EvoMind - Privacy Policy
Mistyoz AI Private Limited

OUR PRIVACY PHILOSOPHY
EvoMind is a cloud-hosted AI moderation API for developers, built by Mistyoz AI Private Limited. Because moderation is processed on our servers rather than on your device, we necessarily collect a limited set of data to make the service work. Our approach is simple: we collect only what we need to operate, bill, and protect the service, and nothing more. This policy explains exactly what we collect, why, and how it is used, so there are no surprises.

ACCOUNT INFORMATION
To create an EvoMind account, you sign in with Google. As part of this, we collect and store:
- Your name
- Your email address
- Your Google account ID
- Your preferred timezone (used to display timestamps in your dashboard)

We use this information solely to operate your account, including authentication, credit tracking, usage reporting, and responding to support requests.

API KEYS
When you create an API key, we store a one-way hash of the key, never the key itself, along with the name you give it, a short prefix for identification, its revocation status, and its creation date. Your raw API key is shown to you once at creation and is never recoverable from our servers.

USAGE DATA
Each time you make a request to the EvoMind API, we record the minimum metadata needed to operate the service and enforce billing:
- The moderation model used
- The moderation result (for example, whether the content was classified as safe or unsafe)
- The time taken to process the request (latency)
- The number of tokens processed
- The number of credits charged
- The timestamp of the request

We do not log or store the content (text or other data) you submit for moderation. That content is transmitted to our model hosting provider to generate a moderation result and is not retained by us afterward. We never use submitted content to train or improve our models.

FRAUD-PREVENTION MARKER
To grant the one-time free credit offer fairly, we store a one-way encrypted (SHA-256) hash of your Google account ID when you sign up. This marker is used only to check whether a new account is genuinely new. It cannot be reversed to reveal your Google account ID or otherwise identify you. Unlike your other data, this non-identifiable marker is retained even after your account is deleted, solely to prevent abuse of the free credit offer.

PAYMENTS & BILLING
Paid usage is billed through a third-party payment processor. We do not collect or store your payment card details or other payment credentials; these are handled directly by our payment processor under their own privacy practices. We do store records of your wallet credit balance, transactions, and payment orders so that we can manage billing on our side.

WHAT WE DON'T COLLECT
- Submitted content: We never store the text or data you send for moderation.
- Analytics & tracking: We don't use analytics tools, advertising networks, or tracking pixels on our website.
- Training data: We never use your data or submitted content to train our models.

When you visit our website, the only data stored on your device is an authentication session cookie used to keep you signed in. We don't use it for tracking.

THIRD PARTIES
Operating the EvoMind API involves the following third parties:
- Google, for Google Sign-In authentication
- MongoDB, our cloud database provider, where account and usage data is stored
- RunPod, our model hosting provider, which transiently processes content submitted for moderation
- Cashfree, our payment processor, which handles paid credit purchases

We do not use any other third-party services, analytics platforms, advertising networks, or tracking pixels in connection with the EvoMind API.

DATA RETENTION
Your account information, usage data, and billing records are retained for as long as your account is active. When you delete your account, this data is permanently removed. The one exception is the non-identifiable fraud-prevention marker described above, which is retained after deletion to prevent abuse of the free credit offer.

YOUR RIGHTS & ACCOUNT DELETION
You can delete your account at any time from Settings in your dashboard. This permanently removes your account, API keys, wallet balance, transaction history, and usage logs. You may also request deletion by contacting us at support@mistyoz.com, and we will process such requests within a reasonable timeframe.

LEGAL INFORMATION
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Mistyoz AI Private Limited is based in Hyderabad, Telangana, India, and serves users globally.

POLICY UPDATES
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Any significant changes will be clearly communicated through our website.

CONTACT & QUESTIONS
If you have any questions about this Privacy Policy or our privacy practices, or wish to request deletion of your account, please contact us at:
Email: support@mistyoz.com
Company: Mistyoz AI Private Limited
Location: Hyderabad, Telangana, India