Privacy Policy

Eviory OS operates as a Local-First application to ensure lightning-fast performance, reading and writing data directly to your browser's IndexedDB and LocalStorage. However, to ensure your data is safe from accidental deletion, Cloud Sync is enabled by default when you log in. If you choose to use strict Local-Only mode, whether during onboarding or later via Settings, Eviory does not have access to, read, harvest, or store your local data on our servers.

Eviory OS offers Managed AI features (included with Eviory Pro and Pro+ subscriptions) and an optional Bring Your Own Key (BYOK) architecture for Free tier users and power users who prefer full control.If you use the BYOK option, your API keys are stored strictly locally on your device. They are never transmitted to Eviory servers. Our systems are hardcoded to strip your API keys on the client-side before any Cloud Sync process occurs.

When using AI features, text prompts are sent from your application to the respective AI providers (such as OpenAI, Anthropic, or our integrated partners). This processing is subject to their respective privacy and data retention policies.

Our Cloud Sync feature (enabled by default) backs up your workspace and allows cross-device usage, subject to storage limits based on your subscription tier. By using Cloud Sync, you consent to the following data practices:

• Text Data: You grant Eviory the right to access and use your text-based, structured JSON data (such as content strategies, hooks, categories, and posting schedules) in two ways: (a) at the individual level, to power AI features and personalized outputs within your own workspace, and (b) in an aggregated and anonymized format, to improve our systems, generate industry insights, and develop future Content Packs. Your individual data is never shared with other users or sold to third parties.
• Media Assets (Blind Storage): Your visual media (images, videos, brand assets) synced to our cloud storage are treated as Blind Storage. We do not analyze, process, or view your media files for product purposes, except for automated security or legal-compliance scanning performed by our infrastructure providers. They are stored solely for your backup and cross-device retrieval, ensuring your visual brand identity remains private.
• API Key Protection: As stated, your personal API keys are algorithmically stripped from your data before synchronization and never leave your device.

To provide secure access to your workspaces and subscriptions, we strictly collect and store only your email address. We use a passwordless authentication system (Google OAuth or One-Time Passcode via email), meaning we do not ask for, collect, or store any passwords.

Additionally, we use Cloudflare Turnstile to protect our authentication forms from automated bots and spam. As a condition of using this service in invisible mode, we reference Cloudflare's Turnstile Privacy Addendum and Cloudflare's Privacy Policy. Turnstile operates in the background to securely evaluate your session data to distinguish human users from bots without using tracking cookies.

When you make a purchase or upgrade to Premium, payment processing is handled entirely by third-party services (such as Dodo Payments). We do not collect, process, or store your payment details or credit card information on our servers.

Our website uses minimal, strictly necessary cookies required for the platform to function. When you log into the Workspace, we use a secure, HTTP-only session cookie to verify your access rights. We do not use advertising, retargeting, or cross-site tracking cookies.

To continuously improve the Eviory OS experience, we collect anonymous, non-intrusive telemetry data about how you interact with the platform (such as session duration, app launches, and which tools are used). This data is strictly limited to authenticated users and never includes your actual creative content, workspace data, or personal API keys.

We respect your privacy. You can opt out of this telemetry tracking at any time by toggling the "Privacy & Data" settings within your Workspace.

You have the right to request access to, correction of, or deletion of the personal account data we hold (such as your email address and purchase history). Contact us to exercise these rights.

Regarding Workspace Data: If you use strict Local-Only mode, you alone control your data and can delete it by clearing your browser storage. If you use Cloud Sync, switching to Local-Only automatically deletes your previously synced data from our servers within 90 days. You may also request immediate deletion of your synced data at any time by contacting us; we will process such requests within 30 days.

For privacy-related questions, contact us at hello@eviory.com.