Evose Privacy Policy

Evose ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we handle your information when you use the Evose website, web platform, desktop client, iOS/Android mobile apps, browser extension, and related services (collectively, the "Services").

1. Scope

This Policy applies to information handled by Evose through the Services. A third-party website or model provider may process information under its own privacy terms; this Policy does not replace those terms.

2. Information We Handle

2.1 Information You Provide

• Account and billing information, such as your name, email address, authentication information, organization details, and transaction records.
• Prompts, conversations, agent and workflow settings, feedback, content reports, support requests, and other content you submit to the Services.
• Files, text, code, knowledge-base content, and business data that you choose to upload or make available to an agent.

2.2 Service and Device Information

• Device, application, browser, operating-system, language, IP address, and approximate region information where available.
• Service events needed to operate, secure, diagnose, and measure the reliability of the Services, including request status, errors, performance, and feature interactions.
• Account, workspace, session, installation, and other identifiers needed to maintain the state of the Services.

2.3 Data Processed by the Evose Browser Extension

When you start a browser task through Evose Desktop using the Evose browser extension, the extension and Evose Desktop may process the following data to the extent necessary to complete that task:

• Installation and connection information, including a random extension installation identifier, browser type, extension and Desktop versions, and connection state.
• Browsing information from Evose task tabs, including URLs, page titles, navigation state, timestamps, and task-tab metadata.
• Website content and resources needed for the task, including visible text, page structure and element semantics, links, tables, form values, and media or resource metadata.
• On-demand screenshots and low-resolution preview frames of the current task tab.
• Task instructions, requested navigation, clicks, pointer positions, text entry, key presses, scrolling, uploads, downloads, and the results or errors of those actions.
• File names, local paths, metadata, and downloaded artifacts when a task asks Evose to upload or download files.

Depending on the task and website you choose, task-tab data may contain personal identifiers, health information, financial or payment information, authentication information, personal communications, location information, browsing history, user activity, and other website content. Evose processes such information only as needed to perform the task and operate the Services as described in this Policy.

2.4 Mobile App Features and Permissions

• When you use scanning, photo, or video features, the mobile app requests camera permission and processes the images or videos needed for that action.
• When you select media attachments, browse recent photos, or save images, the mobile app accesses media and previews within the scope allowed by the operating system, or writes images you choose to save to your photo library.
• When you add files or media attachments, we process the selected content and necessary information such as file names, types, and sizes. Attachments may be uploaded to Evose file storage before a message is sent to prepare the upload and subsequent task.
• When you start voice input or record sound, the mobile app requests microphone permission and any applicable speech-recognition permission. Recognition is handled by the service configured on your device and may require a network connection and processing of audio by that service provider. Voice-input transcripts first appear in the input field for you to review and send.
• The mobile app stores sign-in credentials, necessary preferences, and some business data, images, temporary attachment copies, and last-viewed positions on your device to load and restore pages.

3. Evose Browser Extension Scope and Controls

• Evose creates a dedicated tab group for each browser task. The Evose browser extension controls only tabs owned by that task and does not silently add your existing tabs.
• Removing a controlled tab from its Evose task group, stopping the task, disconnecting Desktop, or ending the connection revokes control.
• The extension communicates with the locally installed Evose Desktop application through Chrome Native Messaging. It does not open its own TCP, HTTP, WebSocket, or EventSource service.
• The extension stores its random installation identifier in Chrome local storage. Task authorization and tab bindings are maintained for the active connection rather than restored as continuing authority after a restart.
• The extension popup lets you review connection state and stop active browser tasks.

4. How We Use Information

We use information only when reasonably necessary to:

• Provide the features you request, including messaging, attachment processing, voice input, session restoration, running agents, executing workflows, controlling task tabs, and returning task results.
• Authenticate users, maintain task boundaries, prevent abuse, investigate security incidents, and protect the Services.
• Diagnose failures, maintain reliability, and handle the feedback, content reports, and support requests you submit.
• Administer accounts, workspaces, subscriptions, payments, and legally required records.

5. AI and Browser Task Data Flows

• The mobile app processes the messages and attachments you submit through Evose services. To complete an AI request, the Services send the necessary messages, attachment content, and task context, such as conversation history, referenced materials, and tool results, to the model or tool providers actually used for that task.
• Account information is used for sign-in, authentication, and account administration; model and tool providers process the content needed to perform the task. Personal information you include in messages, attachments, or materials you authorize an agent to read may be processed as part of that task.
• The Evose browser extension sends task-tab data to Evose Desktop on the same device through Native Messaging.
• To perform an AI browser task, Evose Desktop may send the necessary prompt, page content, action results, and optional images to the model provider selected or configured for the session over an encrypted network connection.
• Websites you ask Evose to use receive the navigation, form data, file uploads, and other actions needed to complete your task, just as they would receive those actions from your browser.
• Third-party model and website providers process information under their own terms, privacy notices, account settings, and retention controls. Review those terms before using a provider with sensitive data.

6. When We Share Information

We do not sell user data. We may disclose information only in these circumstances:

• To service providers, infrastructure providers, and model providers when necessary to provide, maintain, secure, or improve the feature you use.
• Recipients may include the model or tool providers used for the task, storage and infrastructure providers hosting selected files, and the recognition service configured on your device when you use voice input. The recipients depend on the features you use, selected models, and task configuration.
• Depending on where the Services and providers operate, information may be processed outside your country or region. Processing and retention are subject to applicable law, provider terms, and configuration. You can contact us for information about specific recipients, processing locations, or retention arrangements.
• When required to comply with applicable law, legal process, or enforceable governmental requests.
• When reasonably necessary to protect users, investigate fraud or abuse, or address a security incident.
• As part of a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable notice and consent requirements.

7. Chrome Web Store Limited Use

The Evose browser extension's use and transfer of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

• We use user data processed by the Evose browser extension only to provide or improve its disclosed single purpose: completing user-initiated browser tasks in Evose-controlled task tabs, including related security and reliability operations.
• We transfer user data processed by the Evose browser extension only when necessary to provide or improve that single purpose, comply with applicable law, protect against fraud or abuse, or complete a merger, acquisition, or asset sale after obtaining the user's explicit prior consent.
• We do not sell user data processed by the Evose browser extension.
• We do not use or transfer user data processed by the Evose browser extension for personalized advertising, retargeting, or purposes unrelated to its disclosed single purpose.
• We do not use or transfer user data processed by the Evose browser extension to determine creditworthiness or for lending purposes.
• We do not allow humans to read user data processed by the Evose browser extension except with your explicit consent for specific support, when necessary for security, to comply with law, or when data is aggregated and anonymized for permitted internal operations.

8. Retention and Deletion

• You can request account deletion and deletion of associated personal information from your profile under Account settings → Delete account in the mobile app. Once deletion succeeds, the account can no longer sign in or register again with the same email address. We will delete personal data associated with the account within 90 days after the deletion request succeeds, except where there is a basis for continued retention.
• We may retain necessary transaction, security, or deletion records to meet legal obligations, resolve disputes, prevent fraud, or maintain permanent account deletion. These records are used only for those purposes and deleted when the basis for retention no longer applies. Associated personal data in backups is subject to the same deletion requirements. Data already received by third parties is also subject to their retention rules; you can contact us with related requests.
• The extension installation identifier remains in Chrome local storage until the extension or its stored data is removed.
• Evose browser extension task authorizations and tab bindings end when the task or connection ends and are not restored as continuing control after a restart.
• Browser task content and results may be retained with the related Evose session, conversation, managed files, or account records according to your product configuration and the retention needed to provide the Services.
• Model providers and other third parties may retain data according to their terms and your provider configuration.
• You can delete supported content through the Services or request access, correction, or deletion by contacting us. We may retain limited records where required for security, dispute resolution, legal compliance, or backup integrity.

9. Security

• We use technical and organizational safeguards designed to limit access, maintain browser-task boundaries, and protect data against unauthorized access, alteration, disclosure, or destruction.
• Communications between the mobile app and Evose services use encrypted network connections. Network transfers from Evose Desktop to Evose services and configured providers use modern encrypted transport where supported and required.
• The mobile app uses secure storage provided by the device for sign-in credentials and separates business caches by account and relevant workspace. Device permissions, screen locks, and operating-system security settings also affect protection of information on the device.
• No method of transmission or storage is completely secure. Do not ask an agent to handle information that is not necessary for the task, and take over manually for sign-in, verification, or other sensitive steps when appropriate.

10. Your Choices and Rights

Depending on your location and applicable law, you may have the right to:

• Access or receive a copy of personal information we maintain about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of personal information, subject to applicable exceptions.
• Withdraw consent or object to certain processing. You can also stop tasks performed through the Evose browser extension, remove controlled tabs from their task group, disconnect Desktop, or uninstall the extension.
• You can revoke camera, photo-library, microphone, or speech-recognition permissions in system settings; features that depend on those permissions may then be unavailable. You can also stop related tasks, remove service connections, or use the email below to request withdrawal of consent, information, or deletion.
• You can clear local caches that can be retrieved again from your profile under About Evose → Cache management in the mobile app. Clearing caches preserves sign-in state, necessary preferences, downloaded files, and client drafts; it does not delete your cloud account or cloud content.
• Signing out clears the current session and related account caches; it is not account deletion. Uninstalling the app, signing out, or clearing caches does not automatically cancel existing subscriptions; cancellations must be handled through the original purchase channel.

11. Children

The Services are not directed to children under 18, and we do not knowingly collect personal information from children under 18.

12. Changes to This Policy

We may update this Policy as our Services or legal obligations change. We will update the date above and provide additional notice when required by law or when a change materially affects how we handle information.

13. Contact Us

For privacy questions or requests, contact:

Email:support@evoseai.com