Legal
Privacy policy
What Evalie keeps, what it doesn’t, who else receives what, how long we keep it, and how to have it erased.
The short version
- Your manuscript’s file never leaves your computer. Your browser extracts its text and sends it to our servers once, when you begin. Your editor works from that copy in the background, sending it to Anthropic, our AI provider, with every step, so you can close the page; we email you when your report is ready.
- Our servers hold that text, and the editor’s reading notes on it, encrypted, only while your report is written. They’re deleted when the report is done, as soon as a review ends any other way, and within 6 hours at most.
- After that our servers keep your report and your questions, which include a synopsis of your story and passages quoted from it, the settings and notes you give a review, and facts about the file: its name, the labels of its chapters or pages, and the numbers measured from it.
- The copy in your browser is erased when you finish, after your last question, when you choose to erase it, or the next time Evalie opens in that browser after 30 days untouched.
- We don’t use your work to train AI, sell data or show ads.
- Your sign-in is kept on Iridiom, the platform Evalie runs on, and works on the other products that run on it if you choose to use them.
- This site, www.evalie.app, sets no cookies. The only things it stores in your browser are your choices of language and of light or dark pages, if you make them.
- Delete a review in the app to erase what Evalie keeps for it. To erase anything else, email webmaster@evalie.app.
Who we are
Evalie is run by Probalia Ventures LLC, 240 Harriman Road, Irvington, NY 10533, USA (“we”, “us”). We decide how the data on this page is used, which makes us its controller. Email us at webmaster@evalie.app.
This policy covers www.evalie.app and the Evalie app at app.evalie.app.
The app runs on Iridiom, a software platform we also operate, so some screens and emails there may use the Iridiom name.
Your sign-in. Your email address and password, or your Google or Microsoft sign-in, are kept once, on Iridiom, for every product that runs on it. Signing up here doesn’t set you up anywhere else: nothing exists for you in another product until you go there and sign in, with the same email address and password. What you do in one product isn’t shared with another, and each has its own privacy policy.
Your manuscript
- The file never leaves your computer. Your browser reads it and extracts the text. The file itself is never uploaded: only its text, and its name.
- It’s sent once, then held while your report is written. When you begin, or try again after a review stops, your browser sends the full text to our servers once. Evalie encrypts it with a key made for that upload, keeps the encrypted copy in our storage at Cloudflare and the key apart from it, in your review’s record, and your editor works from it in the background, so you can close the page. The editor’s reading notes, which quote it at length, are held the same way.
- The text goes with every step. Your editor works with the whole manuscript in view, so each step of the review (each part of the close reading, each section of the report and the editor’s letter) sends the full text through our platform, at Cloudflare and then Vercel, to Anthropic, our AI provider. Each question you ask afterwards sends it again, from your browser.
- Then it’s deleted. When your report is done, the key and the encrypted copy are deleted, and we email you that the report is ready. The same happens as soon as a review ends any other way: the AI declines to read it or to write the letter, the review stops, or you delete it. Whatever happens, a clean-up deletes both within 6 hours of upload. Copies of our database kept as backups can hold a deleted key until they expire, never the manuscript itself.
- It’s encrypted on the way and while it’s held. Every hop, from your browser to Anthropic, uses HTTPS, and the held copy is encrypted. That isn’t end-to-end encryption: we hold the key, and our servers read the text to run each step.
- Your browser keeps a copy. In its own storage (IndexedDB) on your computer, as plain text, not encrypted, for as long as the review needs it: your questions are sent from it, and it is what Try again sends if a review stops. Anyone who can use this browser on this computer could read it. A private window that refuses that storage keeps the copy in the open tab instead, until you close it.
- When that copy is erased. When you finish the review (“Finish the review”), when your 25th question is answered, when you choose “Erase my story from this computer now”, when you delete the review, or when the AI declines to read the manuscript at all. A copy left untouched for 30 days is erased the next time Evalie is opened in that browser: that check runs only then, so until you open Evalie there again, the copy stays.
- Coming back to it. To ask more questions once the copy is gone, or from another computer, open the same file again. Its fingerprint confirms it’s the same draft; a different draft is refused.
- What our servers keep about it afterwards. Not its full text, once the report is done. They keep its file name, the label of each of its parts, the numbers Evalie measures from it (including the names of its most frequent speaking characters, in a script or a comic), and its fingerprint. Your report holds a logline and a synopsis of up to 8,000 characters, and passages quoted word for word, each checked against the manuscript; your editor’s answers can quote it too. All of this is listed under What we collect about you.
- Screened, not kept. Our platform screens AI requests and answers automatically for misuse, including your report, the editor’s reading notes and your questions, which quote your manuscript. When something is flagged, it keeps which check matched and where, never the text. One fragment can still reach our logs: an error about an AI reply that couldn’t be read can quote a few words of the reply. See Records of use.
- Not used to train AI. We don’t use your manuscript, or anything else you give us, to train AI models. What Anthropic may do with what it receives is set by its commercial terms, linked under Who else receives it.
- Caching at Anthropic. To make each step cost less, Evalie asks Anthropic to cache the manuscript between steps: for 5 minutes at a time while the report is written, and for an hour at a time while you ask questions. How long Anthropic keeps anything is set by its terms, not by us.
No person at Evalie reads your manuscript as part of a review. Your editor is an AI.
What we collect about you
Everything below comes from you, or from Stripe and your sign-in provider. We don’t buy data about you.
Your account
| Data | What it is, and why we have it | How long we keep it |
|---|---|---|
| Account details | Your name, email address and password, which we store only as a one-way hash. If you sign in with Google or Microsoft instead, the name, email address and profile picture they share with us. Also the workspace your Evalie reviews live in, and who belongs to it. Used to sign you in and run your account. | Until you ask us to delete your account. |
| Sign-in and security records | Each sign-in, failed attempt and password-reset request, with the email address used, the IP address and browser details. Used to keep accounts secure and to limit repeated attempts. | 90 days, then deleted by a weekly clean-up. A count of failed attempts is kept on your account until you next sign in or change your password, and the time of the last failed attempt until your account is deleted. Counters that limit repeated attempts last at most an hour. |
| Purchases | What you bought, when, and how much you paid, plus the customer record Stripe keeps for Evalie: your email address and our internal account IDs. You type your card and billing details into Stripe’s own form, and they never reach us. Used to take payment, give you what you bought, and keep accounting records. | Kept as accounting records. We don’t delete them on request while tax or accounting law requires us to keep them. |
| What you agreed to | Which version of the terms of service and privacy policy you accepted, and when: when you sign up, when we ask you to accept a new version, and when you pay. Used to show what you agreed to. | As long as you have an account, and afterwards for as long as we may need to show what you agreed to. |
| Product news, if you ask for it | Only if you tick the box when you sign up or buy, or turn on Product news in Settings: your email address, the words you agreed to and when, and each time you unsubscribe. Used to send you occasional emails about Evalie: new features and offers. | Until you unsubscribe. After that, the record of what you agreed to and when you unsubscribed, for as long as we may need to show it. |
Your reviews
| Data | What it is, and why we have it | How long we keep it |
|---|---|---|
| Your manuscript, while your report is written | The full text your browser sends when you begin a review, or when you try again after one stops, and your editor’s reading notes on it, which quote it at length. Both are encrypted with a key made for that upload and held in our storage; the key is kept apart from them, in your review’s record. Used to write your report in the background, so you can close the page. | Deleted when your report is done, or as soon as the review ends any other way (the AI declines it, the review stops, or you delete it), and in any case within 6 hours of upload. |
| A review’s settings and your notes | The title you give the review, the format (and for TV, the kind of series), the genre, the draft stage, how you want the notes delivered and the language they’re written in. Your notes for the editor, word for word. Any earlier notes you add, word for word: the text of a notes file you choose, with the file’s name, or the verdict, priorities and revision plan of an earlier Evalie review. Used to write your report and answer your questions. | Until you delete the review, which erases them, or ask us to. |
| About your manuscript | Its file name and file type. The label of each of its parts as your browser found them, such as “p. 12”, “Chapter 3” or the first words of a chapter’s heading. The numbers Evalie measures from its text: its length, the length of each part, its dialogue share and, for scripts and comics, the names of up to 15 speaking characters and how often each speaks. And a fingerprint: a short code computed from the text that confirms a file is the same draft, and can’t be turned back into it. If the AI declines to read a manuscript, its file name is kept so the review can tell you. Not its full text, which is held only while your report is written (above). | Until you delete the review, which erases them, or ask us to. |
| Where to tell you | The email address on your account, and the review’s link and language, noted on the review when it starts. Used to email you when your report is ready, if the AI declines your manuscript or the editor’s letter, or if the review stops. | Until we’ve emailed you how the review ended. |
| Your report and questions | The report your AI editor writes: the editor’s letter and verdict, the ratings, every section’s notes, a logline and a synopsis of your story of up to 8,000 characters, and passages quoted word for word from your manuscript, each up to 600 characters and each checked against it, with the place they come from. Then the questions you ask and your editor’s answers, which can quote it too. Used to show you your report and answers, and to answer your next questions. | Until you delete the review, which erases them, or ask us to. |
| Your list of reviews | For each review, a card for your reviews page: its title, format and genre, how far it has got, its verdict and how many questions you’ve asked. When a report is finished, its verdict, priorities and revision plan are also kept where a review of your next draft can carry them forward. And the platform’s own record that the review exists, under a neutral name such as “Review, Oct 4, 2026”, with when it was made and last opened. The title you give a review is never put in that record. | The card and the carried notes until you delete the review, which erases them. The platform’s record until you ask us to erase it: deleting a review takes it off your list, but that record stays. |
Reviews belong to your workspace. If you invite anyone to it, they can open its reviews too: the report, the questions and what you typed when you set each one up. Your manuscript’s text stays in your own browser.
Records of use
| Data | What it is, and why we have it | How long we keep it |
|---|---|---|
| Records of use | A record of each request Evalie makes to our platform (your account, what was asked for and how long it took), and for each AI request, your email address, the model used, its size and its cost, never what was asked or answered. Used to run the service, control costs and investigate faults. | Kept as business records. If you ask us to delete your account, we remove your details from them. |
| Screening of AI requests | Requests to the AI and its answers are screened automatically for attempts to misuse it. When something is flagged, we keep which check matched and where in the text it was, never the text itself. Used to stop abuse. In Evalie, what is screened includes the editor’s reading notes, your report and your questions, which quote your manuscript: none of their text is kept. | 90 days, then deleted by the weekly clean-up. |
| Logs and error reports | Technical records of requests and errors, which, from the Evalie app, carry IDs, counts and error messages rather than your manuscript, notes or report (an error about an AI reply that couldn’t be read can quote a few words of it). Some errors go to Sentry, our error-monitoring service. On app.evalie.app’s own pages (sign-in, checkout and the frame around the app), Sentry may also record a small share of visits as a replay of clicks and page changes, with all text and anything typed hidden. It doesn’t record inside the Evalie app itself. | Deleted by a weekly clean-up once they’re old enough: app logs after 7 days, error records after 90 days, audit records after 1 year. Error records we flag for an investigation are kept until we unflag them. What Vercel and Sentry keep follows their own retention. |
| Emails to us | Anything you send to webmaster@evalie.app. Used to answer you and handle your requests. | As long as we need it to answer you or to show we handled your request. |
To have an account, you need to give us your name, email address and a password, or sign in with Google or Microsoft. To buy something, you give your payment details to Stripe. Without these we can’t provide Evalie. Everything else is up to you.
Your manuscript, notes and questions are yours to choose. If they contain information about real people, such as people a story is based on, you’re responsible for having the right to share it with us and our AI provider for this purpose.
What we use it for
- Writing your notes. Your manuscript’s text, your review’s settings, your notes and any earlier notes are used to write your report and answer your questions. That work is done by an AI model, Claude, made by Anthropic, so what each step needs is sent to Anthropic: the whole manuscript every time, and with it the reading notes and report so far, and your questions.
- Keeping your report. Your report and your questions are kept so you can come back to them and download them, and so a review of your next draft can carry the report’s main notes forward.
- Running the service. Signing you in, taking payment, counting what your purchases have used, stopping abuse and fixing faults.
- Answering you. Support and privacy requests.
We don’t sell personal data, share it with advertisers, or show ads. We don’t use your data to train AI models. What our AI provider may do with what it receives is set by its commercial terms, linked under Who else receives it.
Evalie makes no decision about anyone that has legal or similarly significant effects.
Its reports are an editor’s opinion for you to judge.
Legal bases (UK and EU GDPR)
- Contract: running your account and reviews, writing your report and answering your questions, and taking payment.
- Legitimate interests: security and preventing abuse; logs, error monitoring and page analytics.
- Consent: product news emails, only if you ask for them. You can withdraw it at any time, with the unsubscribe link in any of them or in Settings.
- Legal obligation: keeping purchase records, and answering rights requests.
Who else receives it
These providers process data for us, to run Evalie. Each gets what its job needs.
| Who | What they do | What reaches them |
|---|---|---|
| Supabase | Database | Accounts, your reviews’ settings and notes, what we keep about each manuscript, your reports and questions, purchase records and logs. While your report is being written, also the key that unlocks the held copy of your manuscript, never the copy itself. Your report holds a synopsis of your manuscript and quotes from it. |
| Cloudflare | Runs the Evalie app, and stores files | Every request the app handles, including your name and email address, and what you put in. While your report is being written, it stores your manuscript and the editor’s reading notes, encrypted, and runs each step with them; they’re deleted when the report is done, within 6 hours at most. The key is never stored with them: it’s kept in our database (Supabase). |
| Vercel | Hosting for www.evalie.app and app.evalie.app, and page analytics on both | Standard request data (IP address, browser, the page asked for) for both sites; everything the Evalie app sends through our platform, including what goes to the AI provider; page views on both sites, with the links into the app clicked on www.evalie.app; and load times on app.evalie.app’s own pages. Your manuscript’s full text passes through it with each step of a review, on its way to Anthropic. |
| Stripe | Payments | Your email address, our internal account IDs, what you’re buying and the amount, plus the card and billing details you type into Stripe’s form. |
| Resend | Account emails, such as welcome and password reset; Evalie’s emails telling you your report is ready or a review has stopped; and product news if you ask for it | Your name, email address and the email’s content, and whether you’ve asked for product news. Evalie’s emails carry your review’s title, if you gave it one, and a link, never your manuscript or your report. |
| Sentry | Error monitoring | Error details and browser information. From a small share of visits to app.evalie.app’s own pages, a replay of clicks and page changes with all text and form fields hidden. |
| Upstash | Limits on repeated requests, and short-lived caching | Your email address or IP address, as a counter that lasts at most an hour, and short-lived copies of some account settings. |
| Google or Microsoft | Sign-in, only if you choose it | Your sign-in with them. They send us your name, email address and profile picture. |
| Google (Fonts) | Serves typefaces on app.evalie.app and inside the Evalie app | Your IP address and browser details, when a page loads its fonts. |
| Anthropic | The AI editor: Claude reads your manuscript, writes your report and answers your questions | Your manuscript’s full text, with every step of a review. With it: the title, settings and notes you give the review, and any earlier notes; the numbers Evalie measures from the text; the editor’s reading notes and the report as they’re written; and, with each question, the report, your earlier questions and their answers, and the file’s name. Never your name or email address. |
| DreamHost | Our mailbox, webmaster@evalie.app | What you write to us: your email address, your message and anything you attach. |
What Anthropic may do with what it receives is set by its commercial terms.
We’ll also disclose data when the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is sold. In a sale, this policy keeps applying until you’re told otherwise.
How long we keep it
The tables under What we collect about you give the period for each kind of data. In short:
- Your manuscript’s text is held on our servers, encrypted, only while your report is written, and deleted within 6 hours of upload at most. The copy in your browser is erased as described under Your manuscript.
- Reviews (settings, notes, what we keep about the manuscript, the report and your questions) are kept until you delete the review, which erases them, or ask us to erase them. The platform’s neutral record of a review stays until you ask us.
- Logs are deleted by a weekly clean-up, at its first run after they reach their age:
- App logs: 7 days.
- Sign-in and security records: 90 days.
- Error records: 90 days (any we flag for an investigation are kept until we unflag them).
- Audit records: 1 year.
- Purchase records are kept for accounting.
- Backups. Our database provider keeps backups so data can be recovered after a fault. Data you’ve asked us to erase can remain in those backups until they expire.
Cookies and browser storage
www.evalie.app sets no cookies. It counts visits with Vercel Web Analytics, without cookies: Vercel records the page, where you came from, your country, device and browser, and which links into the app you click. We don’t send it anything about who you are. If you choose English or Spanish with the language switch, it remembers that choice in your browser’s local storage (storynotes.lang), and if you choose dark pages, it remembers that too (sn-theme). Those are the only things it stores. Its typefaces are served from the site itself, not from a font service.
The app at app.evalie.app uses the cookies and storage below. None of them is for advertising.
| Name | What it’s for | How long |
|---|---|---|
__Secure-Cookie | Keeps you signed in. | 24 hours. |
next- __Secure-Cookies | Protect the sign-in form, and return you to the page you were on. | Until you close the browser. |
__Secure- __Secure-Cookies | Complete a sign-in with Google or Microsoft safely. | 15 minutes. |
tenant-Cookie | Knows you’re signing in to Evalie. | 1 hour. |
marketing-Cookie | Carries your choice about product news through a sign-up with Google or Microsoft. | 15 minutes, or until the sign-up finishes. |
iridiom-Cookie | Remembers whether you chose light or dark. | 1 year. |
theme activeWorkspaceIdLocal storage | Your light or dark choice, and the workspace you last used. | Until you clear it. |
iridiom:Session storage | Which error notices you’ve already seen. | Until you close the tab. |
storynotes.Local storage, inside the app | Your choice of English or Spanish for the app’s screens. | Until you clear it. |
sn-Local storage, inside the app | Your choice of light or dark pages in the app. | Until you clear it. |
storynotes:Local storage, inside the app | Short notes your list of reviews leaves for a review it opens, and back: the title you typed for a new review, the earlier review a revision follows, or a request to delete it. | Removed when read. Ignored after an hour. |
| Your manuscript’s textBrowser storage (IndexedDB), inside the app | The text of the manuscript a review is reading, with its file name and fingerprint and, while the report is being written, the editor’s reading notes on it. Kept as plain text on your own computer, so each step of the review can send the text to your AI editor without our servers storing it. | Erased when you finish the review or your 25th question is answered, when you choose “Erase my story from this computer now”, when you delete the review, or the next time Evalie is opened in this browser after 30 days untouched. |
| Stripe’s own cookiesAt checkout | Set by Stripe to process payment and prevent fraud. | See Stripe’s privacy policy. |
app.evalie.app also runs Vercel Web Analytics and Speed Insights, which count page views and measure how fast pages load, and Sentry, described under Records of use. Its pages load fonts from Google Fonts, so Google receives your IP address and browser details.
The Evalie app inside app.evalie.app loads its own fonts from Google Fonts too. A report you download, as a PDF or as Markdown, is made in your browser and saved on your own computer.
Deleting your data
- Your manuscript. The copy held on our servers is deleted on its own when your report is done, and within 6 hours at most. For the copy in your browser, choose “Erase my story from this computer now” inside the review, or finish the review. What our servers keep about it afterwards goes when you delete the review.
- A review. Choose “Delete this review” inside the review, or delete it from your list of reviews. Either way, Evalie erases everything it keeps for that review: its settings and notes, what it kept about the manuscript, the report, the questions, its card on your reviews page and the notes a later review would carry forward. If the review is still running, the held copy of the manuscript and its key are deleted too. This browser’s copy of the manuscript goes as well; a copy in another browser you used for it stays there until Evalie is next opened in it after 30 days untouched. What remains is the record that a review existed, under a neutral name such as “Review, Oct 4, 2026”, with its dates; the purchase’s billing records; and the records of use and logs above, until they expire.
- Everything else. To erase anything deleting a review doesn’t reach, or your whole account, email webmaster@evalie.app from the address on your account. If you also use another product that runs on Iridiom, say whether to erase your sign-in as well, which ends it for every product, or only what’s in Evalie. We’ll confirm when it’s done.
Your rights
Depending on where you live, you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct it;
- erase it;
- limit how we use it;
- give it to you in a machine-readable form to take elsewhere; or
- stop using it where we rely on legitimate interests.
Email webmaster@evalie.app. It’s free. We may ask you to confirm who you are first. We answer within one month. If a request is complex, we may take up to two more months, and we’ll tell you why.
If you’re in the UK or EU and not happy with our answer, you can complain to your data protection authority: the ICO in the UK, or the authority where you live in the EU.
US state privacy rights
If you live in a US state with a consumer privacy law, such as California:
- What we collect: identifiers (name, email address, IP address), commercial information (purchases), internet activity (sign-in and usage records, logs), and the content you give us; your manuscript, which we hold, encrypted, only while your report is written, as described above, and your review settings, notes and questions. The sources and purposes are described above.
- Who receives it: only the service providers listed above, for those purposes. We don’t sell personal information, or share it for cross-context behavioral advertising.
- Sensitive information: we collect your Evalie sign-in (email address and password), which the law counts as sensitive, and use it only to sign you in and keep your account secure. We don’t use it to infer anything about you.
- Your rights: to know, correct and delete what we hold. Email webmaster@evalie.app, yourself or through an authorized agent. We’ll confirm who you are, answer within the time given under Your rights and never later than the law allows, and won’t treat you differently for asking. If we turn a request down, you can appeal by replying to our answer.
Security
Every page and request uses HTTPS. Passwords are stored only as one-way hashes. Card details never reach us. Your manuscript is held encrypted only while your report is written, with its key kept apart from it, and then deleted. The copy in your browser is plain text on your own computer.
No system is perfectly secure. If a breach affects your data, we’ll tell you and the relevant authorities as the law requires.
Where data is processed
We’re based in the United States, and our providers process data in the United States and in other countries where they operate. If you’re in the UK or EU, your data is transferred to the United States.
Children
Evalie is for people 18 and over. We don’t knowingly collect data from anyone younger. If you think a child has given us data, email webmaster@evalie.app and we’ll delete it.
Changes to this policy
If we change what we collect, who receives it or how long we keep it, we’ll update this page and the date at the top, and the next time you use Evalie we’ll ask you to accept the new version.
Contact
Probalia Ventures LLC, trading as Evalie
240 Harriman Road, Irvington, NY 10533, USA
webmaster@evalie.app
See also the terms of service.