Privacy Policy

1. Who we are

Falcon Orbit FZ-LLC (“Falcon Orbit”, “we”, “us”) is a technology company registered in Ras Al Khaimah, United Arab Emirates. We are responsible for the information described in this policy.

2. What this policy covers

• This website, falconorbit.ae.
• EvaMind™ Operating Intelligence (“EvaMind”), our AI operating intelligence for professionals and teams, including its website and app.

3. Information we collect

On this website

• We do not use cookies, analytics or tracking tools, and the website has no forms.
• Like every website, our hosting provider (Microsoft Azure) records basic technical details of each request, such as the IP address, the time, the page requested and the browser type. These server logs are used to run and secure the site.

In EvaMind

• Account details. You sign in with your Microsoft account. We receive the basic account details Microsoft shares at sign-in, for example your name, email address and organisation. We never see your password: passwords and multi-factor checks happen at Microsoft.
• Your content. What you put into EvaMind: chats, the files and photos you upload, memory, tasks and the settings you choose.
• Connected-app data. Only when you connect an app (for example Microsoft 365) and switch a feature on, EvaMind reads from or writes to that app to provide the feature.
• Usage and cost records. Records of how the service is used, such as AI usage and its cost, so we can apply plan limits and billing.
• Essential cookies. EvaMind uses essential session cookies to keep you signed in securely. They are not used for advertising or tracking.
• Service logs. EvaMind’s logs record technical facts only, such as error types. Message text, email addresses and access tokens are never written to the logs.

4. How we use information

• To provide EvaMind and the features you switch on.
• To keep the service and your account secure.
• To apply billing and usage limits.
• To give you support when you ask for it.

We do not sell your information. We do not use your content to train AI models.

5. Where your information is stored

EvaMind stores your information in Microsoft Azure, in the UAE North region. This includes your account, chats, tasks, memory, settings, uploaded files and the sealed tokens for apps you connect. Backups and service logs are managed within Microsoft Azure.

Some processing happens outside the UAE, as described in sections 6 and 11.

6. Who we share information with

We share information only as needed to run EvaMind.

• AI providers. EvaMind offers AI models from several providers, such as OpenAI, Anthropic (Claude) and Google (Gemini), through EvaMind’s own business accounts with them. You can choose among the models EvaMind offers; you do not connect your own AI account. To answer a request, EvaMind sends the relevant content to the provider of the model used for it.
  • OpenAI: under OpenAI’s API terms, the data is not used to train its models. OpenAI may keep abuse-monitoring logs for up to 30 days. EvaMind switches off OpenAI’s optional saved copy of responses.
  • Anthropic: under Anthropic’s commercial and API terms, inputs and outputs are not used to train its models by default.
  • Google: under the paid Gemini API terms, Google does not use the data to improve its products and keeps logs for a limited time for abuse checks.
  • Files are sent inside the request. EvaMind does not upload them to the AI provider’s file storage.
• Hosting. Microsoft Azure hosts this website and EvaMind.
• Apps you connect, at your direction. When you connect an app such as Microsoft 365, EvaMind reads from it and writes to it on your instructions.
• Within your company. Your private records (your own chats, memory, files and tasks) are visible only to you; a company administrator cannot see them. Shared Spaces are visible to the people they are shared with.
• Legal reasons. We may disclose information where the law requires us to.

7. How we protect information

• Encryption in transit. Connections to EvaMind use HTTPS, and EvaMind connects to its database over an encrypted connection (TLS 1.2 or higher).
• Managed identity. EvaMind signs in to its database with an Azure managed identity, so no database password exists.
• Sealed connection tokens. Access tokens for the apps you connect are sealed with AES-256-GCM and bound to you, the app and your company, so a copied record cannot be opened elsewhere.
• Separation between companies. Every record belongs to one company, and every read and change is checked against the signed-in person’s company.
• Approvals before actions. Every send, add or change in a connected app is shown to you first. Nothing goes out until you approve it, unless you have chosen to always allow that kind of action.
• Private file storage. Uploaded files are kept in a private storage container, encrypted at rest by Microsoft Azure.
• Limited access. Inside EvaMind, administrators have no screen for another person’s private chats or files. Direct database access is limited to one platform administrator. Our developers work on code only, with no access to the live database.

No system is perfectly secure, but we work to protect your information and keep improving these measures.

8. Keeping and deleting information, and your rights

• We keep your information while your account is active and as long as needed to provide the service.
• When you delete chats, tasks, Spaces or files, they can be restored for 30 days and are then erased automatically.
• Database backups allow recovery for 7 days.
• Meeting audio is deleted as soon as it is transcribed; only the text is kept.
• Server logs for this website are kept by our hosting provider for a limited period.

Your rights. You can ask to access, correct, delete or export your information. Write to info@falconorbit.ae and we will respond within a reasonable time. We may need to confirm your identity first.

9. Use of Google user data

EvaMind's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google data is used only to provide the features you switch on. It is never used for advertising, and it is never used to train AI models.

10. Microsoft data

When you connect Microsoft 365, EvaMind first asks only to read your profile and files. It asks for mail, calendar and Teams access only when you switch those features on. Microsoft data is used only for the features you turn on. When you disconnect, EvaMind removes the stored access.

11. International transfers

Your stored data is kept in the UAE. AI providers may process your requests outside the UAE, and apps you connect process data wherever they operate.

12. Children

This website and EvaMind are not intended for anyone under 18, and we do not knowingly collect their information.

13. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date and, where a change is significant, take reasonable steps to let EvaMind users know.

14. Contact

For questions or requests about privacy, write to info@falconorbit.ae. Our registered address is in the company details in section 1.