evrstacks Privacy Policy
Last updated: January 5, 2026
This Privacy Policy explains how evrstacks ("we," "us," or "our") collects, uses, and protects information when you use our AI-powered customer support platform, including the embeddable chat widget, web dashboard, and related services (the "Service"). We take privacy seriously and are committed to transparency about our data practices.
1. Who This Policy Applies To
This policy applies to businesses and individuals who create an account on evrstacks, embed our widget on their websites, or interact with the AI-powered chat assistant. If you are an end user interacting with a chat widget powered by evrstacks, the business using our Service may have their own privacy policy that also applies to you.
2. What We Collect
A. Account & Profile Data
- Name or display name
- Email address (required for login and notifications)
- Password (stored only as secure hashes)
- Subscription and billing information
B. Product & Tenant Configuration
- Product names, descriptions, and knowledge base content you provide
- Widget configuration settings and allowed domains
- Custom AI guidelines and agent personality settings
C. Chat & Support Data
- Messages exchanged through the chat widget
- Support ticket contents and AI-generated responses
- Session metadata (page URL, user agent, referrer)
D. Usage & Analytics Data
We collect limited analytics data including message counts, feature usage, and performance metrics to improve the Service and enforce usage limits.
3. How We Use Your Information
- Provide the Service (chat widget, dashboard, AI responses, support tickets).
- Process AI requests by sending prompts and context to our AI infrastructure.
- Improve the Service through analytics and feedback.
- Process payments and manage subscriptions.
- Communicate with you about your account, security, and product updates.
- Enforce our terms of service and usage limits.
We do not sell your personal information.
4. AI & Data Processing
Our Service uses AI models to generate responses to customer inquiries. When processing chat messages:
- Data is transmitted to AI providers (such as OpenRouter, which routes to various model providers) solely to generate responses.
- We do not use your chat data to train AI models.
- Each tenant's data is isolated and not shared with other tenants.
- We prioritize AI providers that support enterprise-grade privacy requirements.
5. Data Retention
We retain information while your account is active or as needed to provide the Service:
- Chat sessions expire after 24 hours by default.
- Support tickets and message history are retained while your account is active.
- You may request deletion of your data at any time by contacting us.
- After account termination, data may be retained in backups for up to 30 days.
6. Data Security
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Tenant-scoped data isolation
- Secure API key generation and storage
- Regular security audits and monitoring
7. Sharing & Disclosures
We share information only with:
- Service providers (hosting, payment processing, AI inference)
- As required by law or legal process
- To protect our rights, safety, or property
We do not sell personal data and do not allow third parties to use it for their own marketing.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent where applicable
- Object to certain processing activities
To exercise these rights, contact us at evermed@evermedresearch.org.
9. Cookies & Tracking
We use essential cookies for authentication and session management. The chat widget uses minimal session storage to maintain conversation state. We do not use third-party tracking cookies for advertising.
10. Children's Privacy
The Service is not directed to children under 13 and we do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.
11. International Data Transfers
Data may be processed in the United States or other regions where our service providers operate. We ensure appropriate safeguards are in place for international data transfers.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or prominent notice in the Service. Your continued use after changes constitutes acceptance of the updated policy.
13. Contact
Questions about this Privacy Policy? Contact us at:
evrstacks
Email: evermed@evermedresearch.org
By using evrstacks, you acknowledge that you have read and understood this Privacy Policy.