Privacy Policy

Last Updated: March 19th, 2025

At Evav, we take your privacy seriously. This Privacy Policy explains how Evav ("we," "us," or "Evav"), accessible at https://evav.org, collects, uses, shares, and protects your information when you use our website, services, and related offerings (collectively, the "Services"). We aim to be transparent about our practices and empower you with control over your data.

What Information We Collect

We collect various types of information to provide, maintain, and improve our Services:

  • Information You Provide Directly
    • Account Information: When you sign up for Evav, we collect your name, email address, and any other details you provide during registration or profile setup.
    • User Content: With your permission, we access your Gmail account to identify and extract receipt data from emails. This includes transaction details such as merchant names, item descriptions, dates, and amounts, but excludes any non-receipt email content.
    • Communications: If you contact us (e.g., via support requests), we collect the content of your messages and associated metadata (e.g., timestamps).
  • Information We Collect Automatically
    • Email Receipt Data: Using automated tools, we scan your Gmail emails for receipts based on specific criteria (e.g., keywords like "receipt" or sender domains). We process only receipt-related emails and adhere to Google's privacy policies.
    • Usage Data: We collect data about your interactions with our Services, including IP addresses, browser type, device identifiers, operating system, timestamps, and pages visited.
    • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track usage patterns, authenticate users, and enhance functionality.
  • Information from Third Parties
    • Authentication Data: When you connect your Gmail account via Google OAuth, we receive authentication tokens and basic profile information (e.g., email address) from Google, subject to their terms.

How We Use Your Information

We use your information to deliver and enhance our Services, including:

  • Receipt Extraction: We analyze your Gmail data to identify receipts, extracting details like items purchased and transaction amounts.
  • Service Delivery: We use account and usage data to authenticate you, personalize your experience, and ensure the Services function as intended.
  • Improvement and Analytics: We analyze usage patterns to optimize performance, develop new features, and troubleshoot issues.
  • Communication: We may send you updates, receipts-related notifications, or responses to your inquiries.
  • Legal Compliance: We use your information to comply with applicable laws and regulations.

How We Share Your Information

We share your information in the following limited circumstances:

  • With Service Providers
    • We share data with third-party vendors (e.g., Amazon Web Services for hosting) who assist with storage, processing, and analytics. These providers are contractually obligated to protect your information.
  • For Legal Reasons
    • We may disclose information if required by law, legal process, or to protect our rights, safety, or property, or that of our users.
  • Business Transfers
    • In the event of a merger, acquisition, or sale of assets, your information may be transferred, subject to confidentiality protections.

We do not sell your personal information to advertisers or third parties for marketing purposes.

Your Choices

You have several options to manage your information:

  • Account Settings: Update your profile or preferences via your Evav account.
  • Gmail Access: Revoke our access to your Gmail data at any time through your Google account settings.
  • Cookies: Disable or manage cookies via your browser settings.
  • Communication Preferences: Unsubscribe from non-essential emails using the link in our messages.

Data Retention

We retain your information only as long as necessary for the purposes outlined herein:

  • Account and usage data are retained while your account is active and for a reasonable period thereafter, unless you request deletion.

Security

We implement technical, physical, and organizational measures to safeguard your information against unauthorized access or loss. Data is stored on secure AWS servers with restricted access. However, no system is fully secure, and we cannot guarantee absolute protection.

International Transfers

Your data may be transferred to and processed in countries outside your residence (e.g., the United States), where data protection laws may differ. We ensure compliance with applicable regulations through contractual safeguards.

Children's Privacy

Our Services are not intended for individuals under 13. We do not knowingly collect data from children under 13, and we will delete such data if identified.

Compliance with Google's Policies

Our access to your Gmail data is authorized via Google OAuth and complies fully with Google's privacy policies and terms. We limit our collection to receipt-related emails and respect your privacy as per Google’s standards.

Updates to This Privacy Policy

We may revise this Privacy Policy to reflect changes in our practices or legal obligations. Significant updates will be posted here with an updated "Last Updated" date. Continued use of our Services constitutes acceptance of the revised terms.

Contact Us

For questions or concerns about this Privacy Policy, contact us at:
[email protected]