Welcome to Evosus®, provided and maintained by Evosus, Inc. (“Evosus,” or “Company,” or “We,” or “Us,” or “Our”). Evosus offers on-premise and cloud based business management software and services to help businesses streamline and grow through evosus.com and other websites we own or operate (“Site”), including our legacy software product (“Legacy Software”), cloud-based applications (“SaaS Solution”), as well as related merchant products (“Products”), and other products and services we offer (collectively the “Evosus Services”). This Policy describes how we collect and use your information when you access or use the Evosus Services and provides you with notice about your choices and controls over that information. If you disagree with any practices described in this Policy, your choice is to not use Evosus Services.
Personal Information does not include: (a) publicly available information; (b) aggregate information, meaning data about a group or category of services or users from which individual identities and other Personal Information has been removed; or (c) deidentified information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer.
The categories of Personal Information we collect about you depends on your interactions with the Evosus Services, whether as a customer using the Legacy Software, SaaS Solution, or other Evosus Services for your business (“Customer”), a user registered to access the Evosus Services on behalf of a Customer (“User”) or a visitor who interacts with us through the Site or other means. In the preceding 12 months, Evosus has collected the following categories of Personal Information:
In the preceding 12 months, we have collected Personal Information from the sources and for the purposes described below:
When you register to use Evosus Services, we will collect identifiers like your name, email and password, and your employment information like business name, location, industry, and number of employees. We use this information to register your account and provide access to the Evosus Services. When you use the Evosus Services, we will collect information related to your commercial history, such as service used and transactions completed. Additionally, users may have the option to provide us with demographic information that includes sensitive Personal Information or protected Personal Information like gender, ethnicity, or age, which we only collect with your consent and never share with third parties. We collect this information with the user’s consent and use the information to provide the Evosus Services, communicate with you about our company, and for our internal business purposes.
If you wish to register employees or others as additional users, we will collect identifiers and other categories of Personal Information as needed to provide access to your additional users. You are responsible for ensuring that any Personal Information you provide on behalf of your additional users or any other person is collected and submitted to Evosus in a lawful manner.
We may collect Personal Information directly from you online when you visit the Site or offline when you communicate with us through any means. If you submit an electronic form on our Site, place an online order for Evosus Services, apply for Evosus Financial Services, or contact our Support Center via the Site, we will collect your identifiers and other information necessary to fulfill your request, along with any other Personal Information you choose to provide as part of those communications. We collect this information with your consent and use it to provide you with the Evosus Services, information, or support that you request.
If you submit feedback or testimonials to us, we may post your submission to the Site after giving you written notice. You may request that we remove your testimonial or other comments from the Site at any time by submitting a Consumer Privacy Request via email to firstname.lastname@example.org.
Offline, if you interact with Evosus at a trade show and offer your business card, allow us to scan your badge, or sign-in at our booth, we will collect the Personal Information you offer to us and use that information to communicate with you about the Evosus Services and send you marketing materials. We also collect Personal Information from you when you call or write to us, and we add that information to contact you about your interest in the Evosus Services and to provide you with the information and support you request.
In general, you can visit the Site without directly providing any Personal Information. However, we may automatically collect technical and Personal Information related to your internet activity on the Evosus Services, such as your: (i) search queries; (ii) device information (e.g., IP address, operating system, browser type, device ID, mobile network information); (iii) usage details (e.g., traffic data, communication data and the features or resources you access and use); and (iv) metadata. We may collect this information directly or through a service provider like Google Analytics. We collect this information to better understand visitor behavior, demographics, and other metrics, and to achieve our legitimate interest of providing and improving the Evosus Services. We do not link this information to your Personal Information.
We sometimes receive information about market trends and potential new business leads from referral sources like manufacturers, distributors, affiliates, and vendors offering complimentary products and services. Additionally, our Customers sometimes refer us to other businesses that might find the Evosus Services beneficial. The referrals we receive may include Personal Information for one or more individuals. In each case, we collect referral information as part of our legitimate interest to market the Evosus Services to new business leads. Evsous will only use the Personal Information collected from referral sources and other third parties to communicate with potential new business leads about the Evosus Services.
At registration, if you select an Evosus Service that requires payment of a fee, you will be prompted to provide payment information. All payments are processed through a secure PCI-DSS compliant third-party payment gateway. Payment information is collected via a secure connection and stored on the payment processor’s systems in a tokenized form and protected from unauthorized access by Evosus, our Customers, and third parties. We use your payment information solely to collect payments due or check your financial qualifications for the Evosus Financial Services, as applicable.
In addition to the specific uses described above, Evosus might use your Personal Information to:
Evosus retains the Personal Information we collect only for as long as is necessary to fulfill the purposes of collection or our internal business or other lawful purposes. When we have no ongoing legitimate business need to process your Personal Information, we will securely delete the information or anonymize it. If this proves infeasible for any reason, we will instead securely store your Personal Information and isolate it from any further processing until deletion is possible.
The Evosus Services are not intended for or targeted at children under the age of eighteen (18) (“Minors”). Evosus does not knowingly or intentionally collect any Personal Information from Minors. If we discover that a Minor has provided us with Personal Information, we will delete that information from our systems. If you believe we might have any information collected online from a Minor, or if you become aware of any unauthorized submission of information to us, please contact us at email@example.com.
In the preceding 12 months, Evosus has disclosed the following categories of Personal Information for a business purpose:
In the preceding 12 months, Evosus has disclosed Personal Information to the following recipients for a business purpose:
Service providers engaged by Evosus may have access to your Personal Information in order to perform their contractual obligations to us. Our service providers include but are not limited to marketing companies, IT service providers, payment processors, and email and data hosting providers. The type of information that we provide to a service provider will depend on the service that they provide to us. We prohibit our service providers from selling or disclosing the Personal Information we disclose to them, and we require all service providers to maintain confidentiality standards that are commercially reasonable to ensure the security of your Personal Information.
Under certain circumstances we may disclose your Personal Information to other third parties, as required or permitted by applicable law. For example, we may be required to disclose Personal Information in response to a legal requirement, investigation, or court order. If Evosus goes through a business transition (e.g., merger, acquisition, or sale of a portion of our assets), or if we believe disclosure is appropriate to defend our legal claims, take action regarding illegal activities, or prevent fraud or harm to any person, we may disclose certain Personal Information to third parties. Additionally, Evosus may disclose your Personal Information to any third party if we have your consent.
Cookies are small text files downloaded and stored on your device when you visit a website or other platform. Cookies are generally used for functionality, security, analytics, or advertising. Some cookies are strictly necessary to the function of the website or other platform, while others enable certain features.
Do Not Track signals are signals sent through a browser informing us that you do not want to be tracked. Currently, our systems do not recognize browser “do-not-track” requests. If this changes in the future, we will update this Privacy Notice.
To exercise your privacy rights beyond the methods made available in the Evosus Services, express concerns, lodge a complaint, or obtain additional information about the use of your Personal Information, please submit a verifiable Consumer Privacy Request via support.evosus.com or by emailing firstname.lastname@example.org.
Evosus may only legally fulfill a Consumer Privacy Request when we have sufficient information to verify that the requester is the person or an authorized representative of the person about whom we have collected Personal Information, and to properly understand, evaluate, and respond to the request. We do not charge a fee to process or respond to a verifiable request unless we have legal grounds to do so, such as requests that are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We endeavor to respond to a verifiable Consumer Privacy Request from a California Consumer within 45 days of receipt or as required by law. If we require more time, we will notify you in writing of the reason and extension period. We will deliver our written response by mail or electronically, at your option. If we cannot comply with part or all of your request, we will explain the reasons in our response.
Note that if your Personal Information was entered into the Evosus Services by one of our Customers, then we process your Personal Information in our capacity as a service provider and cannot fulfill your request directly. In that case, we will relay your request to the respective Customer for further processing and fulfillment.
In addition to the privacy controls Evosus offers all users, under the California Consumer Privacy Act of 2018 (“CCPA”) entitles residents of the State of California (“California Consumers”) to additional notices and disclosures regarding their privacy rights. This section provides those required notices and disclosures for the benefit of California Consumers.
Note that Personal Information collected in a business-to-business context or when you are performing job duties as an employee to a Customer or other user is not protected under the CCPA. Without limiting the foregoing, California Consumers may exercise the following rights over their Personal Information, subject to our receipt of a verifiable Consumer Privacy Request, as well as any exceptions and limitations that may apply.
If a business uses or discloses your Sensitive Personal Information for the purpose of inferring characteristics about you, then you have the right to direct the business to limit the use and disclosure of such information to certain legally permissible purposes. Evosus does not use or disclose your Sensitive Personal Information to infer characteristics about you. If this changes in the future, we will provide a method for you to limit the use and disclosure of that information.
We work to protect your Personal Information by using reasonable and appropriate technical, administrative, and physical security practices and procedures to help protect Personal Information from unauthorized or illegal access, destruction, use, modification, or disclosure. We maintain internal policies to govern the collection, processing, access, and handling of data.
Evosus computer systems are hosted in a secure data center environment that uses a firewall, intrusion detection systems, and other advanced technology to prevent interference or access from outside intruders. The data center is a highly protected environment with several levels of physical access security and twenty-four (24) hour surveillance. Access to Personal Information is restricted in Our office(s) and only employees, Evosus affiliated service providers, engineers, developers, and/or independent contractors who need the information to perform a specific job, are granted access to your Personal Information. Employees and independent contractors who violate our privacy safeguards are subject to disciplinary action, including termination. Evosus employees responsible for handling user inquiries are informed of applicable privacy law requirements.
All information you provide to us is secured using industry standard measures, including encryption where appropriate. Secure areas of the Site are protected using server authentication and data encryption including Secure Sockets Layer (SSL) technology to ensure that data is safe, secure, and available only to authorized persons. Personal Information input to the SaaS Solution is stored and managed on secure servers and third-party hosting services. Personal Information input to our Legacy Software is stored and managed on the servers of the Customer using the Legacy Software according to the Customer’s privacy practices.
Please note, however, that no transmission of data over the Internet or mobile platforms is 100% secure, and we cannot guarantee absolute security or that unauthorized third parties will not defeat our security measures or use your Personal Information for improper purposes. To use certain Evosus Services, you will have a login and password. We encourage you to take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your login and password private. We are not responsible for any lost, stolen, or compromised passwords, or for any activity on your profile via unauthorized activity.
Evosus is owned and operated in the United States and is intended for use by users living in the United States or Canada. We do not warrant that Evosus is appropriate or authorized for use in any other jurisdictions. If you use Evosus from outside of the United States, Personal Information we collect about you will be transferred to our servers in the United States and maintained there indefinitely. This may require the transfer of your Personal Information out of your country of origin with laws governing data collection and use that may differ from or be more restrictive than U.S. law, or may result in governments, courts, law enforcement, or regulatory agencies having access to or obtaining disclosure of your Personal Information pursuant to the laws of the applicable foreign jurisdiction. You are responsible for determining whether this Policy and Evosus comply with the laws that apply to you. By allowing us to collect Personal Information about you, you consent to the transfer and processing of your Personal Information as described in this paragraph.