Privacy Policy
This policy explains what evot.io collects, why, who processes it on our behalf, and what you can do about it.
1. What we collect
Account — your email address, name, and profile image, received from Google Sign-In. We never see your Google password. Content — the cells, logs, Vots, knowledge, files, and images you create or upload, and the settings you choose. Activity — a record of how you work inside evot, used by your clone Vot to understand how you work: the text of a cell before and after you edit it, the requests you send to a Vot along with part of the cell you were looking at, and whether you accept the autocompletion a Vot proposes. We record only what you wrote yourself — text a Vot generated is excluded. We do not collect which logs you open or how long you stay on a cell. This record is summarized into a profile that belongs to you alone, which your Vot consults when it responds. It is not used to train an AI model. You can exclude specific logs from collection in Settings, and on the Free plan we collect only activity metadata, never the text itself. Usage — which models you called, token counts, cost and credit ledger entries, feature usage, and error logs. We need these to meter credits and to debug. Technical — IP address, browser and device information, and data kept in your browser's local storage to hold your session and remember preferences. Integrations — if you link Notion, Slack, Telegram, or Discord, the account identifiers and access tokens required for that link. Payments — we never receive or store your card details. Polar processes the payment and passes us only the transaction status, plan, and billing email.
2. Why we use it
To run the Service and keep your workspace in sync; to produce the AI results you ask for; to meter usage and bill it; to prevent abuse and keep accounts secure; to answer your support requests; and to meet legal obligations such as tax and e-commerce record keeping. Activity records are used only to personalize your clone Vot — to build a profile summarizing how you work, which the Vot consults when it responds or suggests what to do next. That profile applies to you alone and is never shown to other users. We do not use it for advertising or to compare or rate users against one another. Where the GDPR applies, we rely on performance of our contract with you (running the Service and billing), our legitimate interests (security and abuse prevention, and personalizing your clone Vot), legal obligations (accounting records), and your consent for optional integrations you choose to link. You may object to the processing of activity records for personalization at any time — exclude logs in Settings, or email us and we will stop.
3. Who processes it with us
Supabase — database, authentication, and file storage (United States) Vercel — web hosting and delivery (global edge network) Google — sign-in and Gemini models (United States) OpenRouter — access to other AI models (United States) Polar — payments, invoicing, and tax (United States) Browserless — rendering pages a Vot collects for you (European Union) Telegram, Slack, Discord, Notion — only if you link them We don't sell your personal data and we don't share it for advertising.
4. AI providers and your content
When you ask a Vot to do something, the cells, prompts, and files needed for that request are sent to the provider serving the model you chose, and the result comes back to your workspace. evot.io does not use your content to train AI models. The same holds for your clone Vot's profile — it is a summary of your activity that the Vot consults when responding, and it never retrains a model or changes its weights. Providers process the request under their own terms in order to return a response. On paid plans you can bring your own OpenRouter key, in which case requests go to your own provider account.
5. International transfers
Our providers are located outside Korea, mainly in the United States and the European Union, so your data is transferred and processed there. We rely on the providers' standard contractual clauses and equivalent safeguards where they're required.
6. How long we keep it
Your content stays until you delete it or delete your account. Deleting your account permanently removes your cells, logs, Vots, uploaded files, and integration links from our systems — it can't be undone. Activity records are kept for 24 months from the date they are collected, then destroyed. The clone Vot profile summarizing them is kept for as long as you use the Service. Deleting your account destroys both immediately, regardless of those periods. Excluding a log in Settings stops any further activity in that log from being collected. Billing and transaction records are kept for 5 years as required by Korean e-commerce law, and usage and cost records are kept while they're needed for accounting and abuse prevention.
7. Your rights
You can see and correct your data in the app, export your content (for example to Notion), and delete your account from Settings at any time. For anything you can't do yourself, email us and we'll handle it. If you're in the EEA or the UK you also have the right to object to or restrict processing, to data portability, and to complain to your local supervisory authority. In Korea you can raise a complaint with the Personal Information Protection Commission (privacy.go.kr).
8. Cookies and local storage
evot.io doesn't use advertising or analytics cookies and doesn't track you across other sites. We keep your sign-in session, language, theme, and workspace preferences in your browser's local storage; clearing it signs you out.
9. Children
evot.io isn't intended for children under 14. If we learn we've collected data from a child under 14, we'll delete it.
10. Security
Data is encrypted in transit and at rest by our infrastructure providers. Files you upload are stored in private buckets and served only through short-lived signed links. Access to production data is limited to the operator of the Service.
11. Changes to this policy
We'll post changes on this page and update the date below. For material changes we'll notify you in the app or by email before they take effect.
12. Contact
For privacy questions or requests — access, correction, deletion, or objection — email us at the address below. We'll reply within the period your local law allows.
Business information
- Business name
- EVOTIO
- Representative
- JEIN SONG
- Business registration no.
- 365-26-02109
- Address
- 527 Ogeum-ro, Songpa-gu, Seoul, Republic of Korea
- support@evot.io
Last updated 2026-09-11
← Back to home