Privacy Policy

This Privacy Policy explains how 26io Techlab ("26io Techlab", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use our website 26io.com and our products, including the EVI AI assistant (collectively, the "Services").

26io Techlab is an independent venture based in India. We are committed to handling your data responsibly and in line with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and other applicable laws.

By using our Services, you agree to this Policy. If you do not agree, please do not use the Services.

1. Information we collect

Information you provide

• Account information — when you sign up for EVI, our authentication provider collects your name and email address (and, if you choose social sign-in, basic profile details from that provider).
• Conversations and content — the messages you send to EVI and any documents or files you upload so that EVI can respond to you.
• Waitlist details — if you join a waitlist for a product (e.g. Kus, Revmosys, or the EVI API), we collect the email address you submit.
• Communications — any information you share when you email us or contact support.

Information collected automatically

• Usage and technical data — such as device and browser type, IP address, pages visited, and basic diagnostic logs used to keep the Services running and secure.
• Cookies — we and our providers use essential cookies (for example, to keep you signed in). See "Cookies" below.

2. How we use your information

• To provide, operate, and maintain the Services.
• To generate AI responses to your requests, including EVI's memory and document features.
• To communicate with you — service updates, waitlist notifications, and support.
• To improve and secure our Services, prevent abuse, and debug issues.
• To comply with legal obligations.

We do not sell your personal data. We do not use the content of your private conversations to train third-party foundation models.

3. AI processing and service providers

To deliver the Services, your inputs may be processed by trusted third-party providers acting on our behalf. These include AI model providers (to generate responses to your requests), and providers for authentication, web search, cloud hosting, storage, and content delivery.

In particular, the messages and documents you submit to EVI are sent to AI model providers so that EVI can generate a response. These providers process data only as needed to perform their services, under their own privacy and security commitments.

4. Data storage, security, and retention

Your data is stored on managed cloud infrastructure with encryption in transit. We apply reasonable technical and organisational measures to protect it. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide the Services, and thereafter only as required to comply with our legal obligations or resolve disputes. You may request deletion at any time (see "Your rights").

5. International data transfers

Some of our providers process data on servers located outside India. Where this happens, we take steps to ensure your data continues to be handled in line with this Policy and applicable law.

6. Your rights

Subject to applicable law, including the DPDP Act, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data;
• Withdraw consent where processing is based on consent; and
• Raise a grievance about how we handle your data.

To exercise any of these rights, email us at support@26io.com. We will respond within a reasonable timeframe.

7. Cookies

We use essential cookies that are necessary for the Services to function — for example, to keep you securely signed in. If we add analytics or non-essential cookies in the future, we will update this Policy and, where required, ask for your consent.

8. Children

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal data from them. If you believe a child has provided us data, please contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the Services where appropriate.

10. Contact us

For any questions, requests, or grievances regarding this Policy or your data, contact us at support@26io.com.