FindEvo (“we”, “our”, “us”) is operated by an individual founder based in Ankara, Turkey, who is the data controller for the personal data described here. This policy explains what we collect, why, and what you can do about it, when you use the Service at gofindevo.com. We also send email from getfindevo.com.

By using FindEvo you agree to the handling of information described in this policy.

We do not sell personal data, and we do not use it for advertising or profiling for advertising.

FindEvo works only with publicly visible Reddit content. We do not:

• Access private messages or any non-public content
• Store Reddit passwords or OAuth tokens
• Build persistent, cross-post profiles of Reddit users
• Use Reddit data for any purpose other than helping you find and evaluate relevant conversations

We store public post and comment content together with the author’s public username and the signals we derive for a specific post, such as intent score, fit score and whether the author appears to be selling something themselves. These signals are calculated per post and per product; they are not aggregated into a persistent profile of an individual.

If you save a post as a lead, the associated public username and your own notes are stored in your pipeline until you delete the lead or your account.

Rule and risk caches are not personal data. Subreddit rule summaries and ban risk reports describe a community, not a person, and are cached and shared across accounts to avoid repeated requests to Reddit.

If you are a Reddit user and want content about you removed from our systems, email contact@gofindevo.com.

We do not sell your personal data and do not share it with advertisers or data brokers. We share it only with the providers below, each acting on our behalf under their own terms:

We may also disclose data where required by law, to enforce our Terms, or in connection with a sale or transfer of the business, in which case we will notify you beforehand.

We are based in Turkey and our providers are located in the European Union, the United States and other countries. Where personal data of EU, UK or Turkish residents is transferred outside its home jurisdiction, we rely on the receiving provider’s standard contractual clauses or equivalent safeguards. You may request details of these safeguards.

Payments are processed by Creem.io, acting as Merchant of Record. We do not receive or store your full card details. We receive only the subscription status, plan, and the identifiers needed to link a payment to your account. Creem.io handles your payment information under its own privacy and security terms, and retains transaction records as required by tax law.

• Access control is enforced in our application layer. Every request that touches your data is checked against the account that owns it. A request for a record you do not own is refused.
• Row-Level Security is enabled in the database as an additional layer of defence for client-side access. It is not our only control, and we do not rely on it alone.
• All traffic is encrypted in transit (HTTPS/TLS). Data is encrypted at rest by our database provider.
• Passwords are hashed by Supabase Auth and are never visible to us.
• API keys are stored as SHA-256 hashes; the plaintext key is shown to you once and cannot be recovered by us. Revoking a key marks it permanently unusable rather than deleting the record.
• We do not store Reddit credentials of any kind.

No system is perfectly secure. If a breach affecting your personal data occurs, we will notify affected users and the relevant authority without undue delay and, where required, within 72 hours of becoming aware of it.

Backups may retain deleted data for up to 30 days before they are overwritten.

Depending on where you live, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data, via your account settings or by contacting us
• Delete your account and associated data via Settings → Account → Delete Account
• Export your data in a portable format
• Object to or restrict certain processing, including processing based on legitimate interests
• Withdraw consent for optional email at any time, without affecting prior processing
• Complain to your data protection authority. In Turkey this is the KVKK Board; in the EU or UK it is your national supervisory authority.

To exercise any of these, email contact@gofindevo.com. We respond within 30 days. We do not discriminate against you for exercising a right.

If you are a California resident: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising.

• Essential cookies: session cookies set by Supabase Auth to keep you signed in. Disabling them prevents login.
• Analytics: we use PostHog to understand how the product is used. PostHog sets a first-party identifier and records events such as page views and feature usage, linked to your account once you sign in. It is configured without session recording, without cross-site advertising identifiers, and with IP data used only for coarse geography and security.
• We do not use advertising or third-party ad-tracking cookies.

You can block cookies in your browser or use a browser Do Not Track / Global Privacy Control signal, which we honour for analytics.

FindEvo is not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

We may update this policy. Significant changes are announced in the app or by email. The “Last Updated” date at the top always reflects the current version. Continued use after a change constitutes acceptance.

• Email: contact@gofindevo.com
• Website: https://gofindevo.com

FindEvo is operated by an individual founder based in Ankara, Turkey.