- We collect only what we need to reply and deliver your project.
- We never sell your data or use it for ads.
- We never show your name or project without written permission.
- You can ask for a copy of your data or its deletion at any time.
01Who we are and what this covers
Evan Code is a remote software studio serving clients in Saudi Arabia, Yemen and the wider Arab region. We are responsible for the data collected through this site and our official channels.
This policy covers the site and its forms, private proposal and brief pages, consultation booking, the EvanX assistant, job applications and the client portal.
02What we collect
Data you give us:
- Project form: name, company, email, phone and your idea.
- Private briefs and proposals: your answers and any files you upload.
- Consultation booking: name, email, WhatsApp number, the chosen time and any note.
- Job applications: your application and CV.
- Client portal: your sign-in email and what you share in your project space.
Technical data collected automatically:
- An anonymous visitor ID stored in your browser, browser and device type, country (derived from your IP, which we don't store in full) and pages visited.
- Basic security logs to prevent abuse and repeated requests.
We do not collect payment card data on this site.
03Why we use it
- To reply and prepare a written proposal or estimate.
- To confirm and remind you of consultations.
- To deliver, track and hand over your project once agreed.
- To run the client portal and protect accounts.
- To understand site usage in aggregate and improve it.
- To prevent fraud and spam and meet legal obligations.
We never sell or rent your data, or use it to target you with ads.
04The EvanX assistant
When you chat with the assistant, your messages are sent to an AI provider (such as Google Gemini or OpenAI) to generate replies, and the conversation is saved so we can follow up.
Please don't share passwords, bank details or sensitive information in the chat. We never use client project data to train any AI model.
06Service providers and cross-border processing
We rely on trusted providers who process data on our behalf and only on our instructions:
- Vercel: site hosting.
- Render: our server and APIs.
- Supabase: database, sign-in and file storage.
- Brevo: email delivery.
- Google and OpenAI: assistant replies.
Data may be processed in data centres outside your country. We choose providers with recognised safeguards and send them as little data as possible.
07How we protect data
- Encrypted connections (HTTPS) on every page.
- Private proposal and brief links use secret tokens, and we store only a hash of each token.
- Access limited to people who need it, with extra protection on the admin account.
- Rate limits against abuse and regular security reviews.
No system is 100% secure, but if a breach affects your data we will tell you what happened and what we did within a reasonable time.
08How long we keep it
- Enquiries and consultations that don't become a project: up to 24 months, then deleted or anonymised.
- Project, contract and invoice records: for the project and as long as accounting rules require.
- Job applications: up to 12 months unless you ask us to delete them sooner.
- Technical statistics: aggregated so they don't identify you.
09Your rights
- Ask for a copy of your data.
- Correct inaccurate data.
- Delete your data when there's no legal or contractual reason to keep it.
- Object to a specific use or withdraw consent.
Email evancode.dev@gmail.com from the address you contacted us with, and we'll respond within 30 days at most.
10Children
Our services are for businesses and project owners, not for anyone under 18, and we don't knowingly collect their data.
11Changes to this policy
We may update this policy as our services or the law change. We update the version and date at the top of the page and email current clients about material changes.