Privacy Policy

1. Introduction

1.1 This Privacy Policy explains how EVO GLOBAL TECHNOLOGIES LIMITED ("EvoLink", "we", "us", or "our") collects, uses, shares, and protects information when you use the website evolink.ai, our API, the software development kits, command-line tools, MCP servers, and other developer tools we publish, and related services (together, the "Service").

1.2 By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

1.3 This Privacy Policy should be read together with our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service.

2. What EvoLink Does and Does Not Do

2.1 EvoLink provides AI model infrastructure for production teams. We operate the API, routing, billing, and reliability layer through which you send requests to AI models operated by third-party model providers ("Model Providers").

2.2 EvoLink does not create, author, edit, or endorse the content returned to you. The text, images, audio, video, or other content generated in response to your request ("Outputs") is generated by the Model Provider operating the model you select. EvoLink's role is to transmit your request to that Model Provider and return the result to you.

2.3 We do not routinely review your Inputs (defined in Section 3.2) or Outputs. Authorized personnel may access them only where necessary to: (a) troubleshoot a problem at your request, or diagnose a service issue affecting your requests; (b) investigate suspected abuse, security incidents, or violations of our Terms of Service, including matters flagged by automated abuse detection; or (c) respond to legal requests. Such access is limited to what is necessary for that purpose.

3. Information We Collect

3.1 Information you provide to us

• Account information: email address, username, company name, and password.
• Third-party sign-in: if you sign in with Google or GitHub, we receive your name, email address, and account identifier from that provider, within the scope permitted by your settings there.
• Billing information: payment history and invoicing details. Card details are collected and processed by our payment processor, Stripe; we do not store full card numbers.
• Communications: messages you send to us for support or other inquiries.

3.2 API Inputs and Outputs

"Inputs" means the prompts, files, images, audio, video, and other data you submit to the Service through the API, the web interface, or our developer tools. Inputs and Outputs may contain personal data if you include it. Section 4 explains how we handle them.

3.3 Information collected automatically

• Usage metadata: API request timestamps, the model requested, token or unit counts, response status, latency, and consumption records.
• Technical data: IP address, browser type, operating system, device identifiers, and the type and version of the client software (such as a browser, SDK, CLI, or agent host application) you use to access the Service.
• Log data: server logs, error reports, and security events.
• Cookies and similar technologies, as described in Section 8.

3.4 Developer tools

When you use our CLI, MCP server, or SDKs: (a) the prompts, files, and parameters you pass through them are Inputs under Section 3.2 and are handled as described in Section 4; and (b) these tools authenticate to the Service with your API key, which we use only to identify your account and authorize your requests. If you install these tools through a third-party marketplace or package registry, that platform's own privacy policy applies to the information it collects.

4. How We Handle API Inputs and Outputs

4.1 What we do not do. We do not: (a) use your Inputs or Outputs to train, fine-tune, or improve any machine learning model; (b) sell your Inputs or Outputs or use them for advertising; (c) routinely have people read your Inputs or Outputs (see Section 2.3); or (d) disclose your Inputs or Outputs to third parties, except to the Model Provider you select, to the infrastructure providers that host or secure the Service, or as otherwise described in Section 6.

4.2 Transmission to Model Providers. When you submit a request, your Inputs are transmitted to the Model Provider operating the model you select. If you enable automatic routing, load balancing, or fallback, your Inputs may be transmitted to a comparable Model Provider within the scope you configured. Each request is your instruction to us to transmit the Inputs to that Model Provider. Model Providers handle your data under their own terms; see Section 7.

4.3 Purposes. Apart from transmission to Model Providers, we process Inputs and Outputs only to deliver the response to you, to bill you, to keep the Service secure, to detect and prevent abuse, to troubleshoot problems at your request or diagnose service issues affecting your requests, and to comply with law.

4.4 Retention. We keep Inputs and Outputs only for as long as necessary for the purposes described in Section 4.3. Usage metadata is stored separately from content.

4.5 Where you submit personal data of other people. If your Inputs contain personal data of your own users or other individuals, you are the data controller of that data and we process it on your instructions. A Data Processing Agreement is available on request.

4.6 Service quality analysis. To monitor and improve the reliability and quality of the Service, we may analyze Inputs and Outputs using automated methods, after aggregation or de-identification, for example to measure error rates, detect malformed or empty responses, and compare the performance of models and routes. This analysis is not used to train any model (see Section 4.1) and does not involve routine human review of individual Inputs or Outputs (see Section 2.3).

5. How We Use Information

We use the information we collect to:

• provide, operate, and maintain the Service, including transmitting your requests to Model Providers and returning Outputs to you;
• create and manage your account and authenticate you;
• process payments, apply credits, and issue invoices;
• monitor the usage of the Service and improve its performance and reliability;
• detect, investigate, and prevent fraud, abuse, and security incidents;
• respond to your support requests and send you service announcements and, where permitted, product updates that you can opt out of;
• comply with legal obligations and enforce our Terms of Service.

6. How We Share Information

6.1 We do not sell your personal data.

6.2 We share information only in the following cases:

• Model Providers: your Inputs are transmitted to the Model Provider you select, as described in Sections 4 and 7.
• Service providers acting on our behalf: payment processing (Stripe), network security and content delivery (Cloudflare), website analytics (Google), and the cloud infrastructure providers that host the Service. These providers may use the information only to provide their services to us.
• Sign-in providers: if you sign in with Google or GitHub, those providers receive the information necessary to authenticate you, under their own privacy policies.
• Legal reasons: to comply with law, regulation, legal process, or governmental request; to enforce our Terms of Service; or to protect the rights, property, or safety of EvoLink, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets. This Privacy Policy will continue to apply to the transferred information.
• With your consent or at your direction.

6.3 We may share aggregated or de-identified information that cannot reasonably be used to identify you.

7. Third-Party Model Providers

7.1 The Model Provider you select processes your Inputs and generates Outputs under its own terms and privacy policy. Those terms are set by the Model Provider and are outside the scope of this Privacy Policy.

7.2 Model Providers' terms differ and may change. We encourage you to read the terms and privacy policy of the Model Provider that operates a model before using it.

7.3 Some Model Providers restrict the use of their models from certain countries or regions, or by certain categories of users. Those restrictions apply to you when you use such models through the Service.

8. Cookies and Analytics

8.1 We use cookies and similar technologies for: (a) essential purposes, such as keeping you signed in and protecting against fraud; (b) preferences, such as remembering your settings; and (c) analytics, to understand how the Service is used.

8.2 For analytics we use Google Tag Manager and Google Analytics. Google Analytics sets cookies and collects information such as pages visited, approximate location derived from your IP address, and device and browser information. Google processes this information under its own privacy policy.

8.3 We do not use your information for targeted advertising on third-party websites.

8.4 You can control cookies through your browser settings and opt out of Google Analytics using the Google Analytics opt-out browser add-on. Disabling essential cookies may prevent parts of the Service from working.

9. Data Security

9.1 We protect information using measures that include: encryption in transit using TLS 1.2 or higher; separation of content data from usage metadata; access controls that limit access to personnel who need it; and network protection including DDoS mitigation and a web application firewall.

9.2 No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your API keys and account credentials confidential.

9.3 If we become aware of a personal data breach affecting your data, we will notify you without undue delay and within any time limit required by applicable law.

10. International Data Transfers

10.1 EvoLink is based in Hong Kong. Information may be processed in Hong Kong and in other jurisdictions, including the jurisdictions where our service providers and the Model Providers you select operate.

10.2 Where a transfer is subject to data protection law that requires safeguards, we implement appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission or other recognized transfer mechanisms.

11. Your Rights and Choices

11.1 Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; receive a copy of your data in a portable format; object to or restrict certain processing; and withdraw consent where processing is based on consent.

11.2 You can view and update your account information in the dashboard. To delete your account, contact us.

11.3 To exercise any of these rights, email [email protected]. We will respond within 30 days. We may need to verify your identity before acting on a request.

11.4 You can opt out of marketing emails using the unsubscribe link in each email. We will continue to send you service-related messages.

12. Additional Information for Specific Regions

12.1 Hong Kong. EVO GLOBAL TECHNOLOGIES LIMITED is a data user under the Personal Data (Privacy) Ordinance (Cap. 486). You may make data access and data correction requests under that Ordinance by contacting us as set out in Section 16.

12.2 European Economic Area, United Kingdom, and Switzerland. Our legal bases for processing are: performance of our contract with you (to provide the Service); our legitimate interests (security, fraud prevention, service improvement, and communication with you); your consent, where we ask for it, which you may withdraw at any time; and compliance with legal obligations.

12.3 California and other U.S. states. We collect the categories of personal information described in Section 3 (identifiers, commercial information, internet activity, and approximate geolocation derived from IP address) for the purposes described in Section 5. We do not sell personal information and do not share it for cross-context behavioral advertising. You have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights. You may designate an authorized agent to make requests on your behalf.

13. Your Responsibilities

13.1 You must use the Service in compliance with all laws that apply to you, including the laws of the country or region where you are located and where your end users are located.

13.2 You are responsible for the lawfulness of your Inputs and for the use you make of Outputs. If your Inputs contain personal data of others, you must have the rights, consents, and lawful basis needed to submit that data to the Service and to have it processed by the Model Providers you select.

13.3 You must comply with the usage policies and regional restrictions of the Model Providers whose models you use, and with our Terms of Service, including the Acceptable Use Policy.

13.4 If you provide the Service to your own end users, you are responsible for their compliance with this Section and for providing them with any privacy notice required by law.

14. Eligibility

The Service is intended for businesses and developers and is available only to individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe we have collected personal data from a person under 18, contact us and we will delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. If a change is material, we will also notify registered users by email or through the Service before it takes effect. Your continued use of the Service after the effective date means you accept the updated Privacy Policy.

16. Contact Us

For privacy-related questions or requests, contact us: