Privacy notice
This notice explains what information eva collects, why it is used, where service providers may process it, and the choices available to you.
Effective 17 July 2026
Who operates eva
EVA CEO operates the eva website, waitlist, and early-access service from Australia. Exact legal-entity, trading-name, ABN, and address details must be supplied and legally reviewed before public launch.
Information we collect
When you join the waitlist, we collect your email address, the date and source of the request, the consent-policy version shown to you, confirmation and unsubscribe status, and delivery records. We also process a one-way hash derived from your IP address to limit abuse; the raw address is not stored in the waitlist table.
If you later use eva, we may process account details and the business information you choose to add, including project context, documents, customers, assets, conversations, work items, and operating memory.
How information is collected and used
We collect information directly from forms and product interactions, and automatically from essential service logs and privacy-conscious performance or traffic measurement. We use it to confirm waitlist requests, send early-access updates, provide and secure the service, prevent abuse, respond to support and data requests, understand site reliability, and comply with legal obligations.
Service providers and international processing
eva uses service providers for hosting, database and authentication infrastructure, transactional email, and site measurement. These currently include Vercel, Supabase, and Resend. They may process information in countries outside Australia under their own security, privacy, and contractual controls.
Vercel Web Analytics is configured to use aggregated data, remove query strings, and exclude confirmation and unsubscribe result routes. Speed Insights measures site performance and excludes those sensitive routes as well.
Retention and deletion
Pending waitlist requests whose confirmation expired more than 30 days ago are deleted automatically. Rate-limit records are deleted after seven days. Confirmed and unsubscribed records are retained for as long as reasonably needed to administer the waitlist, honour suppression requests until an address completes a fresh confirmation to rejoin, evidence consent, resolve disputes, and meet legal obligations.
Product-account and business data will be retained while the account is active and for a limited period after closure, subject to backup, security, dispute, and legal requirements. More precise product-retention periods will be provided with the early-access terms.
Your choices and rights
You can unsubscribe from waitlist updates using the link in an email. You may also ask to access, correct, or delete personal information, or raise a privacy concern. Some information may need to be retained to meet legal requirements or ensure an unsubscribed address remains suppressed.
Contact and complaints
The public privacy contact address is awaiting operator confirmation. Email .
If you are not satisfied with our response, you may contact the .