Evida
Sign inGet started

Privacy Notice

Last updated: 8/17/2026

This Privacy Notice explains how Gambi Studio (“we”, “us”), trading as Evida, collects, uses, shares, and protects personal data in connection with the Evida service available at evidascore.com (the “Service”). Gambi Studio is the data controller for personal data processed through the Service.

1. Personal data we collect

  • Account data: email address, hashed password (or OAuth identifier), and account creation date.
  • Profile data: display name, plan, usage counters.
  • Content you submit: images, URLs, and text you send to Evida for verification, plus any generated evidence and reports linked to your account.
  • Support data: messages you send us and metadata about those conversations.
  • Usage and telemetry: pages visited, actions taken, timestamps, referrer, and error logs.
  • Device and connection data: IP address, user agent, approximate location derived from IP, device identifiers.
  • Cookies and similar technologies: essential cookies to keep you signed in, plus analytics cookies where enabled.

2. Why we use this data (purposes and legal bases)

  • Providing the Service (performance of a contract): creating and maintaining your account, running verification checks, storing and displaying reports, sharing links you choose to make public.
  • Security and fraud prevention (legitimate interests): detecting abuse, protecting accounts, maintaining audit logs.
  • Product improvement (legitimate interests): understanding aggregate usage patterns, debugging errors, improving detection quality.
  • Customer support (performance of a contract / legitimate interests): responding to questions and issues.
  • Compliance (legal obligation): responding to lawful requests, meeting tax and accounting duties.
  • Marketing communications (consent, where required): only if you opt in.

3. Payments

Payments for paid plans are processed by our online reseller Paddle.com, who acts as the Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. When you pay, Paddle collects and processes your billing name, address, payment method details, tax information, and transaction data under its own privacy policy. We receive limited transaction metadata (customer id, subscription id, plan, status, invoice number, and amounts) that we use to grant and manage access to paid features.

4. Who we share data with

  • Service providers / subprocessors that host, operate, and support the Service (cloud hosting, database, email delivery, error monitoring, analytics).
  • Merchant of Record: Paddle, for sale of the product, subscription management, payments, tax compliance, invoicing, and refunds.
  • AI processing providers that we call to perform content analysis (for example, model providers used for AI-generated image detection or fact checking). Only the content you submit for a given check is sent.
  • Professional advisers (legal, accounting) where required.
  • Authorities when required by law or to protect our rights and the safety of others.

We do not sell personal data.

5. International transfers

Some of our subprocessors are located outside your country, including outside the UK and EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data only as long as needed for the purposes above. Account and report data are kept for the life of your account. When you delete your account, we delete or anonymise associated personal data within a reasonable period, except where we must retain records for legal, tax, or fraud-prevention purposes (typically up to 7 years for billing records held by Paddle).

7. Your rights

Depending on where you live, you have rights to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data (subject to legal retention).
  • Restrict or object to certain processing.
  • Data portability.
  • Withdraw consent at any time where processing is based on consent.
  • Complain to your local data protection authority. UK/EEA users have the right to lodge a complaint with their supervisory authority (in the UK, the Information Commissioner's Office).

We aim to respond to rights requests within one month. Contact us at the address in section 11.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), encryption at rest for stored data, role-based access controls, audit logging, and secure authentication. No system is perfectly secure; we work continuously to reduce risk.

9. Cookies

We use essential cookies required for authentication and session management. We may also use analytics cookies to measure aggregate usage; these are set only where permitted by your jurisdiction and your cookie choices. We do not use marketing or advertising cookies. You can manage cookies through your browser settings.

10. Children

Evida is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Contact

Gambi Studio
Email: privacy@evidascore.com

12. Changes to this notice

We may update this notice from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you by email or in-app.