1. Who We Are

EvidentROI ("we," "us," or "our") is a B2B SaaS product that helps finance leaders track and report the net dollar return of their AI automation investments. EvidentROI is operated by its founder and is based in Connecticut, United States.

If you have any questions about this policy, contact us at: help@evidentroi.com

2. Information We Collect

Information You Provide

• Account information — name, email address, and password when you create an account
• Business information — company name, industry, and team size provided during onboarding
• Automation data — agent names, cost inputs, ROI figures, and related data you enter into the dashboard
• Payment information — billing details processed securely through Stripe (we never store card numbers)
• Support communications — messages you send us via email or support channels

Information Collected Automatically

• Usage data — pages visited, features used, session duration, and click patterns
• Device and browser information — browser type, operating system, IP address, and time zone
• Log data — error logs and performance data used to maintain and improve the service

Information from Third Parties

• Stripe — payment status and subscription tier (not card details)
• Supabase — our database and authentication provider stores your account and app data securely

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the EvidentROI platform
• Process payments and manage your subscription
• Send transactional emails (account confirmations, payment receipts, alerts)
• Respond to support requests and communicate with you about your account
• Improve the product based on usage patterns and feedback
• Comply with legal obligations
• Detect and prevent fraud or unauthorized access

We do not use your data to train AI models, sell to advertisers, or share with data brokers.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe — to process payments and manage subscriptions
• Supabase — to store and manage your account and automation data
• Anthropic (Claude API) — when you use the Morgan AI Advisor feature, your queries are processed by Anthropic's API. No personally identifiable information is sent unless you include it in your query.
• Railway — our secure backend infrastructure provider
• Legal authorities — if required by law, court order, or to protect our rights

All third-party providers are bound by their own privacy policies and data processing agreements.

5. Data Storage and Security

Your data is stored in Supabase, which uses PostgreSQL with Row Level Security (RLS) enabled. This means each user can only access their own data.

We implement the following security measures:

• HTTPS encryption on all data in transit
• Row Level Security on all database tables
• API keys stored on secured backend servers — never exposed in browser code
• Authentication managed through Supabase Auth with email verification

No method of data transmission or storage is 100% secure. We take commercially reasonable steps to protect your information but cannot guarantee absolute security.

6. Data Retention

We retain your account and automation data for as long as your account is active. If you cancel your subscription or request deletion:

• Your account data is deleted within 30 days of your request
• Backup copies may persist for up to 90 days before being fully purged
• Payment records may be retained for up to 7 years for tax and legal compliance

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data. Users in the European Union have rights under GDPR, and users in California have rights under CCPA. These rights include but are not limited to:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and personal data
• Portability — export your automation data via CSV at any time from within the app
• Objection — object to certain types of data processing

To exercise any of these rights, email us at help@evidentroi.com. We will respond within 30 days.

8. Beta Features

Certain features of EvidentROI, including the Morgan AI Advisor and AI Spend Forecaster, may be designated as beta or preview features. Beta features are provided as-is and may be modified, limited, or discontinued at any time without prior notice. Data processed through beta features is subject to the same privacy protections as the rest of the Service.

9. Cookies

EvidentROI uses minimal cookies and local session storage necessary to keep you logged in and maintain your preferences. We do not use advertising or tracking cookies. We do not use third-party analytics cookies.

10. Children's Privacy

EvidentROI is a business-to-business service intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has provided us with personal information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify active users by email. Your continued use of EvidentROI after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us