Privacy Notice
This Notice describes how eVamb Technologies Inc. ("eVamb", "we", "us") collects, uses, stores, shares, and protects personal information processed through evamb.com, neekos.evamb.com, connext.evamb.com, connextdoctors.evamb.com, connextrefer.evamb.com, and any product workspace operated under those domains.
1 · Who we are
eVamb Technologies Inc. is the data controller. Contact for any privacy matter: privacy@evamb.com. For escalation: niket@evamb.com. Registered Toronto, Canada.
2 · What we collect
- Account data — name, email, password hash, phone (optional), profile photo if you sign in with Google.
- Usage data — pages visited, features used, anonymised performance metrics. Loaded only after you accept analytics cookies.
- Product data per surface:
- neekOS Business AI Suite — listing inputs and generated marketplace output.
- Connext (business networking) — company profile, posts, follows, direct messages.
- Connext Doctors — clinic + practitioner profile, referral records, patient consent flags. Patient personally-identifying data is end-to-end encrypted in transit and at rest.
- Connext Refer — résumés you upload, run history, generated documents, job matches.
- Voice / call data — Aria voice agent records calls only with an explicit consent banner played at the start of each call; recordings retained 90 days then deleted.
- Communications — emails you send us, contact-form submissions.
3 · Lawful basis
- Contract — to provide the Service you signed up for.
- Legitimate interest — to keep the Service running, secure, and improving.
- Consent — for analytics cookies, marketing email, voice-call recording, and processing of any special-category data (e.g. Connext Doctors health information).
- Legal obligation — to comply with tax, accounting, anti-fraud, and lawful disclosure requests.
4 · Where it lives
Account data + Firestore documents: Google Cloud (Firebase), US/EU multi-region. Supabase product data (Connext, Connext Doctors, Connext Refer): AWS / Supabase us-east-1. Voice transcripts: ephemeral in-memory plus 90-day retention on encrypted object storage. Connext Doctors patient-identifying records: AES-256 encrypted at rest, TLS 1.3 in transit, access audit log retained 7 years. We do not sell or share personal data with data brokers.
5 · Who can see it
- You — full read access to your own data.
- Our engineering team — access on a need-to-know basis. All access to Connext Doctors patient records is logged and audited.
- Service providers — Google Firebase, Supabase, Anthropic, AWS Bedrock, ElevenLabs, Vapi, Stripe, Resend. Each operates under a Data Processing Agreement.
- Law enforcement — only on a valid legal order.
6 · Your rights
Regardless of jurisdiction, you have the right to access, correct, delete, port, restrict processing of, and object to processing of your personal data. Email privacy@evamb.com to exercise any of them. We respond within 30 days (45 days for CCPA verifiable consumer requests).
7 · International posture
For residents of the EU/EEA (GDPR), UK (UK GDPR), California (CCPA/CPRA), Quebec (Law 25), Canada (PIPEDA), Brazil (LGPD), Singapore (PDPA), India (DPDP), and South Africa (POPIA), the rights described above are honoured in substantively similar form. We do not refuse requests on the basis of jurisdiction.
8 · Health data (Connext Doctors)
Connext Doctors is operated to PIPEDA standards in Canada and HIPAA-aware standards in the US. We are not a covered entity under HIPAA but operate as a Business Associate where required. Patient records are end-to-end encrypted and accessible only to the originating clinic and the receiving specialist. Audit log retained 7 years.
9 · Children
The Service is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has created an account, email privacy@evamb.com and we will delete the account and associated data within 7 days.
10 · Retention
Account data: kept while your account is active plus 30 days after deletion request. Usage logs: 90 days. Voice transcripts: 90 days. Connext Doctors audit logs: 7 years (regulatory requirement). Contact-form messages: 24 months. Backups: 30-day rolling.
11 · Cookies
See the dedicated Cookie Policy. We use essential cookies (to keep you signed in) and, with your consent, analytics cookies. We do NOT use advertising cookies or cross-site tracking.
12 · Changes
We will notify you of material changes by email (for account holders) and by an in-app banner. The "Effective" date at the top reflects the most recent revision.
13 · Contact
For any privacy, data, or account question: privacy@evamb.com. For Super-Admin escalation: niket@evamb.com.