Privacy Policy

This Privacy Policy applies to information collected through the Service, including information you provide when creating or administering an account, configuring an AI agent or widget, adding agent knowledge, managing billing, using the documentation, and interacting with support.

Business customers configure AI agents for their websites and choose what knowledge to provide. Website visitors may submit messages and optional identifying details through the embedded widget. Eversolve processes those interactions to provide the Service to the business customer.

If you are a website visitor who interacted with an Eversolve widget, the business operating that widget is responsible for its own privacy practices concerning the information you share. Contact that business about its handling of your information.

Account and profile information. When you register for or use the Service, we collect information such as your email address, display name, authentication credentials, account preferences, optional multi-factor authentication enrollment, and account activity metadata necessary to operate the Service.

Business information. We collect information you provide about your business, including business name, website, description, timezone, country, branding assets such as logos, agent knowledge, and widget and domain configuration data.

Visitor conversations. When visitors interact with a widget you configure, we process their messages and any identifying details they provide, such as a name or email address. We also process technical metadata such as source page URL, referrer, campaign parameters where present, and limited security metadata used for abuse prevention.

Billing information. If you subscribe to a paid plan, we collect subscription status, plan tier, billing interval, and identifiers necessary to reconcile payments. Payment card data is collected and processed by a third-party payment processor; Eversolve does not store full payment card numbers or card security codes.

Referral and promotional attribution. Where referral links are used, we may store referral codes and related attribution data in first-party cookies or comparable browser mechanisms to associate sign-ups with referral programs you participate in.

Security and operational data. We process limited technical information necessary to secure and operate the Service, including authentication events, rate-limiting fingerprints derived from request metadata, bot-mitigation signals, audit events, delivery logs for transactional communications, and similar operational records. We do not use this information for cross-site advertising or unrelated profiling.

Documentation feedback. If you rate a guide or a selected passage, we store its page path, an optional passage identifier and excerpt, your rating, any comment you choose to provide, and the submission time. We use a short-lived derived network fingerprint to enforce submission limits; the feedback record does not contain your raw IP address.

Analytics data. We collect aggregated activity for widget views, widget opens, and AI conversations within applicable plan limits. Analytics may include country-level location derived from network request data. We do not store raw IP addresses in analytics rollups.

We use information to provide, maintain, secure, and improve the Service; authenticate users; deliver transactional communications such as verification codes, password resets, security notices, and billing-related messages; process subscriptions; enforce our Terms of Service; detect and prevent fraud, abuse, and unauthorized access; provide customer support; and comply with applicable law.

We use visitor messages and agent knowledge to generate and deliver AI replies, display conversations to the business customer, and operate the agent and widget according to the customer’s configuration.

We do not sell personal information. We do not use personal information for cross-context behavioral advertising, and we do not permit third parties to use information obtained through the Service for their own independent marketing purposes.

To generate AI replies, we send relevant visitor messages and agent knowledge to an AI provider. We do not use documentation feedback as training material for Eversolve’s AI agent.

Where applicable law requires a legal basis for processing, we rely on one or more of the following, as appropriate: performance of a contract with you; compliance with legal obligations; protection of vital interests; legitimate interests in operating, securing, and improving the Service, provided those interests are not overridden by your rights; and consent where consent is required and has been obtained.

You may withdraw consent where processing is based on consent, subject to contractual and legal limitations, by adjusting applicable settings or contacting us at support@eversolve.io.

We disclose information to third-party infrastructure, hosting, database, authentication, AI, payment, email delivery, security, abuse-prevention, geocoding, domain-verification, caching, rate-limiting, and other operational service providers that process information on our behalf under contractual confidentiality and security obligations appropriate to the nature of the services they provide.

We do not publicly disclose the identity of specific service providers in this Policy. Service providers are authorized to use information only as necessary to perform services for Eversolve.

We may disclose information when required by law, legal process, or governmental request; to protect the rights, property, or safety of Eversolve, our users, or others; to enforce our agreements; or in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to customary confidentiality restrictions.

AI providers receive relevant visitor messages and agent knowledge to generate replies. The business customer can view conversations with its own website visitors through the dashboard.

Eversolve stores and processes production Service data in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have data-protection laws that differ from those in your jurisdiction.

We retain account and business information for as long as your account remains active and as necessary to provide the Service.

Documentation feedback is deleted from active systems after ninety (90) days. The feedback cleanup runs on the existing scheduled cleanup job. Daily documentation rate-limit counters expire after approximately forty-eight (48) hours.

Visitor conversations and related activity data are retained according to the customer’s agent retention settings and applicable deletion processes. Production AI agent availability depends on configured retention policies.

On Free, analytics data are retained for approximately seven (7) days. On Lite, analytics data are retained for approximately ninety (90) days. On Pro, analytics data are retained for approximately three hundred sixty-five (365) days.

If you downgrade from a paid plan, analytics outside the new plan’s visible retention window is hidden immediately. Paid analytics and certain paid-only data or excess resources may remain recoverable for approximately thirty (30) days before deletion in accordance with plan rules.

If you request account deletion, a seven (7) day grace period applies during which you may cancel the deletion request. After the grace period expires, account data is permanently deleted from active systems in accordance with our deletion procedures.

Certain operational, security, billing, and compliance records may be retained for longer periods where required or permitted by law, including tax, accounting, fraud-prevention, dispute-resolution, and enforcement purposes.

Provider webhook records for transactional email delivery are retained for approximately thirty (30) days. Separate application-level transactional email delivery logs—including recipient, subject, redacted message content, delivery status, and provider response—are retained indefinitely for security and delivery troubleshooting, including after account deletion. Those logs do not retain one-time passwords or reset links in readable form.

Residual copies of deleted information may persist in encrypted backups for a limited period before those backups expire in accordance with our backup providers' retention schedules.

Eversolve implements administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction. These measures include, without limitation, encryption of data in transit using industry-standard transport layer security, encryption of stored data at rest where supported by underlying infrastructure, server-side authorization controls, tenant isolation mechanisms, optional time-based one-time password multi-factor authentication with backup codes, rate limiting, bot mitigation, and audit logging for certain security-sensitive events.

No method of transmission or storage is completely secure. Accordingly, Eversolve cannot guarantee absolute security.

Access to production systems is restricted to personnel and contractors with a legitimate operational need. Administrative access to customer-identifying information is subject to additional controls, including multi-factor authentication and activity logging, where applicable.

Uploaded business logos are stored for display in connection with your widgets and may be accessible at public URLs generated for that purpose.

You are responsible for maintaining the confidentiality of your account credentials and for all activity occurring under your account.

The Service uses cookies, local storage, and comparable technologies as described in our Cookie Policy. We do not use third-party advertising cookies or cross-site tracking pixels for behavioral advertising through the Service.

Depending on your location, you may have rights to access, correct, delete, or obtain a portable copy of certain personal information, to restrict or object to certain processing, and to lodge a complaint with a supervisory authority.

You may update certain account and business information directly in Settings. You may download a portable copy of your account data through the account data export feature in Settings, subject to authentication and security requirements. You may request account deletion through Settings, subject to the grace period described above.

To exercise rights not available through self-service features, contact support@eversolve.io. We may need to verify your identity before responding to certain requests.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended, including the right to know categories of personal information collected, the right to delete personal information subject to exceptions, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information.

Eversolve does not sell or share personal information for cross-context behavioral advertising as those terms are defined under applicable California law.

To submit a request, email support@eversolve.io. We will not discriminate against you for exercising privacy rights permitted by law.

The Service is not directed to children under thirteen (13) years of age, and Eversolve does not knowingly collect personal information from children under thirteen (13). If you believe a child has provided personal information to us, contact support@eversolve.io and we will take appropriate steps to delete such information where required.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Where required by law, we will provide additional notice. Your continued use of the Service after the effective date of a revised Privacy Policy constitutes acceptance of the revised policy to the extent permitted by law.

For privacy-related questions or requests, contact support@eversolve.io.