Privacy Policy

• Who we are. EvadeGPTAI, based in Sydney, New South Wales, Australia, runs EvadeGPT and is responsible for your personal information.
• What we collect. Your account details, limited billing details, the content you submit, your support conversations, and usage, device and activity data, including IP addresses.
• Why. To provide the Services, take payment, keep accounts secure, prevent fraud and abuse, respond to payment disputes, improve the product and advertise it.
• Who we share it with. Providers that help us run the Services, including AI model providers and payment, hosting, email, analytics and advertising partners, and others only where the law, a dispute or a business sale requires it.
• Tracking. Analytics and advertising tracking is on by default. You can turn it off at any time with Cookie settings in the site footer.
• Your rights. Depending on where you live, you can access, correct, delete or export your information and object to some uses. Email support@evadegpt.ai.

EvadeGPT is operated by EvadeGPTAI, based in Sydney, New South Wales, Australia ("we", "us" or "our"). We are responsible for the personal information described in this policy, as its controller. This policy applies to our website, apps, tools, integrations and support (the "Services"). Our Terms of Service also apply to your use of the Services.

You can contact us about privacy at support@evadegpt.ai or through the support page.

Information you give us

• Account details. Your email address, your password (stored only in hashed form by our authentication provider) and optional profile details such as a display name or avatar. If you sign in with Google or Facebook, we receive your name, email address and profile picture from that service.
• Payment details. Payments are handled by Stripe. We never receive or store your full card number. We keep your Stripe customer ID, plan, billing interval and purchase and invoice history, and limited billing details that Stripe shares with us, such as your name, country and postcode.
• Content you submit. The text, prompts, documents, images, audio and other material you put into our tools, and the outputs we produce for you. For example, humanizer inputs and outputs and chat conversations are saved to your account history.
• Support and Eve Assistant conversations. Messages you send in support tickets, by email or through our contact form, and your conversations with Eve Assistant, our automated support assistant.
• Purchase and acceptance records. When you buy, a record that you accepted our Terms, with the date and time, the Terms version, your IP address and your browser's user agent.
• Preferences. Your email preferences and your cookie choice.

Information we collect automatically

• Activity logs. Records of sign-ins and of generations and other tool runs, with the date and time, IP address and user agent.
• Usage data. Which features you use, points spent and balances, how long requests take and whether they succeed, and the pages you visit and buttons you click.
• Device and network data. IP address, approximate location derived from it (such as your country), browser, operating system, device type, language and time zone.
• Cookies and similar technologies. Cookies, pixels, local storage and similar tools used for sign-in, security, preferences, analytics and advertising. See Cookies, analytics and advertising.

Information from others

We receive information from sign-in providers (Google and Facebook), from Stripe about payments and disputes, and from advertising platforms, such as an identifier showing which ad you clicked before you signed up.

Please do not submit sensitive information, such as health information or government identifiers, about yourself or others unless your request needs it. If you do, we process it only to provide the feature you are using.

• Provide the Services. Create and manage your account, process your requests, return results, save your history and give you support.
• Payments and billing. Take payment, manage subscriptions, points and offers, send receipts and keep tax and accounting records.
• Security and fraud prevention. Authenticate sign-ins, detect and stop abuse, enforce usage limits and the limit of one $1 offer per account, and investigate suspicious activity.
• Payment disputes and legal claims. Respond to chargebacks and other disputes, including by sending account, acceptance and activity records to our payment processor and card issuers as evidence, and establish, exercise or defend legal claims.
• Communicate with you. Send service emails, such as receipts, security alerts and changes to our terms, and marketing emails about features and offers. You can turn marketing emails off at any time in your notification settings or with the unsubscribe link in any marketing email.
• Improve the Services. Understand how features are used, fix errors and improve our tools and prompts. We do not use your content to train AI models; see AI training, the honest answer.
• Advertising and measurement. Measure and improve our ads on platforms such as Google and Meta, including by reporting sign-ups and purchases to them, unless you turn this off.
• Legal obligations. Comply with tax, accounting and other laws, respond to lawful requests and enforce our Terms of Service.

Automated decisions

We use automated checks to prevent fraud and abuse, for example to stop accounts with disposable email addresses from claiming rewards, to apply the limit of one $1 offer per account, and to pause an account while a payment dispute is open. You can ask for a person to review a decision that affects you by contacting us.

• Contract. To provide the Services you sign up for and to process your payments.
• Legitimate interests. To keep the Services secure, prevent fraud and abuse, enforce our Terms, respond to payment disputes and legal claims, understand and improve the Services, and market them, including analytics and advertising measurement. You can object to these uses, as explained in Your rights and choices, and you can turn off analytics and advertising tracking with Cookie settings.
• Legal obligation. To keep tax and accounting records and to respond to lawful requests.
• Consent. Where we ask for your consent for a particular use, you can withdraw it at any time.

We share personal information with:

• AI model providers. Third-party AI model providers process the text, files and prompts you submit in order to produce results, under their own terms.
• Payments. Stripe processes payments, subscriptions, receipts and disputes.
• Hosting, database and sign-in. Providers such as Vercel (hosting) and Supabase (database and authentication) store and process data for us.
• Email and support tools. Providers that deliver our emails and help us run support.
• Analytics. PostHog and Vercel Analytics help us understand how the Services are used.
• Advertising partners. Google and Meta receive information about your visits, sign-ups and purchases so they can measure and improve our ads. This can include cookie and click identifiers, your IP address and browser details, the value of a purchase and, for matching, your email address and billing details in hashed (scrambled) form. See Cookies, analytics and advertising.
• Card networks and banks. In a payment dispute, our payment processor, the card networks and your card issuer receive the evidence we submit, such as account, acceptance, activity and support records.
• Professional advisers. Lawyers, accountants and auditors, who must keep it confidential.
• Legal and safety requests. Courts, regulators, law enforcement and others where we believe the law requires it, or where it is needed to protect the rights, property or safety of our users, the public or us.
• Business transfers. A buyer, investor or successor if all or part of our business is sold, merged or reorganised, who must handle it in line with this policy.
• At your direction. Others when you ask us to, for example when you share a link to your content.

We use cookies and similar technologies for three purposes:

• Required. To sign you in, keep sessions secure, remember settings and prevent abuse. These are always on.
• Analytics. To understand how the Services are used, with PostHog and Vercel Analytics.
• Advertising. To measure our ads and their results with Google and Meta, including the Meta pixel and Google tags, and to remember which ad you clicked.

Analytics and advertising tracking is switched on by default for every visitor, in every country. You can turn it off at any time with the Cookie settings control in the site footer or the button below. Your choice is saved in a cookie on your device for 180 days and, if you are signed in, on your account.

When you turn tracking off, we stop loading the Meta pixel, stop PostHog from storing identifiers on your device, stop setting our own advertising attribution cookies, tell Google's tags not to use cookies or your data for advertising, and stop sending your account's events to Meta. Purchases are then reported to Google without your email address and marked as refused, or not at all if you are in the EEA, the UK or Switzerland. Google's tags may still send limited signals that do not use cookies. Required cookies keep working.

We do not currently respond to Do Not Track or Global Privacy Control browser signals. Use Cookie settings instead.

We do not use the text, files or prompts you submit, or the outputs we return, to train AI models, and we do not sell them.

To produce a result, we send the content needed for that request to a third-party AI model provider, which processes it and returns the output. Those providers handle it under their own terms and privacy policies, which may allow them to keep it for a limited time, for example to monitor for abuse. We do not control their systems.

We save your inputs and outputs to your account history so you can see past work, and we may keep cached results so that repeated requests are faster. If our practice changes, we will update this section before the change applies to your content.

• Account details: while your account is open. They are deleted when you delete your account, except as listed below.
• Content you submit and outputs: kept in your history until you delete them or your account.
• Support tickets and Eve Assistant conversations: while your account is open, and after that only where needed for an open dispute or legal claim.
• Activity logs (sign-ins and generations, with IP address and user agent): 24 months from the event.
• Purchase, billing and Terms acceptance records: up to 7 years after the transaction, including after you delete your account, for tax, accounting and dispute purposes. Stripe also keeps payment records under its own policies.
• Information about a dispute, fraud investigation or legal claim: until it is resolved and any appeal or limitation period has passed.
• Your cookie choice: 180 days on your device.
• Analytics data: kept by our analytics provider for as long as it is useful for understanding how the Services are used. We will delete analytics data linked to your account if you ask.
• Server logs: short-lived logs kept by our hosting providers for debugging and security, generally deleted within 30 days.

After these periods we delete or anonymise the information, unless the law requires us to keep it longer.

• Encryption in transit (TLS) for every request.
• Encryption at rest for our primary database.
• Passwords stored only as salted hashes by our authentication provider, so they cannot be read.
• Row-level security on user data in our database, so one account cannot read another account's data.
• Production access limited to the people who need it to run and support the Services.

No system is completely secure. If we become aware of a data breach that is likely to cause you serious harm, we will notify you and the relevant regulators as the law requires.

We are based in Australia. Our providers store and process personal information in other countries, including the United States and countries in Europe and Asia where our hosting, AI model, payment, analytics and advertising providers operate. This means your personal information is disclosed to overseas recipients.

Where Australian privacy law applies, we take reasonable steps, as Australian Privacy Principle 8 requires, to ensure that overseas recipients handle your information consistently with the Australian Privacy Principles, for example through our providers' contractual terms. Where EU or UK law applies, we rely on adequacy decisions or on safeguards such as the European Commission's Standard Contractual Clauses and their UK equivalents, where our providers offer them.

• Access: ask for a copy of the personal information we hold about you.
• Correction: ask us to fix information that is inaccurate or incomplete.
• Deletion: delete your account on the data deletion page, or ask us to delete your information. We may keep some records where the law allows, as explained in How long we keep it.
• Portability: ask for a copy of the information you gave us in a commonly used format.
• Objection and restriction: object to uses based on our legitimate interests, or ask us to limit how we use your information.
• Tracking: turn off analytics and advertising tracking at any time with Cookie settings.
• Marketing email: turn it off in your notification settings or with the unsubscribe link in any marketing email.

To use a right, email support@evadegpt.ai or use the support page. We verify your identity before acting, usually by asking you to write from your account email address, and we respond within 30 days, or sooner where the law requires. We will not treat you differently for using your rights. If you are not satisfied with our response, you can complain to a privacy regulator, as explained below.

If you are in Australia, we handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, to the extent they apply to us. You can ask to access or correct your personal information under Australian Privacy Principles 12 and 13. You may deal with us anonymously or under a pseudonym where that is practicable, but most of the Services need an account, and paid plans need payment details.

As explained in International transfers, we disclose personal information to overseas recipients, including in the United States (Australian Privacy Principle 8).

If you have a privacy complaint, contact us first at support@evadegpt.ai, and we aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

If the GDPR or the UK GDPR applies to you, you have the rights listed in Your rights and choices, including the right to object at any time to processing based on our legitimate interests and to direct marketing, and the right to withdraw any consent you have given. You can complain to the data protection authority where you live or work, or, in the United Kingdom, to the Information Commissioner's Office at ico.org.uk.

If you live in California or another US state with a consumer privacy law, you may have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete it, to get a portable copy, and to opt out of its sale, of its sharing for cross-context behavioural advertising, and of targeted advertising.

In the last 12 months we have collected the categories of personal information described in What we collect: identifiers (such as email address, IP address and account IDs), account login details, commercial information (such as purchases), internet and other electronic activity (such as usage data and activity logs), approximate location, and the content of your submissions and communications. We collect it for the purposes in How we use it, disclose it to the categories of recipients in Who we share it with, and keep it for the periods in How long we keep it. We use account login details only to sign you in and keep your account secure.

We do not sell personal information for money. However, we let Google and Meta collect identifiers and internet activity through cookies and pixels, and we send them sign-up and purchase events, to measure and improve our advertising. Under these laws, this may be a "sale" or "sharing" of personal information, or "targeted advertising". To opt out, use Cookie settings in the site footer; it is our "Do Not Sell or Share My Personal Information" control. We do not currently respond to Global Privacy Control signals. We do not knowingly sell or share the personal information of anyone under 16.

You can make a request yourself, or through an authorised agent, by emailing support@evadegpt.ai. We will verify the request and may ask an agent for proof of their authority. We will not discriminate against you for using your rights. If we refuse your request, you can appeal by replying to our decision, and if you are not satisfied with the outcome of the appeal, you can contact your state attorney general.

The Services are intended for adults. Users under 18 may use them only with a parent or guardian involved, as our Terms of Service explain, and purchases by minors must be made or approved by a parent or guardian.

The Services are not directed at children under 13, and we do not knowingly collect personal information from children under 13, or under a higher minimum age where local law sets one. If we learn that we have, we will delete it. If you believe a child has given us personal information, contact support@evadegpt.ai.

We may update this policy from time to time. The date at the top of this page shows the latest version. If we make a material change, such as collecting new categories of information or sharing it in new ways, we will tell you by email or in the product at least 14 days before the change takes effect.

EvadeGPTAI, Sydney, New South Wales, Australia. Email support@evadegpt.ai or use the support page. We read every message.