose. Disconnecting prevents future access but does not automatically remove knowledge the owner already reviewed and published.
Evnao's scheduled retention job removes eligible resolved and closed conversations according to the configured plan window. Open conversations remain so support can continue. Provider-side copies follow the provider's own processing and retention terms. Evnao does not currently offer a provider-side Zero Data Retention guarantee.
Conversation attachments are unavailable on Free. Starter files are retained for 30 days, and Pro files for 60 days, after a conversation is resolved or closed. Owners receive expiry warnings and can export retained originals before scheduled deletion.
To enforce the one-time free-trial-of-a-paid-plan rule after account or workspace deletion, Evnao may retain keyed HMAC values derived from a verified root domain, verified owner email, and documented payment-provider customer ID. These values are pseudonymous security/abuse-prevention records, not reversible copies of the original identifiers. They are retained for the configured anti-abuse period from trial activation (24 months by default), then removed by scheduled retention. They are used only for trial eligibility, abuse review, security, and related legal claims.
You have the right to:
Requests can be made via email at [email protected] . Workspace owners can also request a machine-readable workspace export in Security settings. Evnao will verify identity and scope before acting; deletion, objection, and provider-data requests currently require review rather than a fully automated portal.
We maintain technical and organizational measures (encryption, firewalls, access controls) to protect data. Only authorized staff have access to production systems. Our Service is not for children under 16, and we do not knowingly collect data from minors.
For privacy inquiries or to exercise your rights, email [email protected].
By using Evnao, you acknowledge that you have read this Privacy Policy. Where consent is the applicable legal basis, Evnao requests it through the relevant product control.