Privacy Policy

1. Who this policy covers

Eva is operated by Oakbrook Agency. This policy covers the Eva website and account service, and creator-workspace features where they are enabled. Contact us about support or privacy at oakbrookagencyy@gmail.com.

An Eva login is separate from a creator-platform connection. Creating an account does not automatically connect Fanvue or OnlyFans, import creator data, or give you access to another customer’s workspace. New members can connect authorized Fanvue creators after creating a workspace and explicitly choosing a plan for each creator, including Free. New OnlyFans connections are not currently available.

2. Information we collect

Account information includes your name, email address, verification status, profile image when supplied, login-provider identifier, and account creation or update timestamps. For email/password accounts, when available, Eva stores a salted password hash rather than a readable password. Eva does not receive your Google password.

Authentication records may include provider tokens, session identifiers, expiry dates, IP addresses, browser information, and rate-limit records. Hosting and security services may also process request and diagnostic logs. If you contact support, we receive the information you include in that communication.

For enabled and authorized creator workspaces, data may include creator profiles, platform identifiers and connection tokens, chats, content and media metadata, purchase and tip records, custom-order information, AI settings, and fan-memory details drawn from conversations. Those details can include birthdays, jobs, pets, interests, and sensitive information contained in messages. Do not submit information you lack permission to process or information unnecessary for the service.

3. Google sign-in

Google sign-in requests basic identity access to authenticate you: your Google account identifier, name, email and verification status, and profile image when available. It does not request access to Gmail messages, Google Drive files, contacts, or calendars.

Eva uses this information to create and secure your Eva account. Google login data is not used as input to Eva’s creator-conversation generation. Signing in with Google does not connect a creator account or authorize sending messages. You can review or revoke Eva’s access through your Google Account’s third-party connections settings; revocation does not itself delete records already stored by Eva.

4. Why we use information

We use information to authenticate accounts, maintain sessions, enforce access controls, prevent abuse, respond to support requests, and operate or troubleshoot the service. When creator features are enabled, we also use authorized workspace data to organize chats and sales, maintain fan memory, prepare AI responses, and carry out the actions permitted by workspace settings.

The public inbox demonstration uses fictional sample conversations. Text typed into that demo is held in the page’s temporary interface state; it is not sent as a real creator message or submitted for AI generation by the demo.

5. Service providers and AI processing

Eva uses third parties to deliver the service. Current infrastructure includes DigitalOcean for hosting and Cloudflare for website delivery and security. Google handles Google sign-in. Resend is the planned provider for verification and password-reset emails when email signup is enabled.

For enabled creator conversations, relevant messages, creator instructions, fan-memory context, and other necessary inputs may be sent to an AI provider to generate or evaluate responses. The current conversation integration uses xAI. Connected creator platforms and their API providers receive requests and data needed for authorized platform actions. Google sign-in alone does not trigger this processing.

Provider retention and use of data depend on the applicable service terms and account configuration. Eva does not claim that all providers have zero retention or that conversation data can never be used for model improvement. New OnlyFans connections remain unavailable. Google login information is used for account access and security, not advertising or model training.

Authorized personnel may access information when needed for support, security, or service operation. Information may also be disclosed where legally required, to address fraud or security incidents, or in a business transfer subject to applicable protections and notice requirements. Our service providers may process information in the United States and other countries, whose privacy laws may differ from those where you live. Contact us for questions about processing locations and applicable safeguards.

6. Cookies and browser storage

Eva uses authentication and session cookies to complete sign-in and keep you signed in. The workspace also uses browser storage for interface preferences, selected creators, and cached application data where those features are enabled. These are different from the information held on Eva’s servers.

Blocking cookies may prevent sign-in from completing. Signing out ends the current session, but does not automatically erase all server records or sign you out on other devices. You can clear site data using your browser settings. Google, Cloudflare, and connected platforms may have their own cookie and privacy practices.

7. Retention and deletion

Eva retains account and workspace records for service operation, security, dispute handling, and applicable legal obligations. Retention depends on the type of information, the status of your account, the purpose for keeping it, and applicable requirements. Automatic deletion of all expired records is not currently implemented. You may request account closure or deletion at oakbrookagencyy@gmail.com; requests are reviewed subject to identity verification and applicable exceptions.

Signing out, disconnecting a platform, deleting browser storage, and requesting deletion of an Eva account are separate actions. Data already sent to a creator platform, including delivered messages or platform transaction records, is not necessarily removed when an Eva account is deleted. Residual backup or legally required records may need separate handling.

8. Your choices and privacy requests

Depending on your location and the circumstances, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to processing, withdraw consent, or complain to a privacy authority. Applicable rights and exceptions are not limited by this policy.

Email oakbrookagencyy@gmail.com to make a privacy request. We may need to verify identity and authority before acting; do not send passwords or API secrets. Fans whose information is processed for a creator should identify the relevant creator so the request can be directed appropriately. Creator customers and Eva may have different responsibilities for that information.

9. Security and age restrictions

Eva uses access controls and authentication protections, including hashed local passwords and secure session cookies in production. No system is completely secure, and this policy is not a promise that a breach or service interruption cannot occur.

Eva is intended for users aged 18 or older who are authorized to manage the relevant accounts. Do not submit information or content involving minors. Report suspected underage use or unauthorized access to oakbrookagencyy@gmail.com.

10. Updates and contact

Changes will be reflected in the policy’s published update date. Material changes will be communicated as required by applicable law. An updated policy does not by itself supply consent for a new use of previously collected information when separate consent is required.

Operator: Oakbrook Agency. Support and privacy contact: oakbrookagencyy@gmail.com. Please include enough information to identify your request, but do not email passwords, API keys, or other authentication secrets.