Privacy notice.

Who we are

Evrant is operated by Evrant Technologies Limited. We are the controller of the personal data described here.

For anything about your data, email [email protected].

What we collect

When you visit this website, our web server keeps standard access logs, including your IP address, for security. When signups are open, you create an account and verify your email here, then continue to the app with your selected plan to pay through Stripe. If you accept optional analytics, PostHog records page paths, selected button clicks, time spent on pages, successful waitlist joins, signup steps and accepted email verification links, together with random browser, session and tab identifiers. We do not send your email, payment details or URL query strings to PostHog.

When you join the waitlist, we store your email address, the signup page and time, and whether you have been invited. We use these details to manage your early-access request and send your invitation. Joining the waitlist does not create an account or reserve founder access. You can request removal at [email protected].

When you create an account, we store your name, email address and password (only as a secure hash, never in readable form), the plan you chose, whether you have founder pricing, and your two-factor authentication settings if you turn it on.

When you pay, Stripe processes your payment and collects payment details, billing address and tax information. We never see or store your full card number. We receive the customer and payment identifiers, billing details, and payment and subscription status needed to provide your purchased access.

When you use Evrant, we store the strategies, research records and results you create so the product can work. The terms you accept when you get access describe this in more detail.

Why we use it and our lawful basis

We do not send marketing newsletters unless you ask for them, and we never sell your data.

Who we share it with

We use a small number of service providers who process data only on our instructions, under contracts that require them to protect it:

• Stripe processes founder payments and recurring subscriptions and provides payment and invoice management (see Stripe's privacy notice).
• Resend sends our emails, so it processes your email address and the messages we send you.
• PostHog provides our product analytics from its European region. It only processes anything if you accept analytics, and it sets no cookies on this website (see PostHog's privacy notice).
• Cloudflare routes web traffic to our self-hosted server through a secure tunnel.

We may also disclose data if the law requires it, or to protect our rights and users' safety.

International transfers

Our servers are hosted in Europe. Stripe and Resend may process data outside the UK and European Economic Area, including in the United States. We rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or an adequacy decision where one applies, to protect transfers outside the UK and the European Economic Area. Analytics you accept is processed by PostHog in its European region.

How long we keep it

• Waitlist details while we manage your early-access request, or until you ask us to remove them.
• Account data for as long as your account is open. When you close it, we delete it, except what we must keep by law.
• Payment and invoice records for six years, as UK tax law requires.
• Access logs for up to 30 days.
• Analytics events — page paths, button clicks, page timing and conversion milestones, collected only if you accepted — for up to 12 months.

Your rights

Under UK and EU data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong;
• delete it;
• restrict or object to how we use it, including use based on legitimate interests;
• give you your data in a portable format.

To make a request, email [email protected]. We respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live in the EEA. We would appreciate the chance to put things right first.

Cookies

When you sign in on this website or in the research app, we set essential cookies that keep you signed in and protect your account. We use no advertising or marketing cookies.

We remember your analytics choice in local storage. If you accept, we also store random browser and session identifiers there, and a tab identifier in session storage, to count repeat visits and measure time on pages. If storage is unavailable, identifiers stay in page memory. This is pseudonymous analytics data. Analytics starts only after you accept; declining or withdrawing consent stops further collection and clears the identifiers where storage is accessible. We also keep local event markers to avoid counting the same action repeatedly. Founder checkout in the app has its own analytics choice and separate random identifiers; accepting here does not accept analytics in the app. If you accept there, we measure checkout starts and confirmed completions, with the selected plan. We do not link the two anonymous identities. We do not enable session recording or automatic form tracking. You can change your website choice at any time:

Security, children and changes

Data is encrypted in transit, passwords are stored only as secure hashes, and you can protect your account with two-factor authentication. Access to customer data within Evrant is limited to the people who need it.

Evrant is not intended for anyone under 18, and we do not knowingly collect data from children.

If we change this notice, we will update the date at the top. If a change affects how we use data you have already given us, we will email you first.