EVORIS
Tools Bundles Pricing Client Portal Restaurant Portal
Start Free Trial
Tools Bundles Pricing Client Portal Restaurant Portal Start Free Trial

Privacy Policy

Evoris — www.evorisai.com
Effective Date: March 4, 2026 — Last Updated: April 9, 2026

At Evoris ("we", "us", "our"), accessible at www.evorisai.com, your privacy is a priority. This Privacy Policy explains what information we collect, how we use it, who we share it with, how it is disclosed, and the security measures we take to protect it.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our Service.


1. Who This Policy Applies To

  • Clients — Businesses or individuals who register for and use the Evoris platform.
  • End Users — Visitors to a Client's website who interact with an Evoris-powered chatbot, booking page, or other client-facing tool.
  • Website Visitors — Anyone who visits www.evorisai.com.

2. Information We Collect

2.1 Information You Provide to Us (Clients)

When you register or interact with our platform, we may collect:

  • Full name and business name
  • Email address and phone number
  • Mobile phone number for SMS alerts (if enabled)
  • Website URL (used for chatbot onboarding and training)
  • Google Place ID (if review integration is enabled)
  • Billing and payment information (processed securely through Stripe)
  • Custom knowledge base content you upload or input (services, products, FAQs, hours, pricing, etc.)
  • Account login credentials (stored in hashed, encrypted form)
  • SMS notification preferences (trigger types, quiet hours, daily cap, timezone)
  • Industry tool data (menu items, allergen information, contracts, appointments, pre-shift checklists, tip calculations, and other data entered into platform tools)
  • Account hierarchy data (Evoris Account name, linked Client IDs, Master and Standalone Login assignments)
  • Support requests and communications with our team

2.2 Information Collected Through Client-Facing Tools (End Users)

When an End User interacts with a chatbot or other client-facing tool powered by Evoris, we may collect:

  • Messages and conversation content submitted to the chatbot
  • Inquiry details voluntarily provided by the End User (name, email, phone, message, etc.)
  • Booking form submissions (appointment requests, contact details, scheduling preferences)
  • Allergy check queries (menu items checked, allergen results viewed)
  • Timestamps, session identifiers, and interaction metadata
  • AI-derived data: classified intent (e.g., inquiry, purchase, booking, handoff), importance scores, and lead scores

This information is forwarded to the Client's designated email address, stored within the Client's portal, and may trigger SMS notifications to the Client's phone number if enabled.

2.3 Information Collected Automatically (All Users)

When you visit www.evorisai.com, we automatically collect: IP address (hashed — last octet masked before storage, never stored in plain text), approximate geographic location (country and city derived from IP), browser type and version, device type (mobile/tablet/desktop), pages visited and time spent on each page, referring URL (the site that sent you to us), your original traffic source stored via first-touch attribution, and a persistent browser identifier (via the ev_bid cookie described in Section 8) used to recognize returning visitors. We do not collect full IP addresses or link this data to your name or email address.

We also use Meta Pixel (Facebook) and Google Ads (gtag) for conversion tracking on evorisai.com. These third-party scripts may collect anonymized interaction data such as page views and conversion events. This data is used solely to measure advertising effectiveness and is governed by Meta's Data Policy and Google's Privacy Policy, respectively. No personally identifiable information is shared with Meta or Google Ads for advertising purposes.

2.4 Information Collected During Onboarding

During the chatbot onboarding process, Evoris may crawl and index publicly available content from the Client's website using artificial intelligence (OpenAI) to populate the chatbot's knowledge base. This process only accesses publicly available pages and is used to pre-fill business information such as services, products, hours, and FAQs.

2.5 Google Review Data

When a Client provides their Google Place ID, we query the Google Places API to retrieve the business's publicly available Google rating and review count. We store this data in the Client's account. We do not access individual review text, reviewer names, or any non-public Google data.

2.6 Google Review Prompting

Clients may enable a post-chat review prompt that invites End Users to leave a Google review. Evoris does not collect, store, or process the content of any reviews left on Google. Reviews are submitted directly to Google's platform and are subject to Google's Terms of Service. Evoris has no control over review content, ratings, or outcomes, and is not responsible for any reviews submitted by End Users, including negative reviews.

2.7 Account Hierarchy Data

When Clients create multi-location Evoris Accounts, we store the account structure including the Evoris Account name, linked Client IDs, Master and Standalone Login assignments, and access permissions. This data is used to manage the account hierarchy, enforce access controls, and deliver the multi-location management features of the platform.


3. How We Use Your Information

PurposeDescription
Service DeliveryTo set up, operate, and maintain your chatbot, industry tools, Client Portal, and all associated features
Chatbot TrainingTo populate your chatbot's knowledge base using your website content and custom data
Intent ClassificationTo classify End User messages by intent and importance using AI, enabling appropriate preset responses
Lead ScoringTo automatically score End User engagement based on conversation patterns, intent, and importance
Inquiry ManagementTo forward End User inquiries to your email, store them in your portal, and trigger SMS notifications
SMS NotificationsTo send real-time text message alerts to your designated phone number for high-value chatbot events
Email NotificationsTo send inquiry forwarding emails, billing receipts, renewal reminders, payment failure notices, and welcome emails
Review IntegrationTo fetch and display your Google Business rating and review count
Account ManagementTo manage your account, billing, subscription, and payment processing
AnalyticsTo provide conversation analytics, intent breakdowns, lead scoring trends, SMS delivery logs, and usage metrics
SecurityTo detect and prevent fraud, abuse, and unauthorized access
Legal ComplianceTo comply with applicable laws and respond to lawful requests
Industry ToolsTo operate 86'er, Allergy Checker, Contract Maker, Calendar/Booking, Tip Split, Pre-Shift, and other business tools within the platform
Booking ManagementTo manage appointments, availability rules, and scheduling on behalf of Clients using the Calendar/Booking tool
Conversion TrackingTo measure advertising effectiveness via Meta Pixel and Google Ads on evorisai.com (anonymized, no PII shared)
Product ImprovementTo analyze usage patterns and improve the platform (using aggregated, de-identified data)

We do not use End User inquiry data for advertising or sell it to third parties.


4. How Your Information Is Disclosed

4.1 Disclosure to Clients

End User inquiries submitted through the chatbot are forwarded directly to the Client's designated email address, stored within the Client's portal, and may be summarized in SMS notifications sent to the Client's phone number.

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating the platform:

  • Supabase — Cloud database hosting and authentication infrastructure. Stores all client data, conversation logs, inquiry records, SMS logs, and account information.
  • OpenAI — AI intent classification and onboarding content processing. Conversation messages are sent to OpenAI for intent analysis. OpenAI does not retain this data for training purposes under our agreement.
  • Twilio — SMS message delivery. When SMS alerts are enabled, the Client's phone number and a brief notification message are transmitted to Twilio for delivery. Twilio processes this data in accordance with its own privacy policy.
  • Stripe — Payment processing and subscription management. Billing and payment information is processed by Stripe and is subject to Stripe's privacy policy.
  • Resend — Transactional email delivery. Email addresses and message content are transmitted to Resend for email delivery.
  • Google (Places API) — Public business review data retrieval. Only the Client's Google Place ID is sent to Google; no personal data is shared.
  • Vercel — Application hosting and serverless function execution. Request data (IP addresses, headers) may be processed by Vercel's infrastructure in accordance with Vercel's privacy policy.
  • Meta (Facebook) — Conversion tracking via Meta Pixel on evorisai.com. Anonymized page view and conversion event data may be collected. Governed by Meta's Data Policy.
  • Google Ads — Conversion tracking on evorisai.com. Anonymized conversion event data may be collected. Governed by Google's Privacy Policy.

All service providers are contractually required to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to a court order, subpoena, legal process, or request from a government or regulatory authority.

4.4 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the acquiring party. We will notify you before your information becomes subject to a different privacy policy.

4.5 We Do Not Sell Your Data

Evoris does not sell, rent, or trade personal information to third parties for their own marketing purposes.


5. Method of Disclosure

Information is disclosed through the following methods:

  • Email — Inquiries are forwarded to Client-designated email addresses. Transactional emails (billing, reminders) are sent to Client email addresses.
  • SMS — When enabled, brief notification messages are sent to the Client's designated mobile phone number via Twilio. SMS messages contain a summary of the event (e.g., inquiry name, message preview) but not full End User data.
  • Secure Web Portal — Inquiry data, conversation history, analytics, SMS logs, and lead scores are accessible through the encrypted Client Portal.
  • API Connections — Data is transmitted via secure, encrypted API connections to our third-party service providers.
  • Legal Process — Where required by law, data may be disclosed via formal legal channels.

All electronic transmission of personal data is conducted over encrypted connections (TLS/SSL).


6. SMS-Specific Privacy Information

6.1 What SMS Data We Store

When SMS alerts are enabled, we maintain an SMS log containing:

  • The Client's recipient phone number
  • The trigger type that caused the notification (inquiry, purchase, booking, handoff, lead threshold)
  • The SMS message body (a brief summary of the event)
  • The session ID of the conversation that triggered the notification
  • The source ID linking back to the originating inquiry or conversation
  • Timestamp of when the message was sent

6.2 How Long SMS Data Is Retained

SMS log data is retained for as long as the Client maintains an active account. Upon account termination, SMS logs are deleted along with other account data in accordance with our data retention policy.

6.3 Who Can Access SMS Data

SMS logs are accessible only to the Client (through their portal), authorized Evoris administrators, and Evoris employees assigned to the Client's account.

6.4 Twilio's Role

Twilio acts as a sub-processor for SMS delivery. Twilio receives the recipient phone number and message body for the sole purpose of delivering the SMS. Twilio's privacy policy governs their handling of this data: www.twilio.com/legal/privacy.


7. Data Retention

We retain personal information for as long as necessary to:

  • Maintain your active account and deliver the Service
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

Specific retention periods:

  • Account data — Retained while the account is active and for up to 90 days after termination.
  • Conversation history — Retained while the account is active. Older conversations may be automatically cleaned up based on volume and age to maintain system performance.
  • Inquiry data — Retained while the account is active.
  • SMS logs — Retained while the account is active.
  • Analytics and telemetry — Bot event data is retained for analytics and reporting purposes while the account is active.
  • Audit logs — Settings and billing change logs are retained indefinitely for accountability.

You may request deletion of your data at any time by contacting us at evorisgroup@gmail.com.


8. Cookies and Tracking Technologies

TypePurpose
Essential CookiesRequired for the website, portal, and chatbot widget to function (session tokens, authentication)
Analytics CookiesFirst-party cookies used to understand how visitors use the site
Advertising/Conversion CookiesThird-party cookies set by Meta Pixel and Google Ads for conversion tracking and advertising measurement on evorisai.com
Preference CookiesRemember your settings and preferences

8.1 Specific Cookies We Set

CookieDurationPurpose
ev_bid1 yearPersistent browser identifier used to distinguish unique visitors and recognize returning visitors across sessions. Not linked to any personal account.
ev_ref1 yearStores the original traffic source (referring URL) from your first visit for first-touch attribution analytics. Never overwritten on return visits.
ev_sidSessionSession-scoped identifier (sessionStorage, not a persistent cookie) used to group page events within a single browser tab.
_fbp3 monthsSet by Meta Pixel. Used to identify browsers for conversion tracking and advertising measurement. Governed by Meta's Data Policy.
_fbc3 monthsSet by Meta Pixel. Stores click identifiers when a user arrives from a Facebook ad. Governed by Meta's Data Policy.
_gcl_*90 daysSet by Google Ads. Used to track conversions from Google ad clicks. Governed by Google's Privacy Policy.

8.2 Behavioral Signals

When you visit our site, we passively detect whether mouse movement, scrolling, clicking, or keyboard activity occurs. This signal is used solely to distinguish real human visitors from automated bots for the purpose of improving the accuracy of our own site analytics. No interaction content is recorded — only whether interaction occurred. Additionally, we detect whether a browser is operating in headless/automated mode (navigator.webdriver) and suppress all tracking for such sessions.

The chatbot widget uses session-based local storage to maintain conversation context within a single visit. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the site and portal. In addition to first-party analytics cookies, evorisai.com uses third-party conversion tracking cookies from Meta Pixel and Google Ads for advertising measurement. These cookies are set only on evorisai.com and are not placed on Client websites or within the chatbot widget.


9. Security

We take the security of your information seriously. The following measures are in place:

  • Encryption in Transit — All data is encrypted using TLS/SSL protocols.
  • Encryption at Rest — Stored data is encrypted at rest via our database provider (Supabase).
  • Access Controls — Access is restricted to authorized personnel on a need-to-know basis. Row-level security (RLS) policies are enforced at the database level.
  • Secure Authentication — Account passwords are hashed using bcrypt and never stored in plain text. Portal sessions use httpOnly cookies with JWT tokens.
  • Audit Logging — All settings changes and billing events are logged to an immutable audit trail.
  • Regular Monitoring — We monitor our systems for unauthorized access and vulnerabilities.
  • Rate Limiting — API endpoints are rate-limited to prevent abuse.

Despite these measures, no system is completely secure. In the event of a data breach, we will notify you as required by applicable law.


10. Your Rights and Choices

10.1 All Users

  • Access — Request a copy of the personal information we hold about you.
  • Correction — Request correction of inaccurate or incomplete information.
  • Deletion — Request deletion of your personal information, subject to legal retention requirements.
  • Opt-Out of SMS — Disable SMS notifications at any time through your Client Portal settings.
  • Opt-Out of Marketing — Unsubscribe from marketing emails at any time via the unsubscribe link in each email.

10.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected and how it is used, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights. Contact us at evorisgroup@gmail.com.

10.3 Canadian Residents (PIPEDA)

Canadian residents have the right to access personal information held about them, challenge its accuracy, and withdraw consent to its collection or use.

10.4 European Residents (GDPR)

If you are located in the EEA, you have rights including the right of access, rectification, erasure, restriction of processing, data portability, right to object, and the right to lodge a complaint with your local Data Protection Authority. For GDPR inquiries, contact evorisgroup@gmail.com.


11. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.


12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party services referenced in this policy, including Twilio, Stripe, OpenAI, and Google.


13. International Data Transfers

Evoris operates primarily from the United States. If you access our Service from outside the United States, your information may be transferred to and processed in the United States. For transfers from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.


14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you by email or via a notice on the site. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.


15. Contact Us

Evoris
Website: www.evorisai.com
Email: evorisgroup@gmail.com

EVORIS

AI-powered tools for every business.

Platform

Core Tools Industry Bundles Pricing Install Guide

Account

Client Portal Restaurant Portal Start Trial Support

Legal

Terms Privacy Code of Conduct

© 2026 Evoris. All rights reserved.