Privacy in the chat
Last updated: 4 November 2026 · Hevia is a product of evioe studio.
This version has been checked against Vela’s actual technical architecture. A review by a lawyer is still pending.
1. Who is responsible
Businesses use the Hevia chat on their own websites. The business whose website you are visiting is responsible. evioe studio operates Hevia and only processes the data on behalf of and on the instructions of that business (Art. 28 GDPR). We do not use it for our own purposes or to train AI models.
This page describes what happens to your data in the chat. The legal basis, purpose and contact details are given by the business in its own privacy policy.
2. What happens when
| Step | What happens |
|---|---|
| Page loads | Your browser loads the chat program from our servers; our hosting provider Vercel processes your IP address in doing so. Nothing is stored on your device. |
| Opening and starting the chat | The chat shows the business’s public settings and explains that an AI answers. If you click “Start chat”, this decision is kept in your browser’s storage so that you are not asked every time. |
| You write | Your message, the answer and the page address are stored in the database in Frankfurt. To answer, your question, the latest messages of the conversation and matching entries of the business are sent to Mistral AI’s AI service, which processes them in data centres in the EU and EFTA countries. The current conversation stays in your browser’s storage until you close the tab. |
| Form in the chat | Details from a form (for example a callback or appointment request) are stored and shown to the business in its dashboard; once email sending is set up, also by email. |
3. Which data
- Your messages and the answers, with time and language.
- The address of the page on which you open the chat.
- Details you enter in a form in the chat, such as name, email, phone, preferred date and request.
- Whether you clicked a booking link in the chat (time, nothing else).
- To protect against abuse, your IP address is only used as an irreversible, encrypted value, which is deleted after two days.
We do not store your IP address in the conversation, your browser identifier or a profile across websites. There are no cookies in the chat and no connection to advertising or analytics services. Please do not enter particularly sensitive data, such as health information.
4. AI and labelling
The chat is always labelled as AI: with a fixed notice at the start of every conversation and an AI badge next to the name, which the business cannot remove (Art. 50(1) AI Act). The AI only answers from the business’s entries and can still make mistakes; binding information, bookings and appointments are confirmed by the business. More under AI information.
5. Retention
- Hevia deletes conversations automatically after the period the business sets: 30, 90, 180, 365 or 730 days after the last message, or only when the business deletes them. Without a setting of its own, 365 days apply.
- Requests from forms are deleted after the same period, counted from receipt.
- The business can delete individual conversations at any time. If it deletes its business in Hevia, all conversations and requests are deleted.
- Deleted data remains in the encrypted backups for at most 30 days.
- Mistral AI stores requests and answers for up to 30 days to detect abuse and then deletes them.
- You delete the entries in your browser’s storage yourself: the current conversation by closing the tab, your “Start chat” decision in your browser settings.
6. Your rights
You have the rights under Art. 15 to 21 GDPR, in particular of access, rectification, erasure and objection. Please contact the business on whose website you chatted. If you write to us, we forward your request to the business and help it respond: hey@evioe.de.
7. Text module for businesses
If you use Hevia on your website, you must inform your visitors about it. You can copy this module into your privacy policy and complete the marked passages. It does not replace legal advice.
AI chat on this website
On our website you can ask questions to an AI assistant. It is provided by Hevia, a service of evioe · Web & IT Studio, Mahsum Kavak, Schwarzwaldstr. 61, 79539 Lörrach, Germany, which processes the data on our behalf (Art. 28 GDPR). When the page loads, your IP address is processed. If you start the chat, your messages, the answers and the page address are stored in a database in Frankfurt; your decision and the current conversation are kept in your browser’s storage (section 25(2) no. 2 TDDDG). To answer, your questions are sent to Mistral AI SAS (Paris) and processed in the EU or EFTA countries. We use details you enter in a form in the chat to deal with your request.
The legal basis is [Art. 6(1)(b) GDPR where a contract is concerned, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering questions quickly]. We delete conversations after [period set in the dashboard, e.g. 90] days. The assistant is labelled as AI and can make mistakes; only our confirmations are binding. Further information: https://hevia.app/en/privacy/chat
This English version is provided for convenience. If the two versions differ, the German version prevails.