Sign in
Legal

Privacy Policy

Evai Studio B.V. · Last updated 15 October 2026

This policy explains how Evai Studio B.V.(“we”) handles personal data in evai (evai.co, the evai apps and the evai assistant) and evai Studio (studio.evai.co). We are the controller under the General Data Protection Regulation (GDPR). Questions: hello@evai.co.

1. What we collect

  • Account details: name, email address, country, language and login details.
  • Your accounts and niche: the TikTok, Instagram and YouTube accounts you add, and your niche choices.
  • Public social media data: public profiles, videos and statistics of your accounts and of similar public accounts in your niche, which we collect to analyse what works.
  • Your content: videos, audio and files you upload to evai Studio, and the transcripts and edits made from them.
  • Conversations: what you ask the evai assistant and its answers.
  • Payments: plan, invoices and payment status. Card details are handled by Stripe; we never see your full card number.
  • Waitlist: name, email address and, if you give it, your TikTok or Instagram handle.
  • Technical data: login cookies, IP address and server logs, used to keep evai running and secure.

2. Why we use it, and on what basis

  • To provide evai (your account, analyses, briefs, edits, the assistant and billing): performance of our contract with you.
  • To analyse public accounts in your niche: our legitimate interest in providing insight into public content. We only use data that is publicly available and you can object (see section 6).
  • To keep evai secure and improve it: our legitimate interest.
  • To let you in from the waitlist and send service emails: your request and our legitimate interest. We do not send marketing without your consent.
  • To keep financial records: our legal obligation.

3. AI processing

evai uses AI models from Google (Gemini) and Anthropic (Claude) to analyse videos, write advice, answer your questions and edit content. We send these providers only what is needed for the task, through their business APIs. They process it on our behalf and do not use it to train their models. AI output can be wrong; we do not use it to make decisions about you with legal or similarly significant effects.

4. Who we share it with

We do not sell personal data. We use these service providers, who process data on our behalf under a data processing agreement:

  • Supabase: database and login;
  • Vercel: hosting of the website;
  • Google Cloud: processing (EU, Belgium) and the Gemini AI models;
  • Anthropic: the Claude AI models;
  • Cloudflare: domain, security and file storage;
  • Stripe: payments and invoices;
  • Resend: sending email;
  • providers of public social media data, which collect the public profiles and videos we analyse.

Some of these providers are based in or have access from outside the European Economic Area, such as the United States. In those cases we rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

5. How long we keep it

  • Account data and your content: as long as your account exists. After you close your account we delete it within 30 days, except backups, which are overwritten within 90 days.
  • Waitlist data: until we invite you, or earlier if you ask us to remove it.
  • Invoices and payment records: 7 years, as Dutch tax law requires.
  • Server logs: up to 30 days.

6. Your rights

You have the right to access, correct and delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw consent you gave. Write to hello@evai.co; we reply within one month. If your public account appears in evai’s analyses and you do not want that, you can object at the same address and we will stop using it.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in the country where you live.

7. Cookies

evai only uses cookies and local storage that are needed for it to work: keeping you logged in, remembering your language and your choices during sign-up. We do not use advertising or tracking cookies.

8. Security

Data is encrypted in transit and stored with access limited to the people and systems that need it. If a data breach affects you, we tell you and the authority as the law requires.

9. Children

evai is not meant for anyone under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy. For important changes we tell you by email or in the app. See also our Terms of Service.

11. Contact

Evai Studio B.V. · hello@evai.co