Privacy Policy

1. Introduction

Evnao (“we”, “us”) respects your privacy. This Privacy Policy explains how we handle personal data when you visit our website or use our platform. By using our Service, you agree to this policy. We comply with the Jordan Personal Data Protection Law (2023), EU GDPR, and other applicable laws (CCPA, etc.). We recommend that you read this notice carefully.

2. Data We Collect

• Account Data (Customers): name, business email, billing address, subscription details, support inquiries.
• Payment Data: Paddle collects billing info. We do not receive credit card numbers.
• End-User Data: As part of the support service, we process chat messages, email exchanges, and any files (PDF, DOCX, CSV, TXT) the Customer or its users upload.
• Usage Data: Logins, IP address, device/browser info for security.
• Cookies: We use necessary cookies for site functionality. We use analytics cookies only with consent.

3. How We Use Data & Legal Bases

We use your data to: provide and maintain the Service; process payments; communicate updates and security notices; comply with laws; and improve our product. Conversation data is used strictly to generate AI responses on-the-fly and is not retained beyond the plan’s retention period (or not at all if ZDR is enabled).

AI Auto-Learning & Training: To continuously improve the quality of automated customer support, our AI systems may analyze resolved customer interactions to automatically generate Knowledge Base articles (FAQs). All Personally Identifiable Information (PII) is stripped prior to knowledge generation. This feature is subject to the Account Owner's Quality Control approval.

We process data under the following bases:

• Contract: Necessary to provide the subscribed Service to the Customer.
• Consent: For cookies, marketing emails, or any optional features.
• Legal Obligations: To comply with courts or regulations.

4. Third-Party Processors & Data Transfers

We share data with Paddle (for payments), AI Providers like OpenAI and Anthropic (who process chat data as processors), and Integrations authorized by you. We may transfer data to countries outside Jordan. Under Jordan PDPL, transfers are allowed only with Customer’s consent and if adequate protection is in place. We will ensure appropriate safeguards such as Standard Contractual Clauses.

5. Data Retention

We keep personal data only as long as needed. Chat logs are kept per plan limits (Free=0d, Starter=30d, Pro=90d, Business=custom). After that period, data is permanently deleted. If you choose Zero Data Retention (ZDR), third parties delete data immediately after processing.

6. Your Rights

You have the right to:

• Access and obtain a copy of your data;
• Rectify or update inaccurate data;
• Delete your data (“right to be forgotten”), subject to legal exceptions;
• Object to or restrict processing;
• Data portability (for machine-readable copy);
• Withdraw consent at any time for future processing;
• In California: the right to know, delete, correct, or limit sensitive data; no sale/sharing of data (Evnao does not sell data).

Requests can be made via email (privacy@evnao.com) or through your account portal. We will verify identity and respond within legal timeframes.

7. Security & Children's Privacy

We maintain technical and organizational measures (encryption, firewalls, access controls) to protect data. Only authorized staff have access to production systems. Our Service is not for children under 16, and we do not knowingly collect data from minors.

8. Contact Us

For privacy inquiries or to exercise your rights, email privacy@evnao.com.