EveAI Privacy Policy

Draft prepared for review by a Lebanese lawyer. This text is not legal advice and is not yet final. Words in [SQUARE BRACKETS] are still to be filled in or confirmed.

Version: 2026-10-21

This policy explains what personal data EveAI collects when you use eveai.cloud, the EveAI Academy, the EveAI Apps and Ask Eve, why, who processes it, how long we keep it, and the rights you have. It is written to meet Lebanese Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data and, for people in the European Union and similar places, the EU General Data Protection Regulation (GDPR).

The short version. We collect what we need to run your account and the tools you use. What you put into the Apps stays private to your account until you delete it. We do not use it to train AI models and we do not sell it. AI providers process it for us only to give you your result. There are no advertising trackers on eveai.cloud.

1. Who is responsible for your data

1.1. The controller (in Law 81/2018, the "personal data processing officer") is [COMPANY LEGAL NAME, or "Aref Hammadi, trading as EveAI"], [BUSINESS ADDRESS, BEIRUT, LEBANON], Commercial Registry no. [REGISTRATION NO.].

1.2. Contact for anything about your data: [PRIVACY EMAIL] or WhatsApp +961 78 996 408.

1.3. [EU REPRESENTATIVE, IF APPOINTED: NAME AND ADDRESS.]

2. What we collect, and why

You can use the Playground and the in-browser tools (the Converter and the video cost calculator) without giving us anything: they run on your device and send nothing to EveAI.

2.1. Please do not upload information about anyone's health, genetic data or sex life, official documents, or other people's private details, unless it is truly needed for what you are doing and you have the right to share it.

2.2. People in your photos. If you upload a photo, video or voice of another person, you must have their permission (see the Terms, section 12). We use it only to carry out your request. We do not run facial recognition, and we do not try to identify anyone.

2.3. If you do not give us the account details marked as required, we cannot create an account. Everything else is optional; leaving it out only means the related feature will not work.

3. AI processing

3.1. When you use an app that runs on eveai.cloud, what you give it (your words, files and photos) is sent to EveAI's server and then to one of the AI providers in section 5, which returns the result. The provider processes it on our instructions only to produce the result.

3.2. No training. EveAI does not use your inputs or outputs to train AI models. We use the providers' business (paid) services, whose published terms say they do not use our customers' content to train their models. [FOUNDER TO CONFIRM FOR EVERY MODEL USED THROUGH ATLAS CLOUD.]

3.3. Provider safety logs. Providers may keep inputs and outputs for a limited period, only to detect and prevent abuse of their services (for example, up to 30 days for OpenAI's API). After that they delete them, unless the law requires otherwise.

3.4. Web search. Check It and Newsroom search the web through the AI provider's search tool. Your claim or question is used as the search request.

3.5. No automated decisions about you that have legal or similarly significant effects. Allowances and safety checks are applied automatically (for example, a request may be declined); you can ask a person to review any such decision.

4. Where your data is stored

4.1. Your account, learning records, app history and private library are stored in a database and file storage operated for us by Supabase, in [SUPABASE REGION]. The website runs on a server rented from Hostinger in [SERVER LOCATION].

4.2. Your private library is stored in a private storage area, one folder per member, that only your account can reach.

4.3. Some tools store things only on your device (see section 8).

5. Who receives your data

We do not sell your personal data. We share it only with:

5.1. Service providers (processors) who work for us under contract:

We keep this list up to date and tell you about a new AI provider before it receives your data [by updating this list at least 14 days in advance].

5.2. Services you choose to use, under their own privacy policies: WhatsApp (Meta) when you message us, payment services such as Whish Money or OMT when you pay, and social platforms when you post or share from an app.

5.3. Partners for made-to-order products, such as HMC for Deskbot, only as agreed in your order.

5.4. Authorities, when the law requires it, or to protect someone's safety. We report child sexual abuse material to the competent authorities.

5.5. A buyer of EveAI, if the business is transferred, under this policy.

6. Transfers outside Lebanon and the EU

6.1. Some providers above process data outside Lebanon and outside the European Union. Where your data leaves the EU, we rely on the safeguards the GDPR provides, such as the European Commission's standard contractual clauses or an adequacy decision, as offered in each provider's data processing terms. [TO CONFIRM PER PROVIDER.] You can ask us for a copy of the safeguard that applies.

7. How long we keep it

When you delete something in an app, it is removed from your account at once.

8. Cookies and storage on your device

8.1. We do not use advertising cookies or third-party analytics (such as Google Analytics).

8.2. We use:

• Sign-in cookies, which keep you signed in. They are strictly necessary.
• Local storage in your browser, for your preferences (such as light or night mode, and which kind of user you said you are on the Apps page) and for drafts.
• Offline storage (IndexedDB and a service worker), if you choose "Keep for offline", to store lessons and answers waiting to be sent. The service worker never stores your signed-in pages or your data from our servers.
• Device-only tools. The Converter and Shotlist's free preview keep your files on your device. The Converter may download engines from eveai.cloud to work in your browser.

8.3. You can clear these at any time in your browser settings. If you do, you may need to sign in again and set your preferences again.

9. Security

9.1. We protect your data with measures suited to the risks, including:

• encrypted connections (HTTPS);
• database rules that let each account reach only its own rows and files;
• passwords stored only as secure hashes;
• AI provider keys kept in an encrypted vault, never in the website's code;
• email sign-in links and optional two-step sign-in, for members and staff;
• an audit log of staff actions; and
• spending limits on AI use [and hard limits at each AI provider, once set].

9.2. No system is perfectly secure. If a breach is likely to put you at risk, we will tell you without undue delay, explain what happened and what you can do, and inform the authorities where the law requires.

10. Your rights

10.1. Under Lebanese law (Law 81/2018) you have the right to:

• be told whether we process your data and receive a copy of it in a form you can understand;
• know the purposes, the source, and who receives it;
• have data that is wrong, incomplete, unclear, out of date or no longer needed corrected, completed, updated or erased (we do this free of charge within 10 days);
• object, for legitimate reasons, to our processing, and object at any time to marketing; and
• review and object to the information used in any automated processing about you.

Your heirs have these rights too.

10.2. If the GDPR applies to you, you also have the right to:

• access;
• correction;
• erasure;
• restriction;
• data portability;
• object;
• withdraw consent at any time, without affecting what was done before; and
• complain to your data protection authority.

10.3. How to use your rights.

• Delete items yourself inside each app.
• To get a copy of everything we hold about you, correct something or close your account, write to [PRIVACY EMAIL] or WhatsApp +961 78 996 408.
• We may ask you to confirm your identity first.
• Copies are free.
• We answer within 10 days. If a request is complex, we tell you within that time when you will have the full answer.

10.4. If you are not satisfied, you can go to the competent Lebanese courts, in particular the judge of urgent matters, or, in the EU, to your data protection authority.

11. Emails and messages

11.1. We send emails about your account, your purchases, and your Pass (for example a reminder before it ends). These are part of the service.

11.2. We send news or offers only if you agreed, or if you are already a customer and the offer is similar to what you bought. Every such email has a free way to stop them.

12. Children

12.1. EveAI is not for children under 16, and we do not knowingly collect their data. People aged 16 or 17 may use the free parts of the Academy with a parent's or guardian's agreement. The Apps and Ask Eve are for adults (18 and over).

12.2. If we learn that a child under 16 has an account, we close it and delete its data.

12.3. Photos and videos of children may not be uploaded for editing.

13. Changes to this policy

13.1. If we change this policy in a way that matters, we tell you at least 30 days in advance, by email or a notice in your account, and ask you to accept the new version before your next use of the Apps. Every version has a date and stays available.

14. Contact

[PRIVACY EMAIL] or WhatsApp +961 78 996 408. A person answers.