Privacy Policy

Last updated: June 24, 2026

EvolvAI Solutions ("EvolvAI," "we," "us," or "our") provides AI-driven business automation services — including lead response, appointment scheduling, invoicing, document management, social media publishing, client reporting, and review management — to businesses across real estate, hospitality, construction, professional services, clinics and practice management, digital agencies, and e-commerce. This Privacy Policy explains what information we collect, how we use it, and the choices you have, whether you are a visitor to our website, a prospective client, or an end customer of a business that uses an automation system we built.

1. Information We Collect

We collect information in the following ways:

Information you give us directly — your name, business name, phone number, email address, and details about your operations, tools, and workflows, when you contact us via our website contact form, WhatsApp (+91 98207 34791), or email (sales@evolvai.co.in), or when we conduct a business process audit with you.
Information processed through automation systems we build for clients — when a business engages us, the automation systems we design may process information belonging to that business's own customers, such as:
- Contact details and messages submitted via WhatsApp, web forms, or calls
- Appointment, booking, and scheduling details
- Invoice, payment, and payment-proof information (including images/screenshots submitted for processing)
- Documents submitted for filing and organization
- Reviews, ratings, and feedback submitted on third-party platforms
- Order, inventory, and customer lifecycle data (for e-commerce automations)
In these cases, the business we work with is the data controller, and we act as a service provider/processor on their behalf. We only access this data to build, test, and maintain the automation, and only for as long as the engagement requires.
Technical information — standard web analytics (via Vercel Analytics) such as pages visited, approximate location, device/browser type, and referral source. We do not use this for advertising or sell it.

2. How We Use Information

To respond to inquiries and scope automation projects
To design, build, test, and maintain automation workflows on a client's existing tools (CRM, WhatsApp Business, calendars, accounting software, etc.)
To send project updates, invoices, and service communications
To improve our website and service offering
To comply with legal obligations

3. Third-Party Tools & Integrations

Our automations run on top of infrastructure our clients already use — for example WhatsApp Business API, Google Workspace/Drive, Telegram, calendar and booking platforms, CRMs, accounting tools (e.g. Zoho Books, Tally), e-commerce platforms, and advertising/analytics dashboards (Google Ads, Meta, Google Analytics). We connect to these systems under the access our clients grant us and do not use client or end-customer data for any purpose outside the agreed automation. We do not sell personal information to third parties.

4. Data Retention

We retain information only as long as needed to provide our services, fulfill the purpose it was collected for, or meet legal/contractual obligations. Data processed within a client's own systems (CRM, WhatsApp, accounting tools, etc.) remains subject to that client's retention practices, since it stays within their infrastructure — we operate on a "zero lock-in" basis and do not retain copies beyond what is needed for active project work.

5. Data Security

We use reasonable technical and organizational measures to protect information, including restricted access to client systems, secure credential handling, and building on top of each client's existing, already-secured infrastructure rather than centralizing data on our own servers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights as a Data Principal (DPDPA, 2023)

Where the Digital Personal Data Protection Act, 2023 ("DPDPA") applies, you have the right to:

Obtain a summary of the personal data we hold about you and the processing activities undertaken
Request correction, completion, or updating of your personal data
Request erasure of your personal data once it is no longer needed for the purpose it was collected
Withdraw consent at any time, as easily as it was given
Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
Lodge a grievance with us (see Section 9) and, if unresolved, approach the Data Protection Board of India

If your data was instead collected through an automation system we built for one of our clients (e.g. you booked an appointment, sent a WhatsApp message, or submitted a payment proof to a business we work with), that business is the Data Fiduciary for that data and is the correct party to contact, since they control and retain it on their own infrastructure. For information we hold directly — such as your inquiry to us — contact us using the details in Section 9.

7. Cross-Border Data Transfer

Some of the infrastructure we and our clients rely on — including website hosting (Vercel), WhatsApp Business/Meta, and certain cloud-based CRM, email, and analytics tools — may process or store data on servers located outside India, including in the United States. Where personal data is transferred outside India, we rely on the service providers' own contractual and security safeguards and only engage providers consistent with applicable Indian law, including the DPDPA and any rules issued by the Central Government restricting transfers to specific countries.

8. Personal Data Breach

In the event of a personal data breach affecting data we hold directly, we will take reasonable steps to contain and remediate it and will notify the Data Protection Board of India and affected individuals as required under the DPDPA.

9. Grievance Officer & Contact

In accordance with the DPDPA, 2023, the Grievance Officer for EvolvAI Solutions is:

Yashpal Saimbi
Email: sales@evolvai.co.in
WhatsApp: +91 98207 34791
Address: Mumbai, Maharashtra, India

We will respond to grievances within a reasonable time, generally within 30 days.

10. Children's Privacy

Our services are intended for businesses and their authorized representatives. We do not knowingly collect personal information from children.

11. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and rules made thereunder. Courts at Mumbai, Maharashtra shall have exclusive jurisdiction over any disputes arising from this Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.