Privacy Policy of Evermake Architectural Rendering

This Privacy Policy explains how Evermake ("we", "our", "the platform") collects, uses, and protects personal information from users who access our architectural rendering service. By using Evermake, you agree to the practices described in this document.

1. Information We Collect

1.1. Account Information

Email address
Data provided by Google OAuth (email, name, profile image if available)
Account creation date and usage metadata

1.2. Usage Information

Sketches and images you upload for rendering
Technical request data (timestamps, model used, duration, status)
Available credits, credit purchase history, and credit consumption
Error logs and diagnostic information

1.3. Generated Content

Images, videos, or other assets generated through the platform
Files uploaded by the user (if applicable)

Generated assets and uploaded files are stored in Supabase Storage.

1.4. Payment Information

Payments are not processed directly by Evermake. All purchases are handled by Polar.sh, which acts as the merchant of record. Polar may collect:

Name
Email address
Payment method information (card, bank details, etc.)
Country and tax-related details (VAT/GST when applicable)

We only receive non-sensitive payment metadata such as transaction status, amount, and product purchased. We do not store or process full card information.

2. How We Use Information

We use the collected information to:

Create and maintain user accounts
Moderate user prompts and generated images/videos for prohibited content (violence, sexual content, etc.) using OpenAI's moderation API
Process image/video generation requests through AI Generation APIs (only after prompt approval)
Store and deliver generated assets
Manage credits and payments handled by Polar.sh
Provide customer support and ensure platform security
Improve the platform and monitor performance
Analyze website usage patterns using Umami analytics to improve user experience

We do not use your prompts or generated content to train models, nor do we share them with third parties beyond what is necessary to operate the service. Prompts are sent to OpenAI solely for content moderation purposes, and Evermake makes the final decision on whether to execute a generation request based on the moderation results. Generated images and videos are also moderated after creation. If generated content contains prohibited material such as violence, sexual content, hate speech, or other harmful material, the content will be rejected and credits will not be restored.

3. Third-Party Services We Use

3.1. Vercel

Used for hosting and deploying the frontend. Vercel may collect technical data such as IP address, device information, and server logs.

3.2. Supabase

Used as our backend infrastructure, including:

Database
Authentication
Storage for images and generated assets

Supabase stores generated content and metadata securely.

3.3. Google OAuth

Used solely for authentication. We only access the minimum information required to create and manage your account.

3.4. Replicate

Service used to process architectural renders from sketches. Sketches and necessary inputs are sent to Replicate to process rendering.

3.5. Polar.sh

Our payment and billing provider. Acts as the merchant of record, manages payment processing, taxes, refunds, and billing compliance. We receive only minimal metadata regarding purchases.

3.6. OpenAI

We use OpenAI's moderation API to analyze user prompts and generated images/videos for prohibited content, including violence, sexual content, hate speech, and other harmful material. Prompts are sent to OpenAI for moderation before processing, and generated content is moderated after creation. Evermake makes the final decision on whether to execute a generation request and whether to deliver generated content based on the moderation results. If generated content contains prohibited material, credits will not be restored. OpenAI does not use your prompts or generated content to train their models.

3.7. Umami

We use Umami, a privacy-focused analytics service, to understand how users interact with our platform. Umami collects anonymized usage data such as page views, referrers, and basic device information (browser type, screen size). Umami does not use cookies and does not collect personally identifiable information. All analytics data is processed in compliance with privacy regulations.

4. How We Share Information

We do not sell or trade personal information. We may share limited data only with:

The third-party providers listed above
Legal authorities when required by law

Each provider handles information under their own privacy policies and security practices.

5. Data Retention

Account data is kept as long as the user has an active account
Prompts and generated results are stored to deliver the service and maintain history
Payment records are retained as required by fiscal and regulatory obligations handled by Polar

Users may request data deletion by contacting: privacy@evermake.app

6. User Rights

Depending on your jurisdiction, you may have the right to:

Access your data
Request corrections
Request deletion
Restrict processing
Request data portability
Withdraw consent

Requests can be made via email at: privacy@evermake.app

7. Security

We use reasonable technical measures to protect data, including:

HTTPS encryption
Supabase RLS (row-level security) where applicable
Access controls based on least-privilege principles

While we strive to protect your information, no system is completely secure.

8. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this document will reflect the most recent update.

9. Contact

For privacy-related inquiries: privacy@evermake.app