Privacy Policy

Last updated: June 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Name (optional)
• Organization name (if applicable)

1.2 Usage Data

We automatically collect information about your use of the service:

• Conversation logs (encrypted)
• Feature usage patterns
• Error logs and performance data
• Device and browser information
• IP address

1.3 Payment Information

If you subscribe to a paid plan, we use Stripe to process payments. We do not store your full credit card number; Stripe handles all payment data securely.

1.4 Support and Service Communications

When you contact us or open a request through EVE CoreGuard Support (our support ticketing system), we collect and process:

• The subject and description of your request, and any subsequent replies or comments you add
• Files you choose to attach (e.g., logs or screenshots), restricted to a permitted set of file types and size limits
• Your identity and contact details (user ID and email) and the organization the request belongs to
• Any governance Decision ID you reference, used solely to retrieve the related signed decision evidence for investigation

Support records are isolated to your organization — no other customer can access them — every action on a ticket is recorded in a tamper-evident, hash-chained audit trail, and attachments are stored in a location partitioned per organization. We use this information only to receive, investigate, and resolve your request, to meet the service levels associated with your plan, and to maintain a compliant record of the interaction.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the EVE AI Core service
• Process transactions and send related information
• Send you technical notices and support messages
• Respond to your comments, questions, and requests
• Analyze usage patterns to improve our service
• Detect, prevent, and address technical issues
• Research and develop new features

3. Data Storage and Security

3.1 Storage

Your data is stored on secure servers. Conversation data may be stored locally on the server for session continuity and is encrypted at rest.

3.2 Security Measures

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data
• Regular security audits
• Access controls and authentication
• Secure password hashing (bcrypt)
• Deterministic governance enforcement (AIMS; FPGA hardware-isolation on the roadmap)
• Cryptographic attestation of all verification decisions
• Deterministic policy enforcement that cannot be bypassed

4. Governance Data Processing

EVE AI Core processes AI model outputs through our governance pipeline. This includes intent classification, charter compliance checks, and CRD scoring. No personal data is used in the governance verification process — only the AI output text is analyzed.

5. Audit Trail Data

Our cryptographic audit trail records verification decisions with SHA-256 hash chains. These records contain governance metadata (scores, verdicts, timestamps) but do not include personally identifiable information.

6. Data Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: With third parties who help us operate our service (e.g., Stripe for payments)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

7. Your Rights

You have the following rights regarding your data:

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for the service to function (authentication tokens)
• Analytics Cookies: Help us understand how the service is used
• Preference Cookies: Store your settings and preferences

You can control cookies through your browser settings.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time.

Support tickets, comments, and attachments are retained for the life of your organization's account and may be removed on request. When support data is erased we generate a signed, tamper-evident deletion record so the erasure can be independently verified. Where a legal hold or regulatory retention obligation applies (for example, audit records tied to a governance decision), data may be retained for the period required to satisfy that obligation.

10. Children's Privacy

EVE AI Core is not intended for users under 18 years of age. We do not knowingly collect information from children under 18.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, or to exercise your data rights, contact us at legal@eveaicore.com.