Privacy Policy

Last updated: 26.07.2026.

This Privacy Policy explains how EVI Solutions DOO ("Intrascope", "we", "us", or "our") collects, uses, stores, and protects personal and organizational data when you use Intrascope.app, platform.intrascope.app, chat.intrascope.app, or any related services (collectively, the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.

1. Who We Are

1. Intrascope is an AI workspace operated by EVI Solutions DOO, a company registered in the Republic of Serbia.
2. EVI Solutions DOO is the operator of Intrascope and is responsible for the Service.
3. Intrascope provides a collaborative AI workspace for teams and organizations, including projects, manifests, chat history, AI model access, workspace controls, usage analytics, billing, and team management.
4. Depending on how the Service is used, we may act as a data controller for account, billing, website, support, and administrative data, and as a data processor for Customer Content processed within a Customer workspace.
5. Where required for business customers, a Data Processing Agreement may be made available upon request or through the Platform.

2. Information We Collect

2.1 Information You Provide

1. Account information, such as name, email address, password, organization name, role, and workspace details.
2. Workspace information, such as company logo, projects, manifests, chats, files, workspace settings, user roles, permissions, and collaboration data.
3. Customer Content, such as prompts, responses, chat history, manifests, uploaded files, project context, and other content submitted to or generated through the Platform.
4. Customer API Keys, if you connect your own third party AI provider keys under the Bring Your Own Key model.
5. Billing and transaction information, such as plan type, order ID, transaction status, amount, billing email, country, tax information, subscription status, Top Up Balance purchases, and usage related billing records.
6. Support communications, such as messages, attachments, contact details, issue details, and any information you provide when contacting us.

2.2 Automatically Collected Data

1. Usage analytics, including token counts, selected model, workspace activity, feature usage, timestamps, and usage cost information.
2. Technical data, including browser type, device information, operating system, IP address, session metadata, log data, security events, and performance data.
3. Cookie and consent data, including cookie preferences, website analytics, and consent records where applicable.
4. Error logs and diagnostic data used for security, debugging, reliability, fraud prevention, and platform improvement.

2.3 Payment Information

1. Intrascope does not collect or store full payment card details.
2. Payments for direct purchases are processed by Lemon Squeezy, LLC, our authorized reseller and Merchant of Record.
3. Lemon Squeezy may process payment details, billing information, tax information, invoices, transaction data, and related payment records according to its own terms and privacy policy.
4. Intrascope receives only limited transaction and billing information necessary to manage subscriptions, billing status, refunds, invoices, Top Up Balance, and customer support.

3. How We Use Information

1. To provide, operate, maintain, secure, and improve the Service.
2. To create and manage accounts, workspaces, users, roles, permissions, projects, manifests, and collaboration features.
3. To enable AI model access through Bring Your Own Key or Managed Usage.
4. To route prompts and responses to supported AI models when initiated by users.
5. To store chat history, manifests, files, project context, and workspace data so users can continue work, collaborate, and maintain project continuity.
6. To process subscriptions, Top Up Balance purchases, usage tracking, invoices, refunds, billing support, and payment status.
7. To monitor usage, prevent abuse, detect fraud, enforce usage limits, protect security, and comply with legal obligations.
8. To provide customer support, respond to requests, send service notices, security updates, billing messages, and important product communications.
9. To analyze anonymized and aggregated usage metadata for product improvement, reliability, analytics, business reporting, and capacity planning.
10. We do not sell, rent, or trade personal data.
11. We do not use Customer Content for advertising or profiling.
12. We do not use Customer prompts, responses, chats, manifests, files, or private workspace content to train AI models.

4. Legal Basis for Processing

1. We process account, workspace, subscription, billing, and support data where necessary to provide the Service, perform our contract with the Customer, manage accounts, process payments, provide support, and operate the Platform.
2. We process usage data, technical logs, security events, error logs, and diagnostic data based on our legitimate interests in securing the Service, preventing abuse, improving reliability, monitoring performance, and maintaining platform functionality.
3. We process billing, invoice, tax, refund, and transaction records where necessary to comply with legal, tax, accounting, and regulatory obligations.
4. We process Customer Content, including prompts, responses, chats, manifests, files, and project data, as necessary to provide the Service, maintain workspace functionality, enable collaboration, process user initiated AI requests, and support Customer workflows.
5. We may process certain optional website analytics, marketing, or non essential cookie data based on user consent, where required by applicable law.
6. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Where processing is based on legitimate interests, you may have the right to object to such processing, subject to applicable law.

5. AI Data, Models, and API Communications

1. Users may access supported AI models either by connecting their own Customer API Keys under the Bring Your Own Key model or by using Managed Usage through Intrascope's managed usage layer.
2. Under the Bring Your Own Key model, prompts and responses are routed to the relevant third party AI provider using the Customer's own API keys.
3. Under the Managed Usage model, prompts and responses are routed through Intrascope's managed provider access layer.
4. Prompts and responses are transmitted securely to the selected or applicable third party AI provider only when initiated by users inside the workspace.
5. Intrascope stores Customer Content, including prompts, responses, chats, manifests, files, projects, and workspace data, as needed to provide platform functionality, maintain context, support collaboration, process usage, provide support, and operate the Service.
6. Stored Customer Content is not used by Intrascope for AI model training, advertising, or profiling.
7. Third party AI providers may process prompts, responses, files, and related content only for the purpose of providing the requested model response, subject to their applicable API, enterprise, privacy, data processing, and service terms.
8. Where available under their API, enterprise, or service terms, third party AI providers may state that API data is not used to train their models by default or may provide specific opt out controls. Customers should review the applicable provider terms where required.
9. Intrascope may collect anonymized and aggregated technical metrics, such as token counts, model type, timestamps, cost data, feature usage, error rates, and performance statistics, for usage analytics, billing, security, and service improvement.

6. Data Storage and Retention

1. Account, workspace, billing, and subscription information may be retained while the account or workspace remains active.
2. Customer Content, including chats, manifests, files, prompts, responses, and project data, may be stored as needed to provide the Service and maintain workspace functionality.
3. Customer API Keys are encrypted and may be deleted when removed by the Customer, when the workspace is terminated, or upon verified deletion request, subject to technical and legal limitations.
4. Log data, security records, technical metadata, and diagnostic data may be retained for security, abuse prevention, debugging, compliance, and operational purposes.
5. Billing, invoice, tax, transaction, refund, and accounting records may be retained as required by applicable law, tax rules, accounting obligations, payment provider requirements, and dispute resolution needs.
6. Upon account closure or verified deletion request, Customer Content may be deleted or anonymized within a reasonable period, unless retention is required for backup, security, legal, tax, accounting, fraud prevention, dispute resolution, or compliance purposes.
7. Backup copies may persist for a limited period before being overwritten or deleted in accordance with our backup and retention processes.

7. Data Ownership and Control

1. Customers retain ownership of Customer Content, including prompts, responses, chats, manifests, files, projects, and workspace data.
2. Intrascope does not claim ownership of Customer Content.
3. Customers control their workspace users, roles, permissions, API keys, shared content, model access, billing permissions, and internal usage policies.
4. Customers may request access, correction, export, or deletion of their personal data by contacting support@intrascope.app.
5. Verified deletion requests will be processed within a reasonable period, subject to legal, security, tax, accounting, backup, and compliance requirements.

8. Data Sharing and Disclosure

1. We do not sell personal data or Customer Content.
2. We do not disclose Customer Content to advertisers, data brokers, or marketing firms.
3. We may share data with trusted third party service providers only as necessary to provide, secure, support, bill, and improve the Service.
4. Such providers may include hosting providers, infrastructure providers, payment processors, billing providers, AI model providers, analytics tools, email providers, support tools, security tools, and communication tools.
5. We may disclose information where required by applicable law, court order, legal process, regulatory request, or government authority.
6. We may disclose information where necessary to enforce our Terms of Service, investigate abuse, prevent fraud, protect security, resolve disputes, or protect the rights, safety, and property of Intrascope, our users, or others.

9. Security Measures

1. We use encryption in transit, access controls, authentication controls, workspace level permissions, monitoring, and other security measures designed to protect account, workspace, and service data.
2. Customer API Keys are encrypted and protected with access controls.
3. Access to production systems is restricted to authorized personnel where necessary for operation, support, security, debugging, and legal compliance.
4. Passwords are stored using secure hashing methods. We do not store plaintext passwords.
5. No internet based service can be guaranteed to be 100% secure. By using the Service, you acknowledge the inherent security risks of internet based data transmission and cloud services.

10. Third Party Processors and Integrations

1. The Service may integrate with or rely on third party providers for AI model processing, hosting, infrastructure, payments, billing, analytics, email, support, monitoring, security, and communication.
2. Third party AI providers may process prompts, responses, files, and related content when users request AI model output through the Platform.
3. Payment and billing providers may process billing details, tax information, transaction data, invoices, subscription status, refund data, and related records.
4. Each third party provider may have its own privacy policy, data processing terms, security terms, and service conditions.
5. Intrascope is not responsible for the independent privacy practices of third party providers, but uses such providers to operate, secure, bill, support, and improve the Service.
6. When Customers use the Bring Your Own Key model, their use of third party AI providers is also governed by the terms and privacy policies of the relevant provider.
7. When Customers use Managed Usage, access to supported AI models remains dependent on the availability, terms, data handling practices, and technical performance of the relevant third party providers.

11. International Data Transfers

1. Intrascope operates globally and may process data in the European Union, Serbia, the United States, or other jurisdictions where our service providers operate.
2. Where required, we use contractual, technical, and organizational safeguards designed to protect personal data during international transfers.
3. By using the Service, you understand that data may be processed outside your country of residence, subject to applicable data protection requirements.

12. Children's Privacy

1. The Service is not directed to individuals under the age of 18.
2. We do not knowingly collect personal data from minors.
3. If you believe that a minor has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Your Rights

1. Depending on your jurisdiction, you may have the right to access your personal data.
2. You may have the right to request correction of inaccurate data.
3. You may have the right to request deletion of personal data.
4. You may have the right to request export or portability of personal data.
5. You may have the right to object to or restrict certain processing.
6. You may have the right to withdraw consent where processing is based on consent.
7. You may have the right to lodge a complaint with a competent data protection authority.
8. Requests can be submitted to support@intrascope.app.
9. We may need to verify your identity before fulfilling a request.
10. We aim to respond to verified requests within 30 days, unless a longer period is allowed by applicable law.

14. Cookies and Website Tracking

1. We use a necessary first party cookie to remember your cookie preference for up to 180 days. This cookie does not track browsing activity and cannot be disabled through our preference controls.
2. With your consent, we use Google Analytics 4 to understand website usage and performance. Google Analytics may set first party analytics cookies containing online identifiers for up to 180 days and process technical information such as page visits, browser and device information, approximate location derived from IP address, and interaction data.
3. Google Consent Mode is set to denied by default. Before analytics consent is granted, Google tags do not read or write analytics or advertising cookies, although they may send limited cookieless measurements and consent status signals. Advertising storage, advertising user data, and ad personalization remain denied.
4. You can accept, reject, or customize analytics cookies through the cookie banner and change or withdraw your choice at any time through the Cookie settings link in the website footer.
5. Google processes analytics data under its own terms and privacy practices. More information is available in Google's Privacy Policy.

15. Changes to This Policy

1. We may update this Privacy Policy from time to time.
2. Updates will be posted on our website with a new "Last updated" date.
3. Material changes may be communicated by email, dashboard notice, or website notice where appropriate.
4. Continued use of the Service after changes become effective means that you accept the updated Privacy Policy.

16. Contact Information

1. For questions, requests, or concerns regarding this Privacy Policy, contact:
2. EVI Solutions DOO
3. Belgrade, Serbia
4. Email: support@intrascope.app
5. Website: https://intrascope.app

17. Summary of Key Points

1. We do not sell personal data or Customer Content.
2. We do not use Customer prompts, responses, chats, manifests, files, or private workspace content to train AI models.
3. Customers can use Intrascope through BYOK, Managed Usage, or a combination of both.
4. Customer Content may be stored to provide workspace functionality, chat history, manifests, project context, collaboration, and support.
5. Top Up Balance, usage analytics, token counts, and model usage may be processed for billing, usage tracking, and service operation.
6. Payments for direct purchases are processed by Lemon Squeezy, LLC.
7. Customers retain ownership of their Customer Content.
8. Customers may request access, export, correction, or deletion of their personal data by contacting support@intrascope.app.