Privacy Policy

What we collect

Things you give us

• Your username: to use Ask or Talk you choose a username on evelyss.com. We store the username and a scrambled copy of a random key that your browser keeps; there is no password and we don’t ask for your email. Usernames may not contain profanity or anything that looks like a phone number or an email address.
• Ask Evelyss (/ask/): your username, shown on screen with your question, and the question. You tick a consent box before sending. We store both.
• Talk (/talk/): the messages you write to Ms. Evelyss and her replies. No account is needed. We store the conversation. With each message we also note your browser’s time zone and your approximate area (city level, worked out from your connection, with coordinates rounded to about 10 km), so she can answer with your local time of day and weather in mind. We never ask for or use your precise location. If you choose to send Ms. Evelyss a photo of your outfit or makeup (18+ only), it is private: it is never posted or shown to anyone else, it is used only to answer you, and it is sent to the provider of the AI service that writes her reply for that purpose alone. Your browser shrinks the photo and removes its location and camera data before sending. We keep photos until you ask us to delete them (hello@evelyss.com), and for no more than 30 days once automatic removal is switched on.
• The public wall (on /talk/): unless you tick “Keep mine private”, a text question and her answer may be shown publicly with your username, your city and your local time and weather when you asked. Photo questions are never shown, and every post is checked first so that nothing personal, rude or misleading appears. Ask us to remove any post at hello@evelyss.com.
• Inner circle email signup: your email address, if you choose to join.
• Email to us: whatever you include when you write to hello@evelyss.com.
• Interview room (askevel.evelyss.com): the interviewer’s sign-in details, questions and the session transcript.

Things collected automatically

• Our own analytics: a simple beacon that records the page path you visited, the referring page, and a salted hash of your IP address. We never store your raw IP address in our analytics.
• Rate limiting: Talk uses a salted hash of your IP address to limit how many messages can be sent, to prevent abuse.
• Country lookup: to show UK visitors UK shopping links, we look up the country your connection comes from. We use the country only.
• Standard server logs kept by our hosting provider for security and operation of the Site.

We do not ask for, and ask you not to send, sensitive information such as health details, financial account numbers or government ID numbers in a question or message.

How we use it

• To answer your Ask Evelyss question, which may be shown, quoted and used in her videos and posts with the name you gave us (see our Terms of Use).
• To run Talk and to improve Ms. Evelyss’s answers by reviewing past conversations.
• To send the inner circle emails you signed up for.
• To reply to you when you write to us.
• To understand which pages are read, keep the Site secure, prevent abuse and fix problems.
• To meet legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for targeted advertising across other companies’ sites.

Who we share it with

We share information only with service providers that help us run the Site, under instructions to use it only for that purpose:

• our hosting provider (serves the Site and stores submissions);
• our email provider (sends and receives email, including inner circle emails);
• the provider of the AI service that generates Ms. Evelyss’s written replies on Talk, which receives the text of your messages and any photo you choose to send, to produce a reply;
• a weather service, which receives only rounded coordinates (no message, no IP address) to return local conditions and the week’s forecast for Talk;
• a web-font provider, which receives standard technical data (such as your IP address) when your browser loads the Site’s fonts.

We may also disclose information if the law requires it, to protect the rights and safety of people or the House, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.

Affiliate links. When you click a shopping link to Amazon or another retailer, you leave our Site. That retailer and its affiliate program may set their own cookies and collect information under their own privacy policies. See our Affiliate Disclosure.

Cookies and local storage

We do not use advertising cookies. The Site stores a few small items in your own browser so features work:

• evcw (local storage): remembers the weekly code word you entered, so Ask, Talk and the promo codes on /codes/ stay unlocked.
• ev-talk (local storage): a conversation ID so Talk can continue your conversation.
• ev-user (local storage): your username and its key, so you stay signed in to Ask and Talk on this device.
• ev-iv (session storage, interview room only): a session code that keeps an interviewer signed in until the browser tab closes.

You can clear these at any time in your browser settings. If you do, you may need to enter the code word again. Third-party retailers you click through to set their own cookies on their own sites.

How long we keep it

• Ask Evelyss questions and Talk conversations: for as long as they are useful to improve and produce her content, and in any case no longer than needed. Answers that have been published stay published.
• Inner circle email addresses: until you unsubscribe, after which we keep only what is needed to respect your unsubscribe.
• Interview transcripts: kept as part of the interview record (see Interview Terms).
• Analytics records: kept in hashed form only, for trend reporting.

You can ask us to delete your information at any time (see “Your rights”).

Security

We use reasonable technical and organisational measures to protect information, including encrypted connections (HTTPS) and limited access. No online service is perfectly secure, so please do not send us anything you would not want stored.

Your rights in the United States

Depending on your state (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws), you may have the right to:

• know and access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• get a copy of your information in a portable format;
• opt out of the sale or sharing of your personal information, targeted advertising and certain profiling;
• not be treated differently for using these rights.

California (CCPA / CPRA)

In the last 12 months we have collected these categories: identifiers (name you choose to show, email address, hashed IP), internet activity (pages visited, referrer), approximate location (country), and the content of your questions and messages. We use them for the purposes in “How we use it”.

Do Not Sell or Share My Personal Information. We do not sell personal information and do not share it for cross-context behavioural advertising, and we have no actual knowledge of selling or sharing information of anyone under 16. Because we do neither, there is nothing to opt out of; you may still write to hello@evelyss.com with the subject “Do Not Sell or Share” and we will confirm.

We do not use sensitive personal information to infer characteristics about you. You may use an authorised agent to make a request; we may ask for proof of that authority.

Your rights in the UK and EU

If you are in the United Kingdom or the European Economic Area, UK GDPR or the EU GDPR gives you the right to access, correct, delete, restrict or object to the use of your personal data, to data portability, and to withdraw consent at any time (without affecting earlier use).

Our legal bases: consent (Ask Evelyss submissions, inner circle emails); our legitimate interests in running, improving and securing the Site (Talk, analytics, rate limiting, country lookup for UK links); and legal obligations where they apply.

International transfers: the Site is run from the United States, so your information is processed there. Where required, we rely on appropriate safeguards for transfers.

You can complain to your local data protection authority (in the UK, the Information Commissioner’s Office), but we would appreciate the chance to fix things first.

How to use your rights

Email hello@evelyss.com with your request and the email address or name you used. We may need to confirm it is you. We aim to reply within 30 days (or the time your local law sets). If we decline a request, we will say why, and where your state law provides an appeal, you can reply to ask us to reconsider.

Children

The Site is not for anyone under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email hello@evelyss.com and we will delete it.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will make it clear on the Site.