Privacy Policy

Last updated: September 26, 2026

Earthena, Inc. (“Entity,” “we,” “us”) operates BEVEL. This policy describes how we handle personal information when you use our sites, apps, and APIs. For EEA/UK rights see our GDPR notice. For California rights see our CCPA notice. Cookies are described in our Cookie Policy.

Who is responsible

Entity is the controller of account, billing, and platform telemetry data. When you use a workspace, your organization is typically the controller of channel content and membership; Entity processes that content as a processor under our DPA.

Information we collect

Account and identity. Name, email, avatar, and subject identifiers from Google, Apple, or Microsoft when you sign in. Phone number if you request an SMS code. Email address if you request a magic link. We do not collect a password.

Workspace. Organization name, slug, allowed domains, membership, channel messages, agent sessions, files you attach, and settings admins declare.

Technical. IP address, user agent, device type, timestamps, CSRF and session cookies, OTP rate-limit metadata, and error traces needed to run the Service.

Communications. Messages you send to support, and operational mail we send about the product.

How we use it

To authenticate you, keep you signed in, route you to the correct workspace, deliver live chat and archives, send one-time codes, prevent abuse, improve reliability, communicate about the product, and meet legal obligations. We do not sell personal information and we do not share it for cross-context behavioral advertising.

Legal bases (EEA/UK)

Contract (to provide the Service you request), legitimate interests (security, product improvement, abuse prevention), consent where required (optional communications), and legal obligation. Details live on the GDPR page.

How we share it

We share personal information with processors who help us run the Service, under contracts that limit their use:

• Google — Sign in with Google / Workspace identity
• Apple — Sign in with Apple
• Microsoft — Microsoft Entra ID work-account sign-in
• Twilio — SMS one-time codes (Programmable Messaging only)
• SendGrid — email magic links and backup codes
• Amazon Web Services — hosting, storage, and secrets in production

We may disclose information if required by law, to protect the Service or other users, or as part of a merger or sale, with notice where required.

International transfers

We are based in the United States. If we transfer EEA/UK personal data to the U.S. or another third country, we use appropriate safeguards such as Standard Contractual Clauses. See the GDPR notice.

Retention

Sessions last until they expire or you sign out. OTP codes expire in ten minutes and are hashed at rest. Account records stay while the account is active. Workspace content stays until an admin deletes it or the workspace is closed, subject to backups and legal holds. Abuse and security logs are kept as long as needed to protect the Service.

Security

TLS on public hosts, tenant isolation by host and realtime namespace, hashed OTP codes, and access gated by identity providers plus workspace allowlists. See Security. No method is perfect; report issues to hello@bevel.is.

Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

Your choices

Sign out, close your account, or ask a workspace admin to remove you. Request access, correction, or deletion at hello@bevel.is. Additional rights are described for the EEA/UK and California.

Changes

We will update the date at the top of this page when the policy changes. Material changes will be posted here.

Contact

Privacy questions: hello@bevel.is. Earthena, Inc..