Privacy Policy
1. Who we are
StatEVN ("we", "us") is based in Yerevan, Armenia. For the purposes of data-protection law, we are the controller of the personal information described in this policy. You can reach us through the feedback form; leave your email there so we can reply.
This policy explains what information we handle when you use statevn.com and the StatEVN service, why, and what choices you have. It should be read together with our Terms and Conditions.
2. What we collect
Files and text you give the service. The files you upload (CSV, Excel, JSON), your choices about them (which columns to use, grouping options) and the goal you type. We use them only to produce your results. Your file may contain personal information if you include it; we do not look through it and do not use it for any other purpose.
Contact and sign-up details. If you write to us, we receive your email address and whatever you choose to tell us. If you request beta access, the form asks for your name, email address and role, and, if you wish, your organisation, what you would like to use StatEVN for, which tools you use now and how you heard about us. We also note the time and the IP address the request came from, to stop automated spam. These details are stored on our own server. When your request is approved, which may happen automatically right after you send it, we create a beta login for you and email it to the address you gave; we keep only a scrambled (hashed) form of its password, never the password itself.
Student verification (when available). To confirm student status we may ask you to verify a university email address, and in some cases to send a limited proof of enrolment with everything except your name and institution hidden. We use it only to decide eligibility and delete any proof once the decision is made. Please do not send ID numbers, photos or other sensitive details.
Account and payment details (when available). If accounts and paid plans are offered, we handle your email and plan. Logins are managed by a login provider and card payments by a payment provider. We do not see or store your full card number.
Technical data. Like any website, our servers and hosting provider record the IP address, date and time, pages or endpoints requested, browser type and error messages. We use this to keep the service running, secure it and fix problems.
3. What we do not do
- We do not sell your data or share it for advertising.
- We do not use your files to train models or to build a dataset of our own.
- We do not build advertising profiles of visitors, and the site has no advertising trackers. Google Analytics runs only if you accept it, with advertising features turned off.
- We do not read your files, except if you ask us for support and share one with us, or where needed to keep the service secure or to meet a legal duty.
4. Why we use it and our legal basis
| Purpose | Information | Legal basis |
|---|---|---|
| Run your analysis and show results | Uploaded file, choices, goal text | Performing our contract with you (the Terms) |
| Answer you and run the beta | Email, messages | Our legitimate interest in replying; your consent where you sign up |
| Accounts and billing (when available) | Email, plan, payment status | Performing our contract; legal duty for tax records |
| Student verification (when available) | University email; limited proof of enrolment if needed | Our legitimate interest in keeping the student plan for students |
| Security, reliability, fixing errors | Technical data | Our legitimate interest in a safe and working service |
| Understanding how the site is used | Usage data from Google Analytics (see section 8) | Your consent, which you can withdraw at any time |
5. How long we keep it
| Information | How long |
|---|---|
| Uploaded files | Not saved to disk. Held in the server's memory while your analysis runs. A parsed copy of up to the three most recent files may stay in memory so that follow-up steps on the same file do not need another upload, and it is discarded after 15 minutes at most, or sooner when the service restarts. |
| Files you keep working on ("Go deeper") | Only when you choose to go deeper than the first analysis: the file you uploaded, any file you add to it at a later level, and the steps you took (new columns, the parts you looked at) are saved on our server so each level can be rebuilt and you can come back. They are deleted automatically after 2 hours on the free plans, 7 days on Starter, 30 days on Analyst and 90 days on Pro, counted from when you started, or at once when you click "Delete this investigation". During the beta every tester has the Pro plan, so this is 90 days. |
| Database connections ("From a database", paid plans) | The password is used only while you are connected and is never saved; the connection closes after 30 minutes without use. The table rules you save (table and column names, filters, measure definitions) are kept on our server for your browser until you ask us to delete them. The data you fetch is handled like an uploaded file. |
| Results | Returned to your browser. We do not keep a copy on our side. Your history lives in your own browser (see section 8). |
| Email, messages and beta sign-up details | Until the beta ends, then deleted. You can ask us to delete them sooner at any time. |
| Student verification proof | Deleted once eligibility is decided. We keep only the result and the verification date. |
| Account and billing records (when available) | While your account exists; billing records as long as the law requires. |
| Server logs | About 14 days, then deleted automatically |
| Google Analytics data | 14 months, then deleted by Google |
6. Who we share it with
We use service providers that process information on our behalf. They may only use it to provide their service to us.
| Provider | What for |
|---|---|
| Contabo GmbH (Germany) | Hosts the server that runs the service; uploaded files are held in its memory while they are processed; server logs are kept on it |
| Google Ireland Limited (Google Analytics) | Measures how the site is used, only if you accept |
| Brevo (Sendinblue SAS, France) | Sends the beta emails: the notice to us with the details of your request, your login details if you are approved, and a copy to us of the answers you give in the feedback form. It handles the content of those emails, including your name and email address |
| Login provider (named here before accounts open) | Accounts and sign-in (when available) |
| Payment provider (named here before paid plans open) | Card payments and invoices (when available) |
We may also disclose information if the law requires it, or to protect the service and its users from fraud or abuse. If we ever send text you type to an AI service provider to process it, we will name the provider here first.
7. Transfers outside your country
Our providers may run servers in other countries, including outside Armenia, the EU and the UK. Google may process Google Analytics data in the United States. Where that happens, we rely on the safeguards the law allows, such as standard contractual clauses, and choose providers that commit to protecting the information.
8. Cookies and local storage
Google Analytics, only with your consent. When you first visit, we ask whether we may use Google Analytics. If you decline, it is not loaded at all. If you accept, Google Analytics sets cookies (named _ga and _ga_<ID>, kept for up to 2 years) and records which pages you open, which steps of an analysis you reach, the type of file (for example CSV), the kind of model run, your rough location (country or city), your device and browser. It never receives your files, their contents, column names, file names or the goal you type. Advertising features are turned off. You can change your choice at any time with "Cookie settings" at the bottom of the home page, or change it here.
The fonts are served from our own site, so visiting does not send your address to a font provider. The site also uses your browser's own storage for the following, all of which stay on your device:
| Name | Kind | What it does | How long |
|---|---|---|---|
| statevn-theme | Local storage | Remembers light or dark theme | Until you clear it |
| statevn-consent | Local storage | Remembers whether you accepted or declined Google Analytics | Until you clear it or change your choice |
| Analysis history | Local storage | Keeps your past results in this browser so you can reopen them. It is never sent to us. | Until you delete the analyses or clear it |
| statevn_upload | Session storage | Passes the column details of your file from the home page to the app | Until the tab is closed |
These are used only to make the service work the way you asked, so we do not ask for consent for them. You can delete them any time in your browser settings ("clear site data").
9. Security
The service is served over an encrypted connection (HTTPS). Files are not written to disk, access to our systems is limited to what is needed to run them, and we use providers with established security practices. No online service is perfectly secure, so please do not upload data you are not allowed to share, and remove anything you do not need, such as names or ID numbers.
10. Your rights
Depending on where you live (for example in the EU, the UK or Armenia), you may have the right to:
- ask what personal information we hold about you and get a copy;
- have inaccurate information corrected, or have it deleted;
- restrict or object to some uses, and withdraw consent you gave earlier;
- receive your information in a portable format;
- complain to your local data-protection authority.
To use any of these, send us a request through the feedback form and leave your email so we can reply. We will answer within one month. Because we do not keep your uploaded files or results, most requests will concern your email and any account records.
11. Children
The service is meant for adults. As set out in the Terms, people under 18 may use it only under the supervision of a parent, guardian, teacher or organisation. We do not knowingly collect personal information from children for our own purposes. If you think a child has given us information, tell us and we will delete it.
12. Changes to this policy
We may update this policy, for example when we add accounts, payments or new providers. The date at the top shows the latest version, and we will say so on the site when a change is significant.
13. Contact
Questions or requests about your information: the feedback form (leave your email for a reply).