Privacy Policy

This Privacy Policy explains how 26io Techlab ("26io Techlab", "we", "us", or "our") collects, uses, shares, and protects personal data when you use our website 26io.com and our products: the Evi assistant, the Kus API, and Revmosys, our website-intelligence product (collectively, the "Services").

Revmosys involves a second, distinct kind of data: if you run a business that uses Revmosys, your own website's visitors are tracked on your behalf, separately from your own account data. Section 1 covers both; look for the "If you run a Revmosys-tracked website" heading for what applies to your visitors specifically.

26io Techlab is an AI studio based in India. We are committed to handling your data responsibly and in line with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and other applicable laws.

By using our Services, you agree to this Policy. If you do not agree, please do not use the Services.

1. Information we collect

Information you provide

• Account information: when you sign up for Evi or Revmosys, our authentication provider collects your name and email address (and, if you choose social sign-in, basic profile details from that provider).
• Conversations and content: the messages you send to Evi, and any documents or files you upload, so that Evi can respond to you.
• Revmosys business details: if you create a Revmosys account, we collect your business website address, a contact email and phone number, and (for Cashfree, our payment processor) the billing details needed to start a subscription. We never see or store your card number; Cashfree handles that directly.
• Waitlist details: if you join a waitlist for a product not yet launched (e.g. the Evi API), we collect the email address you submit.
• Communications: any information you share when you email us or contact support.

Information collected automatically

• Usage and technical data: such as device and browser type, IP address, pages visited, and basic diagnostic logs used to keep the Services running and secure.
• Cookies: we and our providers use essential cookies (for example, to keep you signed in). See "Cookies" below.

If you run a Revmosys-tracked website

This section is about your website's visitors: people who are not 26io Techlab account holders and never sign up for anything. If you use Revmosys, a small first-party script runs on your own website (not ours) and reports, to us on your behalf:

• Page views, time on page, scroll depth, and whether a visit was a bounce;
• Whether a visitor took an action we count as an "intent": adding to cart, clicking a WhatsApp/phone link, downloading a file, or submitting a form (only that a form was submitted, never its contents);
• The visitor's IP address and basic device/browser type, used to distinguish unique visitors and never sold or shared with ad networks.

We do not set third-party advertising cookies through this script, and we do not share this data with anyone outside 26io Techlab and the service providers named in Section 3. If you operate a Revmosys-tracked website, you are responsible for your own privacy notice to your visitors; this Policy describes what our script collects on your behalf and how we, in turn, handle it.

2. How we use your information

• To provide, operate, and maintain the Services.
• To generate AI responses to your requests, including Evi's memory and document features.
• To run Revmosys's audits, scoring, and AI-generated explanations of what changed on a tracked website, and to answer questions in the Revmosys dashboard chat.
• To process Revmosys subscription payments and communicate billing status.
• To communicate with you, including service updates, waitlist notifications, and support.
• To improve and secure our Services, prevent abuse, and debug issues.
• To comply with legal obligations.

We do not sell your personal data. We do not use the content of your private conversations, or a Revmosys website's visitor data, to train third-party foundation models.

Staff access to conversations. A small number of authorized 26io Techlab administrators can view the content of Evi conversations, only to provide support, investigate abuse or errors, and keep the Services secure and working. This access requires strong sign-in, and every time an administrator opens a conversation it is recorded (who, which conversation, and when).

3. AI processing and service providers

To deliver the Services, your inputs may be processed by trusted third-party providers acting on our behalf. These include:

• AI model providers: Evi and Revmosys's AI features (audit explanations and the dashboard chat) are processed by third-party AI model providers, including NVIDIA (for Revmosys's chat) and Google (for Revmosys's AI-generated explanations and its use of PageSpeed Insights performance data).
• Cashfree, our payment processor, for Revmosys subscription billing. Cashfree collects and stores your payment method directly; we only receive confirmation of your subscription status.
• Providers for authentication, web search, cloud hosting, storage, and content delivery.

These providers process data only as needed to perform their services, under their own privacy and security commitments.

4. Data storage, security, and retention

Your data is stored on managed cloud infrastructure with encryption in transit. We apply reasonable technical and organisational measures to protect it. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide the Services, and thereafter only as required to comply with our legal obligations or resolve disputes. You may request deletion at any time (see "Your rights").

5. International data transfers

Some of our providers process data on servers located outside India. Where this happens, we take steps to ensure your data continues to be handled in line with this Policy and applicable law.

6. Your rights

Subject to applicable law, including the DPDP Act, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data;
• Withdraw consent where processing is based on consent; and
• Raise a grievance about how we handle your data.

To exercise any of these rights, email us at [email protected]. We will respond within a reasonable timeframe.

7. Cookies

On 26io.com and inside our dashboards, we use essential cookies that are necessary for the Services to function, for example to keep you securely signed in. If we add analytics or non-essential cookies to those surfaces in the future, we will update this Policy and, where required, ask for your consent.

Revmosys's visitor-tracking script, described in Section 1, is first-party and does not use third-party advertising or tracking cookies.

8. Children

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal data from them. If you believe a child has provided us data, please contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the Services where appropriate.

10. Contact us

For any questions, requests, or grievances regarding this Policy or your data, contact us at [email protected].