Privacy Policy

1. Information we collect

• Account information. Your email address and authentication details when you create an account or sign in (including via OAuth).
• Billing information. Subscription status and payment metadata. Card details are processed by Dodo Payments and are not stored by Exova.
• Prompts and generations. The instructions you provide and the outputs generated, to operate the Service, meter usage, and support you.
• Usage and diagnostic data. Token counts, feature usage, device and version information, and error reports used to operate, secure, and improve the Service.

2. How we use information

• To provide, maintain, and improve the Service.
• To meter token usage and enforce plan limits.
• To process payments and manage subscriptions.
• To communicate with you about your account and updates.
• To detect, prevent, and address abuse, fraud, and security issues.
• To comply with legal obligations.

3. Model providers and your prompts

To generate output, we send your prompts and relevant context to a large-language-model provider through our managed gateway. Those providers process your content under their own terms. We do not sell your prompts or generations, and we do not use your private project content to train our own models.

4. How we share information

We share information only with subprocessors that help us run the Service (see Subprocessors), when required by law, to protect rights and safety, or in connection with a corporate transaction. We do not sell your personal information.

5. Data retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated personal data as described below.

6. Security

We use administrative, technical, and organizational measures to protect your information, including encryption in transit and encryption at rest for sensitive data such as account credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email privacy@tryexova.com.

8. International transfers

We and our subprocessors may process information in countries other than your own. Where required, we use appropriate safeguards for such transfers.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date above, and provide additional notice for material changes.

11. Contact

Questions about privacy? Email privacy@tryexova.com.