Privacy Policy

Last updated: February 24, 2026

EVE ("we", "us", "our") is operated by EVE. This policy explains what data we collect, why, and how we protect it.

1. Information We Collect

Account information: When you sign up, we collect your email address and a hashed password. Guest users are assigned a temporary anonymous identifier.

Conversation data: Messages you send and receive through EVE (text, voice transcripts, and video call summaries) are stored to maintain your conversation history.

Google Workspace data (optional): If you choose to connect your Google account, we request access to the following services on your behalf:

Service	Access Level	Purpose
Gmail	Read & modify	Read, draft, and send emails on your behalf when you ask EVE to help with email
Google Calendar	Read & write	View and create calendar events when you ask EVE to manage your schedule
Google Drive	Read-only	Search and read documents when you ask EVE to find or summarize files

We only access Google data when you explicitly ask EVE to perform a task that requires it. We do not scan, index, or process your Google data in the background.

Usage data: We collect basic usage metrics (pages visited, features used) to improve the service. We may use Hotjar for anonymized session analytics.

2. How We Use Your Data

To provide and improve the EVE assistant experience
To execute tasks you request (sending emails, managing calendar, etc.)
To maintain your conversation history across sessions
To authenticate your identity and secure your account

3. Data Storage and Security

All OAuth tokens (Google) are encrypted at rest using AES-256 before storage
Passwords are hashed using bcrypt and never stored in plain text
Data is stored in a PostgreSQL database with restricted access
All connections use HTTPS/TLS encryption in transit

4. Data Sharing

We do not sell, trade, or share your personal data with third parties. Your data may be processed by:

AI providers (Anthropic, OpenAI) to generate responses — conversation content is sent to these providers to process your requests
Voice/video providers (VAPI, Tavus) when you use voice or video calling features
Infrastructure providers for hosting and database services

5. Data Retention and Deletion

Your data is retained as long as your account is active. You can:

Disconnect Google at any time from Settings — this immediately deletes stored tokens
Request deletion of your account and all associated data by contacting us

Guest session data is temporary and may be purged periodically.

6. Revoking Google Access

You can revoke EVE's access to your Google account at any time:

From EVE: Go to Settings and disconnect your Google account
From Google: Visit Google Account Permissions and remove EVE

7. Children's Privacy

EVE is not intended for children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

For privacy questions or data deletion requests, contact us through aurora-life.com.