Privacy Policy

1. Controller

The controller responsible for data processing is evolvAI Inc., 145 1/2 Church Street, Unit 5, Toronto, Ontario M5B 1Y4, Canada. You can reach us at contact@evolvai.biz.

2. Data we process

Account data: name, email address, password hash, preferred language and the organization you belong to.

Workspace content: company profile (country, industry, size, processes, software), assessment answers, opportunities, business cases, roadmap items, uploaded documents and messages you create in the platform.

Usage data: log entries such as IP address, browser type, requested pages, timestamps and error reports, used to operate and secure the service.

Communication data: messages you send to us by email or through in-app forms.

3. Purposes and legal bases

Providing the platform and your account (performance of a contract).

Security, abuse prevention, troubleshooting and service improvement (legitimate interests).

Sending product or marketing emails where you have opted in (consent, withdrawable at any time).

Meeting legal, accounting and tax obligations (legal obligation).

4. AI processing

Some features (AI assessment reports, opportunity finder, architecture designer, Corporate LLM, blog generation) send the content you submit to third-party AI model providers so that a result can be generated.

We do not use your workspace content to train our own models. Please do not submit personal data of third parties or confidential information you are not allowed to share.

5. Processors and recipients

We work with service providers that process data on our behalf under written agreements: hosting and database infrastructure, email delivery, AI model providers and payment processing.

Data may be processed in Canada, the United States and the European Union. Where required, transfers are covered by appropriate safeguards such as EU Standard Contractual Clauses.

6. Retention

Account and workspace data is stored while your account exists and is deleted or anonymised after account closure, unless statutory retention periods (for example for invoices) require longer storage.

Technical logs are kept for a limited period for security and diagnostic purposes.

7. Your rights

Depending on your location you have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time.

To exercise a right, write to contact@evolvai.biz. You may also lodge a complaint with your competent supervisory authority.

8. Security

Access to workspace data is restricted to members of your organization through authentication and row-level access rules. Data is transmitted over encrypted connections (TLS).

9. Changes

We may update this policy when the platform or legal requirements change. The current version is always published on this page.