Privacy Policy

Last updated: January 1, 2026

1. Introduction

AutEvo AI ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and website. Please read this policy carefully.

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email, phone number, company name, industry
  • Business data: Customer records, job details, invoices, quotes, files, photos you upload
  • Payment information: Billing address and payment card details (processed by Stripe — we do not store card numbers)
  • Communications: Support messages, emails, feedback you send us

2.2 Information Collected Automatically

  • Usage data: Pages visited, features used, time on platform, clicks
  • Device information: Browser type, operating system, IP address, device identifiers
  • Cookies: Login sessions, preferences, analytics (see Section 7)

2.3 AI Features

When you use AI-powered features (Voice Receptionist, Photo→Quote, Document AI), we process the data you submit (photos, documents, voice recordings) solely to generate results. Voice recordings are transcribed and stored with your account data. You may delete them at any time.

3. How We Use Your Information

  • Provide, operate, and maintain the Service
  • Process transactions and send billing notifications
  • Send service-related communications (updates, security alerts, support)
  • Improve the platform based on usage patterns (aggregate, anonymized data)
  • Respond to your requests and support inquiries
  • Comply with legal obligations

We do NOT:

  • Sell your personal information to third parties
  • Use your business data for advertising
  • Share your data with other tenants/customers
  • Train AI models on your proprietary data without explicit consent

4. Data Sharing

We share data only in these limited circumstances:

  • Service providers: Stripe (payments), Twilio (SMS/voice), Google (calendar/email), Amazon Web Services (hosting) — only as needed to operate the Service
  • Legal requirements: When required by law, subpoena, or court order
  • Business transfers: In connection with a merger, acquisition, or sale of assets (your data remains protected under this policy)
  • With your consent: Any other sharing requires your explicit permission

5. Data Security

We implement industry-standard security measures:

  • AES-256 encryption for data at rest
  • TLS 1.2+ encryption for data in transit (HTTPS everywhere)
  • Isolated tenant databases — your data is never commingled with other customers
  • Regular security audits and penetration testing
  • Two-factor authentication support
  • Role-based access controls

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

  • Active accounts: Data retained for the duration of your subscription
  • Cancelled accounts: Data retained for 90 days, then permanently deleted
  • Backups: Encrypted backups may retain data for up to 30 additional days after deletion
  • Legal obligations: Some data may be retained longer if required by law (e.g., billing records)

7. Cookies

We use cookies for:

  • Essential cookies: Login sessions, CSRF protection (required for the Service to work)
  • Analytics cookies: Understanding how the Service is used (can be disabled)

We do not use advertising or tracking cookies. You can control cookies through your browser settings.

8. Your Rights

You have the right to:

  • Access your personal data (export available in Settings)
  • Correct inaccurate information
  • Delete your account and data
  • Port your data (CSV export)
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact us at privacy@AutEvo AI.com.

9. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly.

10. International Transfers

Your data is processed and stored in the United States. If you are accessing the Service from outside the US, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers.

11. California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what data we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. Contact us at privacy@AutEvo AI.com to exercise your CCPA rights.

12. European Residents (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR. Our Data Processing Agreement (DPA) outlines our obligations. See our DPA for details.

13. Changes to This Policy

We may update this policy. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

14. Contact

Questions? Contact our privacy team at privacy@AutEvo AI.com.