Privacy Policy

1. What we collect

When your business signs up: your business name, your name, email, and a hashed password (we never store passwords in plain text). When your customers message you through a connected channel: their name, phone number, email address, or channel-specific ID (Telegram chat ID, Instagram user ID), plus the content of messages exchanged and any AI draft replies generated for you.

2. How it's used

• To operate your inbox — routing messages, showing conversation history, scheduling reminders and campaigns you create.
• To generate AI-drafted reply suggestions, using your Business Profile and the relevant conversation as context.
• To bill your business for the service.
• To investigate abuse or policy violations if reported.

3. Who else sees it

We share data with the providers that make each channel and feature work, only as needed to deliver that feature:

• OpenAI or Anthropic — conversation content, to generate AI draft replies.
• Resend — email content, to send and receive your Email channel messages.
• Gupshup (as our WhatsApp Business Solution Provider) and Meta — message content, for your WhatsApp and Instagram channels.
• Twilio — contact phone numbers and reminder message text, to place your scheduled Voice reminder calls.
• Neon — our database host, where all of the above is stored.

We do not sell customer data, and we do not use your customers' data to train our own models.

4. Security

Channel credentials you connect (bot tokens, API keys) are encrypted at rest (AES-256-GCM) — a database-level breach alone does not expose your live third-party credentials. Passwords are hashed, never stored in plain text. Each business's data is isolated by organization at the database level.

5. Retention

We retain conversation and contact data for as long as your account is active. If you close your account, we will delete your organization's data within a reasonable period, except where we're required to keep records for legal or billing reasons.

6. Your customers' rights

If one of your customers wants their data removed from Evernaro, that request should go through you (the business they messaged) — you can delete a contact and their conversation history from your dashboard, or contact us for help.

7. Changes

We'll update the date at the top of this page when this policy changes and notify active accounts of material changes.

8. Contact

Questions or data requests: email us at hello@evernaro.com.