Legal
Privacy Policy
1. Who we are
EvolveBiz AI ("we", "us") is an AI engineering company. This policy explains how we handle personal data when you visit evolvebizai.com, contact us, book a meeting or work with us.
Data controller: [[TODO: founder names]], independent professionals trading as EvolveBiz AI, based in India. EvolveBiz AI is not yet a registered company. Email: privacy@evolvebizai.com.
2. What we collect
- Details you give us — name, work email, phone, company, country, industry and the message you send through our forms, chat, email or booking page.
- Meeting details — the time you book and any answers you add to the booking form.
- Demo calls — if you call our AI demo line, the call may be recorded and transcribed so we can follow up and improve the agent. You're told this at the start of the call.
- Technical data — IP address, browser and device type, used for security and spam prevention.
- Analytics — only if you allow analytics cookies. See our Cookie Policy.
Please don't send us sensitive data (health, financial or patient records) through the website. If a project needs it, we agree how to handle it in a separate contract.
3. Why we use it (and our legal basis)
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Reply to your enquiry and run meetings | Steps before a contract / legitimate interest |
| Deliver the services you hire us for | Contract |
| Keep the site secure and stop spam | Legitimate interest |
| Analytics and marketing cookies | Consent (you can withdraw it any time) |
| Send occasional updates about our services | Consent, or legitimate interest for existing business contacts — unsubscribe any time |
| Tax, accounting and legal duties | Legal obligation |
We do not sell your personal data, and we do not use it to train AI models for other clients.
4. Who we share it with
We use trusted service providers ("processors") who handle data only on our instructions:
- Netlify — website hosting
- Supabase — database for enquiries
- HubSpot — customer relationship management (CRM)
- Google Workspace — email and calendar
- Cal.com — meeting scheduling
- Resend — sending confirmation emails
- Cloudflare Turnstile — spam protection on forms
- [[TODO: voice demo provider, e.g. Vapi / Retell, once chosen]]
We may also share data with professional advisers or authorities when the law requires it.
5. International transfers
We're based in India and our providers may store data in the US, EU or other countries. Where UK/EU data leaves those regions, we rely on safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
6. How long we keep it
- Enquiries that don't become projects: up to 12 months after our last contact.
- Client records: for the length of the contract plus the period required by tax law (currently up to 8 years in India).
- Demo call recordings: up to 90 days.
- Security logs: up to 30 days.
7. Your rights
Depending on where you live (for example UK/EU GDPR, India's Digital Personal Data Protection Act 2023, the UAE PDPL, New Zealand's Privacy Act 2020 or US state privacy laws), you can ask to:
- see the personal data we hold about you
- correct or delete it
- restrict or object to how we use it
- receive a copy in a portable format
- withdraw consent at any time
Email privacy@evolvebizai.com. We reply within 30 days. You can also complain to your local data protection authority (in the UK, the ICO).
8. Contact & grievance officer
Privacy questions: privacy@evolvebizai.com
Grievance officer (India DPDP Act): [[TODO: name]], privacy@evolvebizai.com
We may update this policy. The date at the top shows the latest version.