Privacy Policy

1. Who We Are

EvoShort (“we”, “our”, “us”) operates the website https://www.evoshort.ai and any associated services. We are the data controller for the personal data described in this policy.

For privacy-related questions, contact us at: privacy@evoshort.ai

2. What Data We Collect

When you join our waitlist, we collect:

• Email address — to notify you when EvoShort launches and to send product updates you have consented to receive.
• Consent record — a record that you agreed to receive communications, including the date and time.
• UTM parameters — anonymous marketing attribution data (e.g. utm_source, utm_medium) if present in the URL you visited.
• Hashed IP address — a one-way SHA-256 hash of your IP address, used solely for rate limiting and abuse prevention. Your raw IP address is never stored.

We do not collect names, payment information, or any special category data at this stage.

3. How We Use Your Data

• Sending you the waitlist confirmation email.
• Notifying you when EvoShort early access becomes available.
• Sending product updates and launch announcements (consent-based).
• Preventing abuse of our waitlist submission endpoint (rate limiting via hashed IP).
• Aggregate, anonymous analytics on how users find our site (UTM data).

Legal basis (GDPR): Processing is based on your explicit consent (Article 6(1)(a) GDPR), given when you tick the consent checkbox and submit the form.

4. Data Sharing and Third Parties

We share your data only with the following service providers, each bound by data processing agreements:

• Neon (database) — stores waitlist email addresses on servers in the EU/US.
• Upstash (rate limiting) — receives hashed IP addresses only; never raw email addresses.
• Resend (email delivery) — used to send confirmation and notification emails.
• Vercel (hosting) — hosts the website and processes server-side requests.

We do not sell your personal data to any third party.

5. Data Retention

We retain your email address on the waitlist until you request deletion, or until 12 months after the product launch date, whichever comes first. You may request deletion at any time by emailing privacy@evoshort.ai.

6. Your Rights (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — request that we limit processing of your data.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint — with your national data protection authority.

To exercise any of these rights, email privacy@evoshort.ai. We will respond within 30 days.

7. Cookies and Analytics

We use Vercel Analytics to collect anonymous, aggregate page view and performance data. No personally identifiable information is collected via analytics. See our Cookie Policy for details.

8. Changes to This Policy

We may update this policy as the product evolves. We will notify waitlist members of material changes via email. The “Last updated” date at the top of this page reflects the most recent revision.