Privacy Policy

Last updated: September 18, 2026

Evalo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information when you use the Evalo platform.

1. Information We Collect

• Account information: name, email address, company information, and password credentials.
• Content you provide: job descriptions, uploaded CVs, candidate information, notes, evaluation preferences, interview information, and other content you choose to provide to Evalo.
• Google Workspace data: when you connect a supported Google Workspace account, Evalo may access only the Google Workspace data and permissions necessary to provide the Google Workspace functionality you explicitly request, such as email or calendar functionality.
• Generated content: AI-assisted candidate evaluations, scores, summaries, and recommendations generated as part of Evalo's recruiting functionality.
• Usage data: login times, feature usage, evaluation history, and audit events.
• Technical data: IP address, browser type, device information, and cookies or similar technologies necessary to operate and secure the service.

2. How We Use Your Information

We use information to:

• Provide, operate, and maintain the Evalo service and its user-facing functionality.
• Provide recruiting and candidate-management functionality requested by you.
• Generate AI-assisted candidate evaluations when you request those features.
• Provide Google Workspace functionality that you explicitly authorize, such as supported email or calendar functionality.
• Enforce plan limits, prevent abuse, and secure user accounts and the service.
• Communicate with you about product updates, security notices, support, and service-related matters.
• Improve the functionality, reliability, security, and performance of Evalo in accordance with applicable data-protection and third-party platform requirements.

Google Workspace user data is used only for the Google Workspace functionality provided by Evalo and related purposes permitted under Google's applicable policies.

3. Google Workspace API Data

When you connect a Google Workspace account, Evalo accesses only the Google Workspace data necessary for the functionality you authorize.

Google Workspace API data is not sold, rented, used for advertising, or used to create, train, or improve generalized, foundational, or frontier artificial intelligence or machine-learning models.

Evalo does not use Google Workspace API data to train generalized AI or machine-learning models.

Where Google Workspace data is transferred to a service provider, such transfer is limited to what is necessary to provide the user-facing functionality you have authorized, or to purposes permitted under Google's applicable policies, such as security or legal compliance.

Evalo's use of Google Workspace API data adheres to the Google User Data Policy, including the Limited Use requirements.

4. AI Processing

Evalo may use third-party large language model providers to generate AI-assisted candidate evaluations and related recruiting functionality requested by the user.

Candidate CV text, job context, and other content necessary for an evaluation may be transmitted to an AI service provider solely to provide the requested Evalo functionality.

Evalo does not use Google Workspace API data to train or improve generalized or foundation AI models.

Any third-party AI processing is subject to the applicable provider's terms, privacy commitments, and data-processing controls.

5. Sharing Your Information

We do not sell your personal information.

We may share limited information with:

• Infrastructure providers: hosting, database, storage, security, and other infrastructure providers acting as service providers or processors.
• AI service providers: where necessary to provide AI-assisted functionality explicitly requested by you.
• Google Workspace services: when you choose to connect Google Workspace functionality and authorize the applicable Google permissions.
• Payment processors: when you subscribe to a paid plan.
• Service providers supporting security and abuse prevention: where necessary to protect the service and users.
• Law-enforcement authorities or regulators: when disclosure is legally required.

Third-party service providers are permitted to process information only as necessary to provide their services to Evalo and subject to applicable contractual, privacy, and security requirements.

6. Data Retention

We retain account and evaluation data for as long as reasonably necessary to provide the service and fulfill the purposes described in this Privacy Policy.

You may delete individual CVs, candidates, or your account where those deletion controls are available.

Google Workspace data is retained only as necessary to provide the functionality you have authorized and as permitted by applicable Google policies.

Deleted information is removed from active systems and propagated to backups within a reasonable period, subject to applicable legal and security requirements.

7. Security

We use reasonable technical and organizational safeguards designed to protect your information.

These measures include encryption in transit, encryption at rest where applicable, private file storage, access controls, row-level security where applicable, and short-lived signed URLs for protected files.

OAuth credentials and tokens are protected using appropriate security controls.

8. Your Rights

Depending on your jurisdiction, including under GDPR and CCPA where applicable, you may have rights to access, correct, export, delete, or restrict processing of your personal information.

You may also disconnect authorized third-party integrations through the functionality provided by Evalo or the applicable third-party service.

To exercise applicable privacy rights, contact us at privacy@evalo.online.

9. International Transfers

Evalo operates globally. Information may be processed in countries other than the country in which you reside.

Where required, Evalo uses appropriate safeguards for international data transfers, including Standard Contractual Clauses or equivalent safeguards.

10. Children

Evalo is not intended for use by anyone under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

Where required, we will notify users of material changes by email or through an appropriate in-product notice.

12. Contact Us

If you have questions about this Privacy Policy or Evalo's data practices, contact:
support@evalo.online