Privacy Notice

This Privacy Notice explains how Evoxa collects, uses, shares, retains, and protects personal information when you use the Service, including features that you voluntarily connect to Google.

1. Data we collect

• Account data: name, email address, and information needed to authenticate you and manage your account.
• Content you provide: audio, transcripts, instructions, and associated metadata.
• Technical data: usage logs, IP address, device information, cookies, and metrics needed to operate, protect, and improve the Service.
• Integration data: information you authorize us to obtain from connected services, subject to the purposes and controls described below.

2. Data obtained through Google APIs

Google connections are optional and requested in the context of the feature you choose. Evoxa keeps Google Sign-In, Google Calendar, and Gmail analysis separate; connecting one feature does not automatically authorize the others.

2.1 Google Sign-In

If you choose Google Sign-In, we use the basic data you authorize, such as your identifier, name, and email address, solely to create or authenticate your Evoxa account, maintain your session, and protect access. Signing in does not grant access to Gmail or Google Calendar.

2.2 Google Calendar

If you connect Google Calendar, Evoxa may process event data—such as title, description, date, time, location, attendees, time zone, and reminder settings—to synchronize events, create reminders, and deliver notices through the channels you select.

• We process only the data needed for the Calendar features you enable.
• We do not sell Google Calendar data or use it for advertising or marketing.
• You can disconnect Calendar in Evoxa or revoke access from your Google Account.
• When you revoke access or delete your account, we stop synchronization and delete Calendar data we retain, subject to applicable technical timelines and legal obligations.

2.3 Gmail and Mailbox Intelligence

When you connect a Gmail account for email analysis, Evoxa requests only the restricted, read-only https://www.googleapis.com/auth/gmail.readonly scope (gmail.readonly). The connected account may be different from the email address you use to sign in to Evoxa.

Access and purpose:

• We read message and conversation headers and text in Inbox and Sent to identify messages that need a reply, deadlines, urgent matters, follow-ups, and important updates.
• Observing sent messages allows us to remove a pending item when you reply or the conversation changes.
• Spam and Trash are excluded from normal discovery.
• Evoxa cannot send, modify, or delete email with this permission.
• We generate derived classifications, summaries, and next steps to show in Evoxa or deliver through WhatsApp or Telegram, only through the channels you select.

Processing, storage, and retention:

• Required content is retrieved during analysis and processed transiently; by default, we do not persist raw HTML or raw message text.
• OAuth tokens are stored encrypted, and operational references are opaque or pseudonymized.
• Derived briefs are retained by default for up to 30 days. Derived analyses and quality telemetry are retained by default for up to 90 days, unless a shorter period applies.
• Infrastructure, AI processing, and messaging providers may process only the data necessary to provide the requested feature, under Evoxa's instructions and controls.

Control and deletion:

• You can disconnect Gmail from Integrations in Evoxa or revoke access from your Google Account.
• When you disconnect through Evoxa, we stop synchronization, attempt to revoke the permission, and delete the connection and its associated derived data. We may retain a minimal audit event without email content to demonstrate deletion and protect the Service.
• To request access, correction, or deletion of this data, email support@getevoxa.com.

2.4 Limited Use of Google data

Evoxa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not sell Google data or use it for advertising, advertising profiles, marketing, creditworthiness assessments, or financial eligibility determinations.
• We do not use Google data to train or improve generalized artificial intelligence or machine learning models that are not personalized to the user.
• We do not allow a person to read Gmail content unless you request support and provide affirmative permission for that specific case; when needed to investigate security or abuse; or when required by applicable law.
• Providers involved in delivering the Service may process only the data necessary to provide the feature you requested.

3. Purpose of processing

• Provide and improve the Service (transcription, analysis, storage, messaging, support).
• Operational and security communications.
• Legal compliance and fraud prevention.

4. Legal basis

We process your data under legal bases such as performance of the contract, legitimate interest and, where applicable, your consent.

5. Sharing with third parties

We may share data with vendors acting as processors/subprocessors (e.g., transcription, storage, AI, messaging services). We require appropriate contractual and security safeguards.

6. International transfers

If data is transferred outside your country, we implement adequate safeguards in accordance with applicable law.

7. Retention

We retain data for as long as needed to fulfill the purposes described and legal obligations. You may request deletion when applicable.

8. Security

We apply reasonable technical and organizational measures to protect your data. No system is 100% secure, but we work continuously to mitigate risks.

9. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, delete, object, restrict processing or request portability. Contact us to exercise these rights.

10. Minors

The Service is not directed to minors without guardian authorization. If we become aware of data relating to minors without permission, we will delete it.

11. Cookies

We use cookies or similar technologies to operate the site, remember preferences and perform analytics. You can manage cookies from your browser.

12. Changes to this Notice

We may update this Notice. We will publish the current version and its modification date.

13. Contact

If you have privacy questions or wish to exercise rights, email support@getevoxa.com.