6c7eed7580
Fresh history cut from cynarAI/evoo antigravity-handoff/project-timeline (Voice First + project timeline). Brand docs/titles as evOo; keep @rakazo/* packages as tech debt. Excludes node_modules, caches, secrets, voice blobs.
170 lines
8.7 KiB
Plaintext
170 lines
8.7 KiB
Plaintext
---
|
||
import Footer from "../components/Footer.astro";
|
||
import Header from "../components/Header.astro";
|
||
import { fetchGithubStars, formatStarCount } from "../github";
|
||
import BaseLayout from "../layouts/BaseLayout.astro";
|
||
|
||
const stars = await fetchGithubStars();
|
||
const starsLabel = stars === null ? "Star" : formatStarCount(stars);
|
||
---
|
||
|
||
<BaseLayout
|
||
title="Privacy · evOo"
|
||
description="How Inbox Zero Inc. collects, uses, and protects information when you use evOo."
|
||
>
|
||
<div class="container">
|
||
<Header starsLabel={starsLabel} />
|
||
<main id="main" class="privacy-copy">
|
||
<h1>Privacy</h1>
|
||
<p><strong>Last updated: September 14, 2026</strong></p>
|
||
<p>
|
||
This policy explains how Inbox Zero Inc. (“Inbox Zero,” “we,” or “us”) handles personal information
|
||
when you use the evOo mobile app, a evOo service that we host, or evoo.com. A third party that
|
||
operates a self-hosted evOo deployment is responsible for its own privacy practices.
|
||
</p>
|
||
|
||
<h2>Information we collect</h2>
|
||
<p>Depending on how you use evOo, we collect:</p>
|
||
<ul>
|
||
<li>Contact and account information, such as your name, email address, and authentication records.</li>
|
||
<li>
|
||
Content you provide to the service, including bot instructions, messages, tasks, memories, files,
|
||
routines, and support communications.
|
||
</li>
|
||
<li>
|
||
Connection information you choose to provide, such as encrypted credentials or tokens for model
|
||
providers, connected applications, and browser sessions.
|
||
</li>
|
||
<li>
|
||
Technical information needed to operate and secure the service, such as IP address, user agent,
|
||
session records, device push token, timestamps, and diagnostic information.
|
||
</li>
|
||
</ul>
|
||
|
||
<h2>How we use information</h2>
|
||
<p>We use this information to:</p>
|
||
<ul>
|
||
<li>Provide, maintain, secure, and troubleshoot evOo.</li>
|
||
<li>Authenticate you and synchronize your account across supported clients.</li>
|
||
<li>Run the bots, routines, connections, and notifications you request.</li>
|
||
<li>Respond to support requests and comply with legal obligations.</li>
|
||
</ul>
|
||
|
||
<h2>Service providers and AI processing</h2>
|
||
<p>
|
||
Before submitting content or starting AI work, the evOo mobile app names configured
|
||
recipients, explains the data and purpose, and asks you to allow sharing. Choosing Not now
|
||
prevents the mobile action. Permission applies to the selected Space and recipient.
|
||
Account → AI data sharing lets you withdraw permission for new mobile actions.
|
||
Stop existing runs and disable routines separately; withdrawal cannot recall data already
|
||
sent. Web, desktop, and self-hosted server workflows use the connections you configure
|
||
without this mobile permission flow.
|
||
</p>
|
||
<ul>
|
||
<li>
|
||
<strong>Models and agents:</strong> messages, relevant conversation history, bot instructions,
|
||
memories, attachments and file content, screenshots, and content retrieved from connected
|
||
apps are used to generate responses and perform your tasks, including scheduled tasks.
|
||
Supported connections include OpenAI, Anthropic, Google, OpenRouter, Vercel AI Gateway, Cursor, and custom
|
||
model servers. The mobile permission screen identifies the services configured for your Space;
|
||
configuring a service does not by itself grant permission for new mobile actions.
|
||
</li>
|
||
<li>
|
||
<strong>AI gateways:</strong> OpenRouter and Vercel AI Gateway receive requests and forward
|
||
them to model providers according to the connection's routing settings. The mobile
|
||
disclosure names the configured gateway. Processing, retention, and routing depend on
|
||
the gateway account settings and applicable provider agreements. evOo's mobile
|
||
permission flow does not change those settings or promise zero retention.
|
||
</li>
|
||
<li>
|
||
<strong>Voice:</strong> recorded audio is sent to your selected transcription service;
|
||
text you choose to play, including bot responses, is sent for speech generation. Supported
|
||
voice services include OpenAI, ElevenLabs, Cartesia, and Fish Audio. Microphone access
|
||
and permission to share with an AI service are separate choices.
|
||
</li>
|
||
<li>
|
||
<strong>Memory:</strong> when Supermemory is configured, conversation summaries, saved
|
||
memories, search queries, and bot and Space identifiers are sent to store and retrieve context. Self-hosted memory
|
||
is processed by the server shown in your permission screen.
|
||
</li>
|
||
</ul>
|
||
<p>
|
||
We collect this content from what you enter, upload, record, or authorize your bots to access.
|
||
We store the recipient, Space, disclosure version, and time of your permission for the mobile app to remember
|
||
your choices. We do not sell personal information or use evOo content for third-party advertising.
|
||
</p>
|
||
<p>
|
||
Services we select to process personal information must provide protection equal to or
|
||
greater than the safeguards described in this policy, including limited processing purposes,
|
||
appropriate security, and retention and deletion protections. Before enabling a provider,
|
||
we review its terms and safeguards against these requirements. A self-hosted operator is
|
||
responsible for assessing the services it selects and its own agreements with those services.
|
||
</p>
|
||
<p>
|
||
Provider terms govern their processing and retention after receipt. You can review the
|
||
applicable provider policy from AI data sharing. Policies for supported services:
|
||
<a href="https://openai.com/policies/privacy-policy/">OpenAI</a>,
|
||
<a href="https://www.anthropic.com/legal/privacy">Anthropic</a>,
|
||
<a href="https://policies.google.com/privacy">Google</a>,
|
||
<a href="https://openrouter.ai/privacy">OpenRouter</a>,
|
||
<a href="https://vercel.com/legal/privacy-policy">Vercel</a>,
|
||
<a href="https://cursor.com/privacy">Cursor</a>,
|
||
<a href="https://elevenlabs.io/privacy-policy">ElevenLabs</a>,
|
||
<a href="https://cartesia.ai/legal/privacy">Cartesia</a>,
|
||
<a href="https://fish.audio/privacy/">Fish Audio</a>, and
|
||
<a href="https://supermemory.ai/privacy">Supermemory</a>.
|
||
</p>
|
||
<p>
|
||
Other services may host infrastructure, run sandboxes, deliver notifications, store data,
|
||
or connect apps as needed for the work you request. Connected apps receive the content
|
||
required for the actions you authorize. Their processing is governed by their applicable
|
||
terms and privacy policies.
|
||
</p>
|
||
|
||
<h2>Self-hosted deployments</h2>
|
||
<p>
|
||
The evOo mobile app can connect to a server that you or another organization operates. In that case,
|
||
the server operator, not Inbox Zero, controls the information sent to that deployment. The app stores the
|
||
selected server address and session token securely on your device.
|
||
</p>
|
||
|
||
<h2>Retention and deletion</h2>
|
||
<p>
|
||
We keep hosted account information and content while your account is active and as reasonably needed to
|
||
provide the service. You can permanently delete your hosted account and associated personal Space
|
||
data from the Account screen in the evOo app. We may retain limited information when required by law,
|
||
to resolve disputes, or to enforce agreements. Information already sent to a third-party provider is
|
||
subject to that provider’s retention practices.
|
||
</p>
|
||
|
||
<h2>Security and international transfers</h2>
|
||
<p>
|
||
We use reasonable technical and organizational safeguards designed to protect personal information. No
|
||
system is completely secure. We and our service providers may process information in the United States
|
||
and other countries, which may have different data-protection laws than your country.
|
||
</p>
|
||
|
||
<h2>Children</h2>
|
||
<p>
|
||
evOo is not directed to children under 13, and we do not knowingly collect personal information from
|
||
children under 13.
|
||
</p>
|
||
|
||
<h2>Your rights</h2>
|
||
<p>
|
||
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy
|
||
of your personal information, or to object to certain processing. Contact us to make a request.
|
||
</p>
|
||
|
||
<h2>Contact us</h2>
|
||
<p>
|
||
Inbox Zero Inc.<br />
|
||
131 Continental Dr, Suite 305<br />
|
||
Newark, Delaware 19713, United States<br />
|
||
<a href="mailto:hello@evoo.com">hello@evoo.com</a>
|
||
</p>
|
||
</main>
|
||
<Footer />
|
||
</div>
|
||
</BaseLayout>
|