Privacy Policy

Last updated: 8/2/2026

Evalo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information we collect

• Account information: name, email address, company, and password (stored hashed).
• Content you provide: job descriptions, uploaded CVs, notes, and evaluation preferences.
• Generated content: AI-produced candidate evaluations, scores, summaries, and recommendations.
• Usage data: log-in times, feature usage counts, evaluation history, and audit events.
• Technical data: IP address, browser type, device information, and cookies necessary to run the service.

2. How we use your information

• To provide, operate, and maintain the Evalo service.
• To generate AI-assisted candidate evaluations on your behalf.
• To enforce plan limits, prevent abuse, and secure your account.
• To communicate with you about product updates, security notices, and support.
• To improve the reliability, safety, and quality of our service.

3. AI processing

CV text and job context are sent to a trusted third-party large language model provider solely to generate your evaluation. This content is processed transiently for the purpose of your request and is not used by us or by the provider to train foundation models.

4. Sharing your information

We do not sell your personal information. We share limited data only with:

• Infrastructure providers (hosting, database, storage, email delivery) acting as processors under contract.
• Our AI provider, strictly for the purpose of generating your requested evaluation.
• Payment processors, when you subscribe to a paid plan.
• Law-enforcement or regulators when we are legally required to do so.

5. Data retention

We retain your account and evaluation data for as long as your account is active. You can delete individual CVs, candidates, or your entire account at any time. Deletion is propagated to backups within a reasonable period.

6. Security

Your data is stored in encrypted databases with strict row-level security so that only you can access your records. File storage buckets are private, and access is granted via short-lived signed URLs. We use TLS in transit and encryption at rest.

7. Your rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@evalo.online.

8. International transfers

Evalo is operated globally. Your data may be processed in countries other than the one in which you reside. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children

Evalo is not intended for use by anyone under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-product notice.

11. Contact us

Questions about this policy? Email privacy@evalo.online.