Privacy Policy

Last updated: October 4, 2026

1. Information We Collect

Account Data: Signing in with Google gives us only your name, email address, and profile picture. We do not access anything else from your social account.

Usage Data: We keep track of the product features you use, such as verifications, summaries, chats, and similar analysis actions, along with the YouTube video IDs you analyze. We use this to enforce plan limits, improve the service, and show your activity dashboard.

Processing Data: We process whatever content you submit, be it a YouTube transcript, web page content, or PDF text, along with any related questions you ask in the product. We use it to produce analyses, summaries, and source-based answers.

Device and Security Data: We may store your device type, browser or app metadata, and IP address whenever you sign in or link a device. This helps us manage active devices, improve account security, and enforce device limits.

API Tokens: Each installation generates its own unique API token. The token is kept locally on your device, while our servers store a hash of it.

Diagnostic Data: We may send technical diagnostics to our monitoring provider when the mobile app or browser extension fails unexpectedly, so we can investigate and fix stability issues. Such reports contain error messages, stack traces, the app or browser version, and device metadata, but we do not intentionally include transcript content, chat prompts, or authentication secrets in them.

2. How We Use Your Information

  • To provide and improve the EvidenceLens service
  • To manage your account and subscription
  • To enforce usage limits based on your plan
  • To handle the source-based AI results you request
  • To keep track of active devices and protect your account
  • To show your activity and usage statistics
  • To find, diagnose, and fix application errors and crashes

3. Data Sharing

We do not sell your personal information, and the parties listed below are the only ones we share data with:

  • Stripe: For payment processing, which involves your email and subscription data
  • Google: At OAuth sign-in, and whenever AI requests are processed through the Google AI services we have selected
  • Apple & Google Play: Used to verify App Store purchases and for Apple sign-in. Android purchases are also processed and verified by Google Play.
  • Sentry: For monitoring errors and reporting diagnostics
  • Google Analytics & Google Ads: For aggregated website usage statistics and Google Ads conversion measurement. Consent Mode adjusts how cookies are stored according to your choice.

4. Cookies and Analytics

Essential cookies: These cookies keep you signed in, remember your language, and store your cookie choice. We set them without asking because the site cannot function without them, and setting strictly necessary cookies this way is permitted.

Analytics cookies: Google Analytics 4 and Google Ads conversion measurement show us which pages are visited, how the site performs, and whether an ad led to a visit. Through Consent Mode, Google tags follow your choice. When storage is denied, privacy-preserving measurement pings may still go out, but without cookies.

We do not use advertising cookies, enhanced conversions, or personalized advertising. To withdraw your consent at any time, clear this site’s cookies in your browser; the banner then reappears.

5. Data Retention and Deletion

Your account and usage data are kept while your account remains active. Whenever you choose, you can permanently delete the account, along with all associated data, in your account settings. Full instructions, covering how to request deletion if you cannot sign in, are available on our account deletion page.

Content is held temporarily in the processing queue so we can complete your request. We may cache analysis results for reuse, and those results can contain quotations from the submitted content.

Saved analyses remain until you delete them or delete your account. Shared research caches work differently: they are not tied to your account and can remain independently of it.

A public result link is created only when you choose to share a result. Anyone with the link can view the result you selected, and disabling the link removes its public snapshot.

6. Security

API tokens are stored as SHA-256 hashes, and all communication is sent over HTTPS. Every JWT token expires after 30 days.

7. Contact

If you have questions about this policy, you can reach us at support@evidence-lens.com.

In its use and transfer of information received through its Chrome extension, EvidenceLens complies with the Chrome Web Store User Data Policy, including the policy’s Limited Use requirements.