Privacy Notice

This Privacy Notice explains how Evolve AI ("Evolve AI", "we", "us") collects and uses personal data when you use the Evolve platform. Evolve AI is the data controller for the personal data described here.

1. Personal data we collect

• Account data — name, email address, login credentials and authentication identifiers (including Google sign-in identifiers).
• Profile data — display name, avatar, plan and preferences such as your chosen AI voice.
• Content you submit — problems, comments, votes, chat messages, prompts, uploaded images, projects and research requests.
• Usage and telemetry — features used, AI message and analysis counts, timestamps, error logs.
• Device and technical data — IP address, browser and device identifiers, approximate location derived from IP.
• Support data — messages you send us and their contents.

2. Why we use it and our legal basis

• Create and operate your account, provide the service — performance of our contract with you.
• Process AI chats, research runs, image and video generation — performance of contract.
• Security, abuse and fraud prevention, enforcing usage limits — legitimate interests in keeping the service safe and available.
• Product improvement and analytics — legitimate interests in improving Evolve.
• Customer support — performance of contract and legitimate interests.
• Marketing emails — your consent, which you may withdraw at any time.
• Legal, accounting and tax obligations — compliance with legal obligations.

3. Who we share data with

• Service providers and subprocessors — hosting, database and storage providers, AI model and research providers, analytics and support tooling. They process data only on our instructions.
• Merchant of Record — Paddle.com Market Ltd acts as our reseller and Merchant of Record for all orders, and handles subscription management, payments, tax compliance, invoicing and refunds.
• Professional advisers — legal, accounting and audit advisers.
• Authorities — where required by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep account and content data for as long as your account is active. After you delete your account we delete or anonymise personal data within 90 days, except where we must keep records longer for legal, tax or dispute-resolution purposes. Aggregated or anonymised data that cannot identify you may be retained indefinitely.

6. Your rights

Subject to applicable law, you have the right to access your data, correct inaccurate data, request erasure, restrict or object to processing, request portability, and withdraw consent at any time. You may also complain to your local data protection authority (in the UK, the Information Commissioner's Office). We respond to requests within one month.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls on our database, server-side handling of API keys and least-privilege access for staff.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember preferences such as theme. We may use limited analytics cookies to understand feature usage. You can manage or clear cookies in your browser settings; blocking essential cookies will prevent sign-in from working.

9. Children

Evolve is not intended for anyone under 16 and we do not knowingly collect their data.

10. Contact

For any privacy question or to exercise your rights, contact Evolve AI at privacy@buildwithevolve.org. For billing or payment data handled by our Merchant of Record, see Paddle's privacy policy.