Evokoa Inc. (“we,” “us,” or “our”) operates WonderSearch, an API-based search service, including the website at wondersearch.ai, the application at app.wondersearch.ai, API endpoints, developer SDKs, MCP integration, and related services (collectively, the “Service”).
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.
1. Information We Collect
We collect information to provide, maintain, and improve our search service:
Account Information: When you create an account, we collect your email address and authentication information. We may also receive a name from you or your identity provider and maintain information about your organization, workspace membership, and permissions.
Billing Information: We use Stripe for payment processing. Payment-card details are collected and processed directly by Stripe. We receive information needed to administer billing, such as customer identifiers, transaction records, and payment status.
Service Telemetry and Log Data: We collect technical information about API requests, search performance, resource consumption, errors, and authentication activity. This may include request identifiers, IP addresses, browser and device information, and timestamps.
Product Analytics: We use PostHog to understand use of the Service and improve usability. Analytics may include account email and name, user and workspace identifiers, feature usage, interaction events, and session replay data. Section 4 explains these practices.
Search Data and Customer Content: We process the content you submit for indexing and search, including text, files, metadata, search queries, filters, and other request parameters. We process and retain submitted content and query information as needed to provide search results and references to their sources.
Support Communications: We collect information you provide when contacting us or requesting assistance.
2. How We Use Your Information
We process information for the following purposes:
- To create and manage accounts, workspaces, and access permissions.
- To index submitted content and process search queries.
- To measure usage and process payments.
- To monitor performance, diagnose problems, secure the Service, and prevent abuse.
- To understand feature usage and improve the application and developer experience.
- To send account notifications, security alerts, service communications, and billing receipts.
- To comply with legal obligations.
Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, or consent, as appropriate to the processing.
3. Data Privacy and Confidentiality
No Data Selling: We do not sell, rent, or lease your personal information or customer content to third parties.
Maintenance Access: Administrative access to database infrastructure is restricted to authorized personnel for updates and maintenance. This access does not authorize personnel to read your database contents.
Support at Your Request: If you explicitly ask us to examine customer content for support, our review is limited to the information and assistance you request. Using the Service or asking a general support question does not by itself authorize that review.
Legally Required Access or Disclosure: We may preserve, access, or disclose information to comply with applicable law or binding legal process. Such access or disclosure is limited to what is legally required.
Model Training: We do not use customer content or search queries for model training.
Security: We use technical and organizational safeguards designed to protect information, including access controls. No system or transmission method can guarantee absolute security.
4. Cookies, Analytics, and Session Replay
Essential Cookies: We use cookies and similar technologies to support authentication, account security, and privacy preferences.
PostHog: We use PostHog for product analytics, application session replay, and service usage events sent by our servers. Analytics may be associated with account email and name, user identifiers, and organization or workspace identifiers.
Marketing Website Analytics: With your permission, we use PostHog to measure website visits, referral sources, campaign tags, and interactions with account links, pricing examples, and booking controls. Marketing analytics does not record form contents or session replay. Use Privacy choices on the website to allow or decline optional analytics. We honor Global Privacy Control.
Microsoft Clarity: On the WonderSearch marketing website, we use Microsoft Clarity to understand page visits and interactions through behavioral analytics, heatmaps, and session replay, and to improve the website. Clarity uses cookies and similar technologies, subject to applicable consent settings. Microsoft also processes this website usage data under the Microsoft Privacy Statement, which explains its collection and use of that information.
Session Replay and Content Privacy: Session replay reconstructs interactions with the application. It is configured to mask form inputs and designated sensitive content, including document passages and credentials. Ordinary interface text and layout may remain visible.
You can also manage cookies through your browser, although blocking essential cookies may affect sign-in and other functions. Blocking cookies alone does not necessarily stop server-side events. Where applicable law requires consent for optional tracking, that consent must be obtained before the relevant processing.
5. Third-Party Service Providers
We rely on trusted third-party partners to provide specific infrastructure services:
- Cloud Infrastructure Providers: To host and run the physical servers and storage.
- Stripe: For billing, invoicing, and subscription payments.
- Cloudflare: For edge routing, security protection, and DNS.
- PostHog: For product analytics, service usage analysis, and application session replay, as described in Section 4.
6. Your Rights and Data Control
Subject to applicable data protection laws, you may exercise the following rights:
- Access and Portability: Request access to or a copy of your personal information.
- Correction: Request correction of inaccurate account or personal information.
- Deletion (Right to be Forgotten): You may contact us to delete your account at any time. Deleting your account will immediately terminate database instances and queue any existing associated backups for hard deletion within 30 days, except where retention is legally required. This retention statement does not mean that backups are included with your account.
To exercise these rights, contact team@evokoa.com.
7. Children’s and Minors’ Privacy
The Service is intended for individuals who are at least 18 years old. We do not target the Service at minors or knowingly collect personal information from minors to create accounts or provide the Service directly to them.
If you are under 18, please do not create an account or submit personal information to us.
If you believe a minor has provided personal information to us, contact team@evokoa.com so we can investigate and take appropriate action.
8. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:
Evokoa Inc.
Email: team@evokoa.com
We may update this policy as our practices or the Service change. We will revise the “Last Updated” date and provide additional notice of material changes where required by applicable law.