How EvoMerge handles your information.

EvoMerge is a business platform (CRM, projects, billing, and more) built and operated by ACAA Solutions, Inc. ("EvoMerge," "we," "us"). This policy covers two things: this public website (evomerge.com) and the EvoMerge application you sign in to. Where a customer has a separate written agreement with us, that agreement takes precedence for that customer's data.

Who is responsible for what

For the business information a customer and its team put into EvoMerge (companies, contacts, deals, projects, invoices, files, and so on), the customer decides what is entered and why, and we process it on the customer's behalf to provide the service. For the information needed to run accounts and keep the service working (sign-in details, security logs, billing), we are responsible for it ourselves.

Information we collect

• Account information - name, username, email address, role, and the organization an account belongs to.
• Sign-in and security records - login times, IP address, browser/device type, and failed-attempt counts, used to keep accounts secure.
• Customer content - everything a customer enters or uploads: records, notes, photos, documents, time entries, financial entries, and messages.
• Contact and trial requests - what you enter in the contact or free-trial forms on this site.
• Notification settings - if you turn on notifications, a device address issued by your browser or phone so alerts can be delivered to that device.
• Usage information - pages and features used, to improve the product and to guide new users through it.

Connections you choose to make

EvoMerge can connect to outside accounts, but only when an authorized user signs in and approves each one. You can disconnect at any time in EvoMerge, and also by removing EvoMerge's access in that provider's own account settings.

• Google (Search Console and Google Analytics). If you connect Google, EvoMerge requests read-only access to your Search Console and GA4 reporting data (search clicks, impressions, average position, top search queries, and organic-search visits and conversions) and the list of your Search Console sites and GA4 properties. We use it only to show you your own search and traffic results inside EvoMerge. We do not sell it, use it for advertising, or share it with anyone else, and nobody at EvoMerge reads it except as needed to support you. EvoMerge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• Microsoft 365 / Outlook. If you connect Outlook, EvoMerge reads the mail and calendar items you choose to sync and can send mail and update calendar events on your behalf, so conversations and meetings appear against the right records. The access token is stored encrypted.
• Payments. Card payments are handled by Stripe. Card numbers go to Stripe and are not stored by EvoMerge.
• AI features. If you use EvoMerge's AI assistant or connect Claude, the text you submit and the records needed to answer your request are sent to Anthropic to produce a response. Under Anthropic's commercial terms, content sent this way is not used to train its models.

Cookies and similar technology

The application uses cookies that are needed for it to work: a sign-in cookie (an optional "keep me signed in" choice makes it last 30 days), and security tokens that protect forms. The installable phone app keeps a small offline page; it does not store your records for offline use. This public website uses Google Analytics to count visits and see which pages are useful. We do not use advertising cookies or cross-site tracking of our own.

Who we share information with

We don't sell personal information. We use a small number of service providers to run EvoMerge, each limited to what they need to do that job: web and database hosting, email delivery (Microsoft), payments (Stripe), website analytics (Google), and AI processing (Anthropic) when you use AI features. We may also disclose information if the law requires it, or to protect the security of the service and its users.

How information is protected and kept

Each customer's data is kept separate from every other customer's, access to it is limited to that customer's own users, passwords are stored hashed, and connection tokens are stored encrypted. We keep customer content for as long as the customer's account is active, and for a reasonable period afterward so it can be returned or deleted on request. Security and sign-in records are kept as long as needed to protect the service.

Your choices and rights

You can turn notifications off, disconnect any connected account, or sign out at any time. You can ask what information we hold about you, ask us to correct or delete it, or ask for a copy by emailing sales@evomerge.com. If your information is in a customer's EvoMerge account, we may need to direct your request to that customer.

Children's privacy

EvoMerge is intended for businesses and is not directed at children under 13.

Changes to this policy

We may update this policy from time to time; the "last updated" date above will reflect the most recent change. Continued use after a change means you accept the updated policy.

Contact

Questions about this policy can be sent to sales@evomerge.com.

This page is provided for general informational purposes and is not a substitute for legal advice specific to your situation.