Privacy Policy

1. Who this covers

• Account holders — the business that signs up, and the person who uses that account. For account data, we decide why it is collected.
• Prospects — people whose contact details you add, or whom the Service finds in open sources and emails for you. For their information, you decide why it is used. We process it to provide the Service. See the Data Processing Addendum.

2. Who we are

Evorove is the product at evorove.com. It is offered to businesses in the United States. The application runs on a server in the Netherlands. Write to [email protected].

3. Information we collect

Account. Work email, a hashed password, business name, and subscription status. Card and tax details for the subscription are collected by Lemon Squeezy. We do not store the card number in the application.

Settings. Offer text, payment link, sender name, postal address, mailbox host and username, the mailbox password in encrypted form, daily cap, quiet hours, and the search brief.

Prospects and mail. Contact details, the reason for writing, public evidence and its source, and the email thread. Outreach is sent and received through the mailbox you connect.

Technical data. IP address, user agent, timestamps, and security logs used to run and protect the Service. We do not use third-party advertising cookies.

4. How we use information

• Provide the Service: search open sources on Pro, draft and send email from your mailbox, read replies, and show the thread on the board.
• Protect the account: sign-in, rate limits, and records of security events.
• Bill the subscription through Lemon Squeezy.
• Send the operator a Telegram notice. The daily summary names each account and gives the latest search status and how many results that search found, plus counts for the last 24 hours: letters, replies, offers, payments, errors, and system errors. A failure notice gives the job name, the account id (or “system” when it is not tied to an account), and the error type. These notices do not include prospect names or email text.
• Send system emails, including password resets and account notifications, through Resend (United States). Cloudflare Email Routing forwards incoming email addressed to [email protected].
• Comply with law and the Terms of Service.

5. AI processing

Anthropic may receive text from your account, from open sources, and from an email thread so the Service can describe a reason to write and phrase a message. The wording is limited to your saved offer and payment link. We do not use that content to train or fine-tune a foundation model.

6. People you email

The AI writes each outreach email on your behalf. You are responsible for the basis for emailing each person. Each outreach email includes an unsubscribe link and the postal address on the account. A stop request suppresses further outreach to that address. If someone asks us about mail sent for you, we will point them to you when we can tell which account sent it. We will help you find or delete their records when you ask.

7. Cookies

The account uses a secure, HTTP-only session cookie so you stay signed in, and a short-lived cookie for form protection. These are needed to operate the account. We do not set advertising cookies.

8. Sharing

We share information with the companies on the Subprocessors page, and only to provide the Service. The mailbox you connect is yours. That email provider processes outreach under your account with them. We may also share information if the law requires it, to protect the Service, or if the business is transferred. We do not sell personal information, and we do not share it for cross-context advertising.

9. Retention and deletion

We keep account, contact, and mail records while the account needs the Service, and afterward only as needed for security, billing, or law. Encrypted backups on Cloudflare R2 age out on their own schedule. Email [email protected] to ask for deletion of an account or of a prospect’s records. We will delete or anonymize what we can, except what we must keep for security, billing, or law.

10. Requests from the United States

If you are a US resident, you may ask to access, correct, delete, or receive a copy of personal information we hold about you as an account holder. We will not treat you differently for asking. California residents can also use the rights the CPRA gives to know, delete, and correct. We do not sell or share personal information as those words are used in the CPRA.

Send the request to [email protected] from the email on the account. We may need to confirm it is you. If you received mail from a business that uses Evorove, contact that business first. They decide the purpose of that mail. We will help them with the request.

11. Children

The Service is for businesses. It is not for children under 18 and is not directed at children under 13. If you believe we have information from a child, write to [email protected] and we will delete it.

12. Where information is processed

The application runs on a server in the Netherlands. Encrypted backups are stored with Cloudflare. Other providers process information in the places listed on the Subprocessors page. The operator may access the Service from the country where they work.

13. Changes

We will update this page when the practice changes. The date at the top is the current version. If a change in how we use personal information is significant, we will post it here and email the account.

14. Contact

Privacy questions and deletion requests: [email protected].