Data Processing Addendum

Last updated: November 5, 2026

This DPA is part of the Terms of Service. It applies when Evorove processes personal information of prospects, and of contacts you add, in order to provide the Service. It is written for businesses in the United States. It is not a HIPAA business associate agreement and not a UK or EU standard-contractual-clause pack.

Evorove is operated by [operator name pending], an individual. Address: [operator address pending].

1. Roles

You, the account holder, decide why prospect and contact information is processed. In US privacy-law terms, you are the business.
Evorove is the service provider. We process that information to provide the Service and as this DPA allows.
Information about you as our customer is covered by the Privacy Policy. For that information, we are the business collecting it.

2. Scope

Subject matter: searching open sources on Pro, storing contacts, and sending and reading email for your account. Duration: the life of the account, plus the retention described in the Privacy Policy. Nature: storage, drafting, sending, reading mail, and security records. Data: identifiers and contact details you supply or the Service finds, the reason for writing, public source material, message content, and the mailbox settings needed to send. People: the prospects and contacts in the account.

3. Instructions

We process this information only to provide, secure, and support the Service, as this DPA, the Terms, and the Privacy Policy describe, as you instruct in the product, and as law requires. We do not sell it. We do not use it for cross-context advertising.

4. AI

We may send bounded text to Anthropic so the Service can describe a reason to write and phrase a message. Anthropic is a subprocessor. We do not use that content to train, fine-tune, or build a foundation model, and we do not ask a subprocessor to do so for our benefit beyond what its ordinary API terms say about API traffic.

5. Confidentiality

People who can access this information are under a duty to keep it confidential. Access is limited to providing, securing, and supporting the Service.

6. Security

Records are kept per account. Account passwords are hashed. Mailbox passwords are stored encrypted and used only to send and read mail for that account. The session cookie is HTTP-only. No internet service is perfectly secure. You must protect the account password and the mailbox you connect.

7. Subprocessors

You authorize the subprocessors listed at evorove.com/subprocessors. We will update that page before a new subprocessor processes this information in production. The email provider for the mailbox you connect is your provider. We do not appoint it.

8. Requests

If a person asks us about mail sent for you, we will direct them to you when we can tell which account sent it. If you ask us to find, correct, or delete a person’s records, email [email protected]. We will do so unless the law requires us to keep a copy.

9. Security incidents

If we confirm unauthorized access to this information on our systems, we will tell you without unreasonable delay, with what we know: what happened, which data, and what we are doing. The notice states the facts we have.

10. Deletion

When the account ends, you may ask us to delete this information. We will delete or anonymize it, except backups that age out on their own, suppression entries kept so a person who asked to stop is not emailed again, and records we must keep for law, billing, or security.

11. Questions about security

On a written request, no more than once a year, we will describe in reasonable terms the safeguards that apply to the Service. An on-site audit is not part of the subscription.

12. Term

This DPA lasts while we process this information for you. If it conflicts with the Terms on that processing, this DPA controls.