Privacy Policy

Evalon is business software for small companies: sales, inventory, money and customer conversations in one place. This page explains what data we receive, why we need it, who it is shared with and how to delete it.

Version of 25 September 2026.

Who processes the data

The operator is Evalon (Republic of Uzbekistan). Contact us at [email protected] or on Telegram @nurkhonov_dilmurod.

We deal with two different groups of people, and the difference matters:

• Evalon users — employees of companies that created an account with us.
• Customers of those companies — people who write to a company on Instagram, Telegram or another connected channel. For their data the company is the controller and Evalon is a processor: we store and display conversations on the company's instruction and do not use them for our own purposes.

What data we receive

• Account: name, email address, phone number, role in the company, interface language.
• Company data: products, stock, orders, payments, counterparties, employees, accounting entries — everything the user enters or uploads.
• Conversations from connected channels: message text, timestamp, the correspondent's display name and channel identifier, attachment links. The user connects a channel themselves and can disconnect it at any time.
• Technical data: device address, browser details, error and request logs — needed for security and troubleshooting.

We never ask for or store passwords for Instagram, Facebook, WhatsApp or Telegram. Channels are connected through OAuth only: we receive the limited access the platform itself grants, and the access token is kept in a restricted part of the database that browsers cannot read.

Why we use it

• To show accounting data and conversations to the company's staff and let them reply to customers.
• To link a conversation to a customer record, so orders, stock and debt are visible next to the chat.
• To produce reports and sales suggestions inside the company.
• To provide sign-in, security, backups and support.

We do not sell data, do not share it with advertising networks, do not use customer conversations to train models, and never show one company's data to another.

Who we share data with

Only with processors the service cannot work without:

• Meta Platforms — when Instagram, Facebook or WhatsApp is connected, to receive incoming messages and deliver replies.
• Telegram — when a company bot is connected, for the same purpose.
• AI model providers — DeepSeek (text requests) and Google Gemini (image and voice recognition). Only what is needed for the specific answer is sent: the user's request and the related fragment of data. Model outputs are not used to further train models on our data.
• Payment services — for subscription payments; card details are entered on the payment provider's side and never reach us.

We disclose data to public authorities only upon a lawful request.

Where data is stored and for how long

Data is kept on a rented server that we administer ourselves, with key-based access only. Conversations and business records are kept while the company account is active. After a company is deleted or a channel is disconnected, data is removed within 30 days; backups are overwritten within 90 days.

Your rights

You may request a copy of your data, its correction, export or deletion. Write to [email protected] — we reply within 30 days. The deletion procedure is described on the data deletion page.

Changes

If this policy changes, the new version appears on this page with a new date, and we announce material changes inside the product.