01Who we are
Exolvra is a product of EvolvLabs, LLC ("EvolvLabs," "we," "us," or "our"), a limited liability company organized in the State of Maryland, United States. This policy is issued by EvolvLabs as the data controller for personal information collected through this website.
02Scope: this website vs. the self-hosted product
This policy covers the marketing website at exolvra.ai and the waitlist. It does not describe data processed inside a deployed instance of the Exolvra software.
Exolvra is self-hosted: you install and run it on your own servers, your own desktop, or your own cloud account. Projects, issues, agent activity, documents, model API traffic, and any data your agents read or write are stored and processed entirely within your environment. EvolvLabs does not operate that environment and does not receive, store, or have access to that data. A hosted Cloud edition is planned for the future and will be covered by its own data-processing terms when it launches.
03Information we collect on this website
- Waitlist details: the email address you submit, and the fact that you submitted it (with a timestamp and your approximate position in line). This is provided voluntarily.
- Communications: if you email us (for example, [email protected]), we receive your message and contact details.
- Technical and usage data: like most websites, our hosting and content-delivery provider automatically logs basic technical information such as IP address, browser and device type, referring page, and pages requested, for security, abuse prevention, and aggregate analytics.
We do not knowingly collect special-category or "sensitive" personal data through this website, and we do not ask you to provide it.
04How we use it
- To add you to the waitlist and contact you about access, the launch, and product updates you signed up for.
- To respond to your questions and provide support.
- To operate, secure, and improve the website, and to prevent fraud or abuse.
- To comply with legal obligations.
Our legal bases (where the EU or UK GDPR applies) are your consent for waitlist and marketing email, our legitimate interests in running and securing the site, and legal obligation where applicable. You can withdraw consent at any time. See Section 09 for more.
05Cookies and analytics
We aim to keep the site light. We do not use advertising cookies or sell behavioral data. We rely on our hosting provider's privacy-respecting, aggregate analytics and essential operational logs rather than cross-site trackers. Our cookie banner lets you choose between essential cookies only and accepting analytics, and we ask for consent before any non-essential cookies where required.
06How we share information
We share personal information only with service providers that help us run the website and waitlist, and only as needed:
- Hosting and content delivery: our website and waitlist are served through Cloudflare, which processes technical data and stores waitlist entries on our behalf.
- Email: providers we use to send and receive waitlist and support email.
- Legal and safety: we may disclose information if required by law, or to protect the rights, safety, and security of EvolvLabs, our users, or the public.
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.
07Data retention
We keep waitlist email addresses until you ask us to remove them or until they are no longer needed for the purpose you provided them. Operational and security logs are kept for a limited period consistent with our providers' defaults and our security needs. We delete or anonymize personal data when it is no longer required.
08Your rights and how to exercise them
Wherever you live, you can ask us to access, correct, or delete the personal information we hold about you, and you can opt out of marketing at any time using the unsubscribe link in any email. To make a request, email [email protected] with enough detail for us to identify you and your request, or write to us to be removed from the waitlist.
We may need to verify your identity before we act, usually by confirming control of the email address on file, and we will not use that information for any other purpose. You may use an authorized agent to submit a request on your behalf, subject to reasonable proof of authorization. We do not charge a fee for a reasonable request, we will not discriminate against you for exercising your rights, and we respond within the timeframes set by applicable law. Region-specific rights are described in the next two sections.
09EEA, UK, and Swiss residents (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR (or UK GDPR) applies and EvolvLabs is the controller of your personal data.
Legal bases. We process your data on the basis of your consent (waitlist and marketing email), our legitimate interests in operating and securing the website (balanced against your rights and freedoms), and legal obligation where applicable. Where we rely on consent, you may withdraw it at any time, which does not affect processing already carried out.
Your rights. You have the right to access your data and obtain a copy; to have inaccurate data corrected; to have your data erased; to restrict or object to processing; to data portability; and to withdraw consent. You also have the right to lodge a complaint with your local data protection supervisory authority, although we would welcome the chance to address your concern first.
International transfers. We are based in the United States. Where your data is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK addendum. See Section 12.
EU/UK representative. Where an Article 27 representative is required, we will appoint one and identify them here. In the meantime, send any GDPR request to [email protected].
Automated decisions. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing through this website.
10California residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights below. This section also serves as our notice at collection.
Categories of personal information we collect. In the past 12 months, this website has collected:
- Identifiers (such as your email address and IP address). Source: you and your device. Purpose: to run the waitlist, communicate with you, and secure the site.
- Internet or network activity (such as pages viewed, browser and device type, and referring page). Source: your device. Purpose: aggregate analytics, security, and abuse prevention.
We do not collect government identifiers, financial or payment information, precise geolocation, biometric information, or "sensitive personal information" through this website.
No sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. Because we do not sell or share, we do not provide a "Do Not Sell or Share My Personal Information" link; if that ever changes, we will add one. We do not collect or use sensitive personal information in a way that would trigger the right to limit its use.
Your rights. You have the right to know and access the personal information we have collected and how we use it; to delete it; to correct inaccurate information; to opt out of sale or sharing (not applicable, as noted above); and to not receive discriminatory treatment for exercising your rights.
How to exercise them. Submit a request by emailing [email protected]. We will verify your request, typically by confirming control of the email on file, and you may use an authorized agent with proof of authorization. We respond within 45 days, with an extension where the law allows. Under California's "Shine the Light" law, we do not disclose personal information to third parties for their own direct marketing.
11Security
We use reasonable administrative and technical safeguards to protect the limited personal information this website handles, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and to disclose incidents as required by law. For how we approach security in the product, see our Security page.
12International data transfers
EvolvLabs is based in the United States, and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers of personal data.
13Children's privacy
This website and the waitlist are intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.
14Changes to this policy
We may update this policy as our products and practices evolve. When we do, we will revise the "Last updated" date above, and for material changes we will take additional steps where required by law. Your continued use of the website after an update means you accept the revised policy.
15Contact us
Questions or requests about privacy, including GDPR and CCPA requests: [email protected]. General contact: [email protected]. A postal address for formal notices is available on request.