Overview

EraEvo is a product of Evolved Sense Technologies ("we", "us"). This policy explains how we handle information when you visit eraevo.com or use the EraEvo product (web app, API, desktop client, or IDE extensions). For the full technical detail of our security and data-handling commitments, see our Security & Trust page.

What we collect

Account data. If you sign up, we collect your email address and the profile attributes returned by your identity provider (name, avatar URL).

Product use. When you run an execution, we store the request you wrote, the files generated, the build/test outcome, the cost, and a snapshot of the run for replay. This is encrypted at rest and is owned by you.

Contact form submissions. When you use our contact form, we collect your name, email address, and message content to respond to your inquiry.

Server logs. Our servers automatically log standard request data (IP address, browser type, request path) for security and operations. Retained 30 days.

We do not train on your code

Your code, prompts, and outputs are never used to train any model — ours or any vendor's. This is a contractual commitment, not a marketing claim. The full guarantee is on our Security page.

Specifically:

  • We do not train, fine-tune, or evaluate any model on your inputs or outputs.
  • We use AI vendors (OpenAI, Anthropic, Google) under no-retention agreements where the vendor supports them.
  • You can verify exactly what was sent to which model on every execution via the per-execution prompt log.
  • If you bring your own API keys, your requests bypass our keys entirely.
  • Enterprise customers can deploy on-prem with no outbound calls.

What we don't do

  • We don't train models on your code (see above).
  • We don't sell, share, or trade your personal data.
  • We don't use advertising networks or tracking cookies.
  • We don't create user profiles for targeted advertising.

Your rights (GDPR / CCPA)

You can request export or deletion of your data at any time:

  • Export: /account/export (when logged in) or email [email protected].
  • Delete: /account/delete (when logged in) or email [email protected]. We delete personal data within 30 days; backup retention follows our documented schedule (max 90 days).
  • Object / restrict / correct: email [email protected].

Data security

TLS 1.3 in transit; AES-256 at rest; field-level encryption for API keys. Full detail on our Security page.

Subprocessors

We use a small set of subprocessors (AI inference vendors, payment processor, hosting, monitoring). The current list is published on our Security page and we notify paid customers in advance of any change.

Contact

Privacy questions: [email protected]. Security reports: [email protected]. Other: Contact us.