Privacy Policy
Last updated: 30 October 2026
This Privacy Policy explains how EVOLIO.AI SOFTWARE SRL (“Evolio”, “we”, “us”) collects and processes personal data when you visit evolio.ai or request a demo. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Romanian law.
1. Who is responsible for your data
The data controller is:
EVOLIO.AI SOFTWARE SRL Str. Lt. Victor Manu nr. 44, parter, bl. G1, sc. B, ap. 1, Sector 2, București, România Email: info@evolio.ai
For any privacy question or to exercise your rights, contact us at info@evolio.ai.
2. What data we collect
- Demo request data you submit through our form: your name, work email address and company name.
- Communications: any information you include when you contact us by email or phone.
- Technical and usage data: first-party analytics about how the site is used (for example pages viewed and the campaign that brought you here). See our Cookie Policy for details.
We do not knowingly collect special categories of personal data through this website.
3. Why we use your data and the legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to your demo request and contact you | Steps taken at your request prior to a contract (Art. 6(1)(b)) |
| Communicate with you and provide support | Our legitimate interest in responding to enquiries (Art. 6(1)(f)) |
| Basic measurement of visits, pages and campaigns with our first-party analytics | Our legitimate interest in understanding and improving our website and campaigns (Art. 6(1)(f)) |
| Google Analytics cookies and ChatGPT ads measurement | Your consent (Art. 6(1)(a)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Who we share data with
We share personal data only with service providers (“processors”) who help us operate, such as:
- our website hosting and infrastructure provider;
- our CRM / form provider (e.g. HubSpot) used to manage demo requests;
- privacy-friendly website analytics.
These providers process data on our behalf under appropriate agreements. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
5. How long we keep your data
We keep demo-request and contact data only as long as necessary to handle your request and our ongoing relationship, and thereafter as required by law. Analytics data is retained in aggregated or short-lived form.
6. Your rights
Under the GDPR you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting prior processing).
To exercise any right, email info@evolio.ai. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, dataprotection.ro).
7. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
8. Data processed through our platform (WhatsApp, email and documents)
Evolio reads orders that our business customers (distributors) receive from their own customers through WhatsApp, email and documents, and turns them into structured orders for the distributor’s ERP.
When a distributor connects a WhatsApp Business number to Evolio through Meta’s WhatsApp Business Platform, we receive the messages sent to and from that number (text, images, voice notes, documents), the sender’s phone number and WhatsApp profile name, and the time of each message, plus any contacts and chat history the distributor chooses to share.
We use this data only to identify orders, customers and products, to show them to the distributor’s staff in our app, and to send confirmed orders to the distributor’s systems. We do not send messages on the distributor’s behalf, we do not use the data for advertising, and we do not sell it.
For this data the distributor is the data controller and Evolio is the data processor.
Sub-processors: Meta Platforms (WhatsApp Business Platform), Supabase (database), Railway (hosting), OpenAI and Google via OpenRouter (AI processing), Google Firebase (app notifications). Transfers outside the EEA are covered by Standard Contractual Clauses.
We keep this data while the distributor’s account is active, and delete it within 30 days after they disconnect or end the contract, unless the law requires otherwise.
9. How to delete your data
- Distributors: remove Evolio in Meta Business Suite (Settings → Integrations → Connected apps → Evolio → Remove) and email info@evolio.ai asking for deletion. We delete your data within 30 days and confirm by email.
- Anyone who wrote to a connected number: email info@evolio.ai with your phone number. We delete your messages within 30 days.
- Website visitors and demo requests: email info@evolio.ai.
10. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with its update date.