evum

Privacy Policy

Effective date: June 25, 2026

1. Introduction

evum AI (“evum”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the evum platform and website.

2. Information We Collect

We collect information in the following ways:

  • Account information: Name, email address, job title, and organisation name when you register for an account or contact us.
  • Customer Data: Data you upload or generate within the platform, such as AI tool inventories, spend records, and maturity assessments.
  • Usage data: Information about how you interact with the Service, including pages visited, features used, and session duration.
  • Device and technical data: IP address, browser type, operating system, and referring URLs collected automatically when you access the Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions and send related information.
  • Send administrative communications, such as updates and security alerts.
  • Respond to your comments, questions, and support requests.
  • Analyse usage patterns to improve and develop the Service.
  • Comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal data, we rely on: (a) your consent; (b) the performance of a contract with you; (c) our legitimate interests in operating and improving the Service; or (d) compliance with a legal obligation.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Service providers: Trusted third-party vendors who assist in delivering the Service (e.g., cloud infrastructure, analytics), bound by confidentiality obligations.
  • Legal requirements: When required by law, court order, or governmental authority.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, where the acquirer agrees to honour this Privacy Policy.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. The evum platform is built on Google Firebase with tenant isolation enforced at the architecture level. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate personal data.
  • Request deletion of your personal data.
  • Object to or restrict our processing of your personal data.
  • Request portability of your personal data.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@evum.ai.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse usage, and support marketing. You can control cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Service. We use analytics tools to understand aggregate usage patterns — no personally identifiable behavioural profiles are sold to advertisers.

11. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of the Service after any changes constitutes your acceptance of the new policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@evum.ai or by post at the address listed on our contact page.