Privacy Policy
Last updated: August 10, 2026
Service operator and contact
Evidlume is an independently operated software service. For privacy, account, billing, export, correction, or deletion requests, contact support@evidlume.com. Identity and verification information required by payment and payout providers is submitted privately and is not published on this website.
Information we process
We process account identifiers, organization membership, brand and competitor information, buyer personas, prompts, audit settings, generated model responses, parsed report results, usage history, billing references, and operational logs needed to provide and protect the service.
How we use information
We use this information to authenticate users, run and display audits, preserve report evidence, enforce plan limits, process subscriptions, diagnose failures, prevent abuse, respond to support requests, and improve product workflows. We do not sell customer audit data.
AI providers and generated content
Audit prompts and related brand context are sent to the AI provider or gateway selected by the application configuration. Provider processing and retention are governed by the applicable provider terms. Generated responses may be inaccurate and can change over time. Do not submit secrets, regulated data, or sensitive personal information.
Infrastructure, billing, and subprocessors
Supabase provides authentication and application-data hosting. Creem processes checkout, subscriptions, payments, taxes, and invoices as merchant of record. A background worker processes audits, while configured AI providers generate responses. Sentry may receive application error and performance diagnostics. These providers may process data in countries other than your own under their respective service terms.
Analytics, local storage, and session replay
With your analytics choice, PostHog may collect page views, product interactions, acquisition information, device and browser details, and session replay data so we can understand usage and diagnose usability problems. Evidlume also uses browser storage for authentication, preferences, attribution, and your analytics choice. See the Cookie and Analytics Notice for details and controls.
Security and access controls
Customer-facing records are protected by authenticated sessions, workspace membership checks, and database row-level security. Sensitive provider and administrative credentials are kept in server environments. No internet service can guarantee absolute security; please report suspected vulnerabilities through the published support address.
Retention and deletion
We retain account, audit, billing, and operational records for as long as needed to provide the service, meet legal and accounting obligations, prevent abuse, and resolve disputes. Retention may also depend on third-party provider settings. Self-service account deletion is not yet available; contact support to request export, correction, or deletion. Some billing or security records may need to be retained after an account request.
Children
Evidlume is a business service and is not directed to children. Do not create an account or submit personal information if you are not legally able to agree to the service terms in your jurisdiction.
Changes to this policy
We may update this policy as the product, providers, or legal requirements change. Material changes will be reflected by the date below and, when appropriate, communicated through the service.