Your work stays on your machine.
Even is local-first. Source code, prompts, terminal output, browser history, and workspace content stay on your device unless you deliberately send them to a third-party tool. Optional accounts and team features sync only the control data described below.
Effective July 10, 2026
Who we are. Even is a product of Todience, Inc. In this policy, “Even,” “Todience,” “we,” and “us” refer to Todience, Inc. as the operator of the Even website, desktop application, and optional cloud services.
The short version
- The complete desktop workspace can be used locally without an account.
- We do not upload your source code, prompts, terminal output, browser history, or workspace files to the Even control plane.
- If you choose an account, Pro, Team, or Enterprise, we process identity, billing, device, policy, membership, approval, and audit metadata needed to provide those features.
- Stripe handles payment details. We receive customer, subscription, plan, seat, tax, and payment-status records—not your full card number.
- We do not sell personal information or use it for cross-context behavioral advertising.
What stays local
By design, the following remain on your device and are not sent to Todience’s control plane:
- source files, repository contents, prompts, model responses, and terminal scrollback;
- browser history, cookies, and website content in the in-app browser;
- local workspace layouts, pinned folders, local service data, and local model data; and
- credentials stored in your operating-system keychain.
If you direct an AI provider, MCP server, skill, website, or other integration to receive content, that provider processes the content under its own terms. Team administrators can configure policies and permitted integrations, but Even does not turn those third parties into Todience subprocessors.
Information we process
Accounts and organizations
When you create an optional account, we process your email address, authentication records, profile name or avatar if supplied, organization memberships, invitations, roles, and recovery/security events. Enterprise identity features also process company domains, identity-provider identifiers, SSO routing settings, and cryptographic hashes and prefixes of SCIM tokens.
Plans, payments, and tax
For paid plans, Stripe processes payment methods, billing addresses, tax identifiers, invoices, and payment authentication. Todience receives and stores Stripe customer and subscription identifiers, plan and seat quantities, subscription status and dates, cancellation state, and related billing events. Stripe may use billing location and tax identifiers to calculate sales tax, VAT, or GST.
Device and control-plane metadata
If you enroll a device or use team controls, we process installation identifiers; device label, platform, architecture, app version, public signing key, enrollment state, and last-seen time; organization policy versions and digests; approved package identifiers, versions, and digests; approval requests and decisions; agent/run status and timing; and security/audit events. The service is designed to exclude task text, filesystem paths, branches, prompts, terminal output, and source code from shared run visibility.
Website and download analytics
Our website uses PostHog for page views, referral source, approximate region, browser/device information, and download-funnel events. Analytics visitors remain pseudonymous unless they voluntarily submit an email with optional role and referral information during download. Cloudflare also processes ordinary request, security, and delivery logs.
How we use information
We use information to provide and secure Even; authenticate users; operate organizations, billing, policy, approvals, identity, device enrollment, and audit features; respond to support requests; prevent abuse; improve reliability and product experience; communicate service or account changes; and meet legal, tax, accounting, and compliance obligations.
Where applicable, we rely on performance of our contract, legitimate interests in operating and securing the service, consent for optional communications or analytics choices, and compliance with law.
Service providers and disclosures
We disclose only what is needed to service providers that help operate Even, including:
- Supabase for authentication, database, realtime, and control-plane functions;
- Stripe for billing, subscriptions, payment processing, fraud prevention, and tax calculation;
- Cloudflare for website delivery, performance, and security;
- PostHog for website product analytics; and
- GitHub for release downloads and desktop update checks.
We may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction, or at your direction. We do not sell personal information.
Team and Enterprise customers
An organization customer controls its workspace and may act as the controller of member and organization data, while Todience processes that data to provide Even. Organization owners and administrators can manage memberships, roles, devices, policy, audit access, and retention choices available in their plan. A signed order form, master agreement, or data processing addendum with Todience may provide additional terms and prevails if it conflicts with this public policy.
Retention
Local data remains until you remove it from your device. Account and organization data is retained while the account or contract is active and for a reasonable period afterward for recovery, security, dispute resolution, and backups. Billing, tax, and transaction records are retained as required by law. Organization audit and security records follow the applicable plan, administrator settings, and contract. We delete or de-identify information when it is no longer reasonably needed, subject to legal holds and backup cycles.
Security and international processing
We use access controls, encryption in transit, hashed or scoped credentials, signed policy artifacts, least-privilege service credentials, and other administrative and technical safeguards appropriate to the data. No system is perfectly secure. Todience and its providers may process information in the United States and other countries, using legally recognized transfer mechanisms where required.
Your choices and rights
You can use the local workspace without an account, update account information, manage subscriptions through Even and Stripe, control organization membership through an administrator, and opt out of website analytics using the control above. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal a denied request. We do not discriminate for exercising applicable privacy rights.
Send requests to [email protected]. We may need to verify your identity and authority. If Todience processes your information on behalf of an organization, please contact that organization first.
Children
Even is a developer and business tool, is not directed to children, and is not intended for anyone under 16. We do not knowingly collect personal information from children.
Changes
We may update this policy as the product or law changes. We will update the effective date and provide additional notice when a change is material.
Contact
Todience, Inc.
Even privacy team
[email protected]
even.dev/contact