Privacy policy

Who we are

Evensys.ai ("we", "us") provides a hosted bundle of LiteLLM, n8n, and Open WebUI for individuals and teams. We act as data controller for account and billing data, and as data processor for the content you put inside your workspace.

Data we collect

• Account data: name, email, profile image, and identity verification metadata, provided through our authentication partner.
• Billing data: plan, billing address, last 4 digits of your card, and invoice history. Card numbers and CVC are handled by Stripe and never touch our servers.
• Operational data: workspace name, region, status, and provisioning logs.
• Workspace content: anything you store inside your LiteLLM, n8n, or Open WebUI instances. We do not read it. It is encrypted at rest and isolated per workspace.
• Contact form submissions: when you use our contact form, we store the name, email address, and message you provide, along with the IP address of the request, so we can respond and prevent abuse.

Why we use it

• To create and operate your workspace.
• To bill you and prevent payment fraud.
• To send transactional email (receipts, security alerts, service notices).
• To monitor service health and improve reliability.
• To comply with legal obligations.

We do not sell your personal data. We do not use it to train AI models.

Sub-processors

We rely on a small set of vetted vendors. Each is bound by a data processing agreement.

This list can change as our infrastructure evolves. We notify account holders in advance only when a change affects how your personal data is handled or the region in which it is stored. Operational changes that do not touch personal data or its location are made without individual notice.

Vendor	Purpose	Region
Cloudflare	Marketing site, dashboard, API, edge storage, CDN, and bot/spam protection (Turnstile)	Global
OVHcloud	Workspace compute, Postgres, and object storage	EU (Roubaix) / Canada (Beauharnois)
Clerk	Authentication and user management	US
Stripe	Payments and billing	EU / US
Mailjet	Transactional email (contact-form notifications, workspace and billing notices)	EU

Retention

Account and billing data are kept for as long as your account is active, plus the period required by tax law (typically 7 years). When you cancel, your workspace stops and its data (databases and stored files) is held for 30 days, then permanently deleted; during that window you can ask us to recover it. Backups, where included in your plan, are retained for 7 days (Pro) or 15 days (Max) and then rotated out; the Plus plan does not include backups. Contact-form submissions are retained while we handle your enquiry and are removed once it is resolved.

Your rights

Under GDPR and similar regimes, you can request access to, correction of, or deletion of your personal data, and you can request an export of your workspace content. To exercise these rights, email privacy@evensys.ai and we will respond within 30 days.

Spam protection (Cloudflare Turnstile)

Our contact form is protected by Cloudflare Turnstile, which runs an invisible check to confirm a submission comes from a person rather than a bot — without showing you a puzzle or CAPTCHA. To do this, Turnstile may process information such as your IP address, basic device and browser signals, and a challenge token. We use this only to prevent abuse of the form. Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Policy.

Cookies and local storage

Your theme preference (light or dark) is stored in your browser's local storage, not in a cookie. Our authentication provider sets a short-lived session cookie when you sign in to the dashboard. Cloudflare Turnstile may set a temporary token on the contact page to run its spam check. We do not use advertising cookies or third-party trackers.

Changes

If we materially change this policy, we will email account holders and update the date at the top of this page.