Privacy Policy

Elvoko is operated by Elvoko Design Studio (see the Terms of Service), which is the controller of your personal data under this policy. Contact: hello@elvoko.com.

• Your projects — each a folder in ~/Elvoko or one you chose — with their canvases, files and documents.
• Your library, any Eagle library you connect, and the model packs you download.
• Your conversations with Elvoko, stored in the app’s folder in your user Library.
• What you browse in the built-in browser, and the cookies of sites you sign in to there. We do not receive them.
• Your app settings.

None of this is uploaded on its own. Something leaves your Mac only in the ways the next section describes.

• When you talk to the agent — your message, the conversation so far, and whatever the agent reads to answer: files and folders you attach, files it opens in your project (the text of a PDF, a Word or Excel file, a Photoshop file’s layers), pictures on the canvas it looks at, and the results of its searches. These go through our server to a model provider for that request.
• When you make or change a picture — your prompt and the references you attach go through our server to an image model provider.
• When the agent searches the web — the search terms go to a search provider.
• When you send feedback or report a picture — what you write, the picture you report, your app version and your Mac’s operating system.

• Account — your email address, name, optional avatar, a hash of your password, your access level and plan, and invite codes you redeem. To run your account. (Contract.)
• Sessions — sign-in sessions with the IP address and browser or app identifier they were made from, for up to 60 days. To keep your account secure. (Legitimate interests.)
• Usage and billing records — for each request: which model, how many tokens or pictures, what it cost, how long it took, whether it worked, and technical identifiers; and your credit transactions. Not the words of your conversation and not your pictures. To charge correctly, refund failures and fix problems. (Contract and legitimate interests.)
• Pictures in transit — pictures that need to reach a model (references you attach, pictures in a conversation) are stored until 24 hours after they were last used. Pictures a model makes are handed to you directly where possible; otherwise they wait in our storage until your app collects them and are deleted 30 minutes later, or after 24 hours if never collected. (Contract.)
• Picture requests — while a picture is being made, its prompt is held in our job queue, and removed within an hour of the job finishing (24 hours if it failed).
• Safety records — when a picture request matches our content filter, or a provider’s safety system refuses it, we keep the prompt (up to 1,000 characters), the reason, and your account identifier. Pictures you report are kept the same way. To enforce the Terms. (Legitimate interests and legal obligation.)
• Misuse records — when someone tries to use our service outside the Elvoko app and site, we record the account (if any), IP address, browser or app identifier, time and address requested, for 90 days. To protect Elvoko and the people using it. (Legitimate interests.)
• Provider keys — if you add your own keys for a model or search provider, we store them encrypted.
• Waitlist — your email address, where and when you joined, and your invite status.
• Support — what you send to us.
• Purchases — from our merchant of record we receive your name, email address, country, what you bought and its order number, so we can give you what you paid for. Never your card details.

Conversations from Elvoko 0.1.x, before conversations moved onto your Mac, were stored on our server; those records are kept and deleted with your account like the rest.

• Model providers, and the routing services that connect us to them, receive what section 3 describes in order to answer or make a picture. Which one depends on the model. They process it under their own terms; we do not send them your name or email address.
• Search — Tavily (web search) and Serper (image search) receive search terms.
• Email — Resend sends sign-in, verification, password-reset and invite emails.
• Hosting — our servers are run by OVH in the United States.
• Storage and downloads — Cloudflare (R2 storage and content delivery) holds pictures in transit, the app installer and the model packs.
• Payments — our reseller, the payment provider named at checkout sells Elvoko as merchant of record and handles payment details as an independent controller under its own privacy policy.

We do not sell personal data and we do not share it for advertising.

Our servers are in the United States and our providers work in several countries, so your data may be processed outside the country you live in. Where the law requires it, we rely on safeguards such as the European Commission’s standard contractual clauses.

• Account, usage and billing, and safety records — while your account exists, then deleted within 30 days of a verified request to close it, except what we must keep for tax, accounting or legal reasons.
• Pictures in transit — at most 24 hours after last use. Picture prompts in the job queue — at most an hour after the job finishes, 24 hours if it failed.
• Sessions — up to 60 days. Misuse records — 90 days.
• Server logs — failed requests’ address and status only, overwritten as the logs fill.
• Backups — up to 30 days, then overwritten.
• Waitlist entries — until you accept an invite or ask to be removed.

The website sets one cookie to keep you signed in, and may set a short-lived one while you verify your email. There are no advertising or third-party cookies. If we measure visits to the website, we use a self-hosted tool that sets no cookies and does not identify you. The app signs in with a token it receives when you log in.

You can ask to see, correct, export or delete your data, or object to or restrict how we use it, by writing to hello@elvoko.com from your account’s email address. We may ask you to confirm it is you, and we answer within 30 days. We honour these requests wherever you live; if you are in the EU, the UK, California or another place with a data-protection law, you also have the rights that law gives you, including the right to complain to your local authority.

Elvoko is for people aged 16 and over. If we learn that a younger person has an account, we will delete it.

Data travels over encrypted connections, provider keys are encrypted at rest, and access to our systems is limited to what running Elvoko needs. No system is perfectly secure; if you find a vulnerability, please tell us at hello@elvoko.com.

We will post changes here with a new date, and tell you in the app or by email before a change that matters applies.

hello@elvoko.com