Privacy Policy

Effective and last updated: September 9, 2026

See also our Terms of Service.

EvalsOne LTD, a company registered in England and Wales, company number 15120327, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom ("EvalsOne," "ConsoleX," "we," "us," or "our"), operates ConsoleX AI and its websites, desktop and mobile applications, APIs, and related services (the "Service"). This policy explains what we collect, why, who we share it with, and the choices you have. It applies to every platform we offer — web, iOS, Android, and desktop.

Information We Collect

  • Account information: email address, name if you provide one, user identifier, sign-in provider, and account settings.
  • Your content: prompts, conversations, uploaded files, images, audio and video, tool and MCP server output, and the Agents, Skills, and scheduled tasks you configure.
  • Usage and billing information: the models and features you use, credit and token consumption, subscription and payment status, and support requests.
  • Technical information: IP address, device and browser details, language, timestamps, diagnostics, and security events.
  • Cookies and local storage: what is needed to keep you signed in and secure, remember your preferences, and — with your consent — measure how the Service is used.

How We Use Information

  • Provide, operate, secure, and troubleshoot the Service, and sync your account across devices.
  • Process your prompts and files, run the models, Agents, Skills, MCP servers, and tools you request, and return the results.
  • Meter credits, handle subscriptions and payments, and prevent fraud and abuse.
  • Provide support, send essential service notices, and — where you have opted in — product updates.
  • Comply with legal obligations and enforce our Terms of Service.

We do not sell or share your personal information for cross-context behavioural advertising, and we do not use your content to train our own AI models. Our legal bases under UK and EU data protection law are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (for optional cookies, analytics, and marketing), and compliance with legal obligations.

Third-Party AI Providers and Integrations

ConsoleX is a multi-model service. To answer a request, we send what is needed to fulfil it — your prompt, relevant conversation context, attached files and media, tool output, and generation settings — to the model provider you selected or that is configured for the model, Agent, or Skill in use. Depending on your selection, those providers include OpenAI, Microsoft Azure OpenAI, Anthropic, and Google, alongside the other providers listed in the Service.

If you connect your own model, API key, MCP server, tool, or storage integration, information you direct ConsoleX to use is also sent to that provider. Every one of these providers processes the information under its own terms and privacy policy, and may operate outside your country. Please do not submit sensitive personal information unless it is necessary for your request and you are permitted to disclose it.

Our iOS and Android apps ask for your explicit permission before sending your content to third-party AI providers. You can decline, or withdraw permission later in app settings; AI features cannot run while permission is withdrawn.

Service Providers We Use

Besides the AI providers above, we rely on a small set of processors that handle information on our behalf and may only use it to provide their service to us:

  • Amazon Web Services — hosting and file storage.
  • Stripe — payment processing. Card details go to Stripe directly; we never receive or store them.
  • Resend — transactional and account email.
  • Sentry — error and performance monitoring.
  • Google Analytics, Google Tag Manager, Google Ads, and Microsoft Clarity — product analytics and marketing measurement, loaded only after you accept optional cookies. Microsoft Clarity records anonymised session interactions such as clicks and scrolling.

We may also disclose information when you choose to make content public or share it via a link, to comply with law or valid legal process, to protect rights and safety or investigate abuse, and in connection with a merger, financing, or sale of assets subject to appropriate safeguards.

Cookies and Analytics

Cookies and local storage that are strictly necessary for authentication and security are always active — the Service cannot work without them. Analytics and advertising cookies are switched off by default and load only if you accept them in our cookie banner. You can change your mind at any time by clearing the site's stored data, or by configuring your browser to refuse cookies. Our desktop applications do not load analytics or advertising tags.

Retention and Account Deletion

We keep your account information and content while your account is active and for as long as we reasonably need it to provide the Service. How long varies by data type and by our legal, tax, accounting, security, and fraud-prevention obligations.

You can request account deletion from account settings or in the app. We disable access when the request is accepted. If the account remains disabled, we permanently delete or anonymise the account and its associated personal information after 14 days, except what we must keep for legal, security, fraud-prevention, payment, or dispute purposes. Backups may retain copies for a limited period until they are overwritten. Cancel any active recurring subscription before requesting deletion. Detailed instructions and an external request method are available on our account deletion page.

International Transfers

We are based in the United Kingdom, and we and our providers process information in the United States and other countries. Where personal information leaves the UK or EEA, we rely on adequacy decisions or on standard contractual clauses (with the UK International Data Transfer Addendum where applicable), together with appropriate technical safeguards.

Security

We use administrative, technical, and organisational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict our use of your personal information, to object to certain processing, and to withdraw consent at any time. Manage what you can in the Service, or email us to make a request — we may need to verify your identity first.

If you are in the UK or the EEA, you also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first.

Age Requirement

The Service is not intended for anyone under 16, and we do not knowingly collect personal information from them. If you believe someone under 16 has provided us with personal information, contact us and we will take appropriate action.

Changes to This Policy

We may update this policy as the Service or the law changes. We will post the updated version here and change the date above, and give additional notice where required. If a change requires new consent, we will ask for it before the relevant processing begins.

Contact Us

EvalsOne LTD is the data controller for the personal information described in this policy. For privacy questions or to exercise your rights, email contact@evalsone.com or write to us at:

EvalsOne LTD (company no. 15120327) 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom