Aevilo
Legal

Privacy Policy

Draft under review. This policy is a draft prepared for the publisher and has not been reviewed by a lawyer. Text in [brackets] is still to be completed. It describes the Aevilo extension; the section “This website” covers the site you are on.

This website

  • No cookies, analytics, advertising or third-party scripts. Pages, fonts and images are served from this site only.
  • Appearance. Your light or dark choice is saved in your browser’s local storage on this device. It is never sent anywhere.
  • Forms (feature requests, bug reports, launch list). This preview of the website has no feedback service connected: forms are checked in your browser and nothing is sent or stored.
  • Hosting. [Publisher: the hosting provider may keep standard server logs such as IP address and requested page. Name the provider and its retention period.]

The Aevilo extension

Publisher: Edgar Iniguez, California, United States · Privacy contact: support@aevilo.app · Effective date: 10 November 2026 · Version: 1.0

Summary

Aevilo is a browser extension for inspecting, restyling and animating how websites look in your own browser.

Themes, animations and design settings are stored locally. Optional account, billing, waitlist and support services process submitted information on servers when enabled. Cloud synchronization is not available.

Pro Studio. The workspace reads the page you choose for element selection, style editing and motion previews. It keeps project settings and recovery drafts locally. Opening a page in the canvas or in its own tab makes ordinary browser requests to that website; the website's privacy practices still apply. Those editing features do not provide cloud synchronization.

Account services (as deployed). Account sign-in, linking and subscription verification run on Cloudflare Workers with a Cloudflare D1 database (the website and API share one origin). Sign-in uses Google; a ChatGPT account is no longer involved. The extension talks only to that service and verifies a signed statement of your plan; it sends no page content, themes or animations. Cloudflare processes requests at its data centres worldwide and stores the account database in the United States region under Cloudflare's data processing terms. Google sign-in shares your e-mail address and name with Aevilo under Google's terms. Brevo (Sendinblue) delivers sign-in e-mails to the address you enter; it receives only that address and the message.

What Aevilo processes on your device

Pages you view.

  • Page animations. Only if you allow it (Aevilo asks after installation, and you can change your choice at any time in Settings → Privacy Center), Aevilo reads the layout and visual styles of what is on screen to animate each page as it loads. Until you choose, nothing is read automatically.
  • Inspection tools. When you use one, Aevilo reads the element or page you chose: styles, sizes, colours, fonts, image and icon addresses, headings, and a short excerpt of the selected element's visible text.
  • Never read: form fields, passwords, or text you are typing or editing.

Website themes (Aevilo Styles).

  • A theme is stored in your browser. It contains the styling rules you made, with the page selectors they target, plus effects, components with text you wrote, your custom CSS, an optional description and attribution, and up to 15 earlier versions.
  • Aevilo also stores, per theme, when it last applied and which selectors no longer matched (no page address since 0.9.9).

What else you save. Settings, site preferences, animation presets, saved elements, design tokens and snapshots, notes and tags, and Aevilo AI conversations. All of it is stored in your browser's extension storage.

Diagnostics. Timings of the last 60 page animations, with the website's hostname only, so you can see performance.

Session data. The current inspector selection and an unsent Aevilo AI message. Chrome clears these when it closes.

Sharing and transfers

The extension keeps creative data locally. Online account and submission services process the records described below. Export and import involve the files you choose:

  • Theme files you export. "Export to share" downloads a file to your computer.
    • It contains your changes: rules, effects, components, custom CSS, and the target site's address.
    • It never contains cookies, logins, form contents, history or the website's own files.
    • Aevilo shows what is included before you confirm. What happens to the file after that is up to you.
  • Theme files you import. Aevilo reads the file you choose and validates it. Imported themes stay off until you review them and turn them on.

When you open the Asset Explorer or a component preview, your browser loads image previews from the same addresses the page already used.

On-device AI (Aevilo AI)

  • If your version of Chrome provides its built-in on-device language model, Aevilo AI uses it.
  • Your messages, and any page data you choose to attach, are processed by Chrome on your device. They are not sent to the publisher.
  • Aevilo has no cloud AI option. Google's terms for Chrome and its built-in AI apply to the model.
  • Without the model, Aevilo AI answers from reference notes built into Aevilo.
  • AI suggestions can be wrong. Theme changes proposed by AI apply only when you press Apply, and are saved only when you save.

Your choices

  • Turn things off. Page animations (popup or Animation Studio), automatic construction (popup, or per site), a website theme (Aevilo Studio, side panel, popup → Restore original), or all website themes (popup or Aevilo Studio → Website themes).
  • Export everything. Settings → Privacy Center → Export all my data.
  • Delete. Items, categories or everything, in the Privacy Center or Aevilo Studio. Uninstalling Aevilo removes its storage.

Data from earlier versions

  • If you used LumaMarket, Tabs & Sessions, LumaShield or Consent Autopilot (up to 0.9.4.x), their records stay in your browser, unused, until you export or delete them in the Privacy Center.
  • Market-data API keys were removed when you updated to 0.9.5.
  • Style Lab experiments were copied into themes in 0.9.7. The originals are kept until you delete them.

Children

Aevilo is a general-purpose design tool and is not directed at children. You must be at least 18 years old to create an account or subscribe. We do not knowingly collect personal information from anyone under 18; if you believe we have, contact support@aevilo.app and we will delete it.

Limited Use (Chrome Web Store)

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Aevilo uses data only for its single purpose: visual inspection and customization of websites in your own browser. Support staff may review information submitted through support forms. The publisher must verify the scope of this disclosure against the released product.

When Aevilo's data practices change

If a new version handles data differently, Aevilo tells you in the extension before the change affects you. For example, after updating to 0.9.10, automatic page reading stops until you choose again: the popup and dashboard explain what changed and ask Allow or Not now. Aevilo never treats an existing installation as consent. This policy is updated at the same time.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA) you may have rights to access, correct, delete, export or restrict the use of your personal information, and to object to its processing. Data stored in your browser is yours to review and delete at any time in Settings → Privacy Center. For server-side data, use Download my data and Delete account on the account page at aevilo.app/account/, or e-mail support@aevilo.app; we respond within 30 days. We do not sell personal information and do not share it for cross-context behavioural advertising. You may lodge a complaint with your local data-protection authority.

Changes to this policy

Changes are posted on this page with a new effective date and summarised on aevilo.app/changelog/. For material changes affecting account holders we also e-mail the address on the account.

Contact

Edgar Iniguez, California, United States. E-mail: support@aevilo.app.

Account and service records

When enabled, account services store email addresses, optional display names, hashed sign-in and session tokens, linked-device records and subscription status. Support and feedback forms store submitted messages and contact details. Waitlist registrations store email addresses and signup metadata. Avoid including passwords or sensitive page content in messages.

Stripe processes checkout and billing details. Aevilo stores Stripe customer and subscription identifiers and subscription state. Card entry occurs on Stripe-hosted pages. Transactional e-mail (sign-in links) is sent through Brevo from no-reply@aevilo.app.

A daily housekeeping job (verified running on 2026-11-10) expires login tokens, device links, revoked or expired sessions after 30 days and rate-limit records after one day; removes the keyed IP hash from feedback after 30 days; and removes processed payment-event records after 90 days. Closed, spam and completed support, bug and feature submissions are removed 30 days after they are closed; you can download a copy of any message when you send it, and signed-in users also receive their submissions in the account export. Rate limiting uses a keyed, daily-rotating hash of your IP address; the address itself is not stored. Open submissions are kept until they are closed. Wait-list addresses are kept until the launch e-mail is sent or you unsubscribe. The audit log of account actions is kept for 12 months.

Account export (JSON download) and deletion are available on the account page. Deletion cancels any Stripe subscription immediately, revokes every session and linked extension, and erases personal fields; billing history is kept without personal data where financial-record rules require it. Payment card details are held by Stripe only. Local creative data is managed separately and remains available after subscription cancellation or downgrade. Anonymised billing records are retained for up to 7 years where tax and accounting rules require. Stripe keeps its own customer and invoice records under Stripe's privacy policy and legal retention duties; Brevo keeps delivery logs for sign-in e-mails under its own retention. Database backups and point-in-time history are kept for up to 30 days, after which deleted data is also gone from backups. Support submissions you made while signed in are detached from your account on deletion; e-mail support@aevilo.app if you want their content removed as well.

Aevilo for Chrome

The Chrome Web Store listing is being published. Join the list and we will e-mail you once when it is live.

Your address is used only to tell you about the launch. How this website handles data.