Privacy Policy

1. Who we are

evex is an AI-powered scheduling assistant that operates over WhatsApp. You message evex with an event — as text, an image, or a voice note — and evex creates the corresponding event in your Google Calendar. This policy applies to that service and to this website.

2. Information we collect

We collect only what we need to provide the service:

• Your WhatsApp phone number. This is your account identifier. It lets us recognize you across messages and match you to your connected calendar.
• Message content you send to evex. The text you type, the images you send (e.g. an event flyer or invitation), and voice notes you record. We process this content to understand and extract event details such as the title, date, time, and location.
• Google account and Google Calendar access. When you connect your calendar, Google provides us with OAuth authorization tokens (an access token and a refresh token) and basic profile information (such as your email address). We use these tokens to create and manage events on your behalf.
• Event and activity records. We keep a log of events evex has created for you (for example, the event title, time, and status) so we can show your history, provide support, and improve reliability.
• Settings. Preferences such as your timezone and display name.

We do not collect payment card details through evex, and we do not knowingly collect data from anyone under the age of 16.

3. Google user data & Google API Services User Data Policy

To create events for you, evex requests permission to manage events on your Google Calendar. We request the narrowest access that makes the service work — the ability to create and manage calendar events — and nothing more.

evex’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google user data only to provide and improve the calendar scheduling features you request.
• We do not transfer or sell Google user data to third parties for advertising, marketing, or any unrelated purpose.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read your Google data unless we have your explicit consent for a specific purpose (for example, to resolve a support issue you raised), it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.
• Our use of Google data received via these scopes is limited to the practices described in this policy.

You can review and revoke evex’s access to your Google account at any time from your Google Account permissions page.

4. How we use your information

• To read your messages and extract event details.
• To create, update, and confirm events in your Google Calendar.
• To send you confirmations and replies over WhatsApp and, if you use it, our web chat.
• To operate, maintain, secure, and improve the reliability of the service.
• To provide customer support and respond to your requests.

5. How your data is processed

evex is built on a small set of trusted service providers (“sub-processors”) that process data on our behalf and under our instructions:

• WhatsApp Business Platform (Meta). Delivers messages between you and evex.
• Make.com. Orchestrates our automation workflow — receiving your message, coordinating processing, and creating the calendar event.
• Airtable. Stores your account record (phone number, status, timezone, tokens) and your event history.
• Google (Calendar & OAuth). Authenticates you and stores the events evex creates.
• AI processing (Google Gemini). We use Google’s Gemini API to interpret your messages, transcribe voice notes, and read images so we can extract event details — see the next section for exactly what is and isn’t shared with the AI service.

6. AI processing

Event extraction is performed by an AI model — the Google Gemini API, which we use on its paid tier. When you send evex a message, the content you authored (your text, an image you sent, or the transcript of your voice note) is processed by the model to identify event details such as the title, date, time, and location. Specifically:

• Only the message content you author is processed by the AI model.
• Data retrieved from Google Calendar or any other Google API is never sent to the AI service. Your existing events, calendar details, and Google account information are not shared with the model.
• Under the Gemini API’s paid-tier terms, the content we submit is not used to train or improve AI models.

7. Data retention

We retain your account information and event logs for as long as your account is active, so the service remains useful to you. Message content is retained only as long as needed to process your request and maintain a usable history. When you ask us to delete your data, or after a prolonged period of inactivity, we delete or anonymize your personal information, including your stored Google tokens, within a reasonable period unless we are required to retain it to comply with legal obligations.

8. How we protect your data

• OAuth tokens and other sensitive fields are stored server-side and are never exposed to your browser or to other users.
• Access to production data is limited to the people who operate the service.
• Data is transmitted over encrypted connections (HTTPS/TLS) between services.

No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

9. Sharing your information

We do not sell your personal information. We share data only with the sub-processors listed above to operate the service, or where required by law, legal process, or to protect the rights, safety, and security of our users and the service.

10. Your rights and choices

• Access & correction. You can ask what data we hold about you and request corrections.
• Deletion. You can ask us to delete your account and associated data at any time by messaging evex or emailing hello@evex.chat.
• Revoke calendar access. You can disconnect Google Calendar from your evex dashboard or from your Google Account permissions page at any time.
• Stop using evex. You can stop messaging evex at any time; you may also request that we remove your number.

11. International users

Your information may be processed on servers located in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in line with this policy.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

13. Contact us

Questions, requests, or concerns about your privacy? Email us at hello@evex.chat.