Deze juridische tekst is beschikbaar in de gecontroleerde Engelse versie. Een Nederlandse vertaling is nog niet beschikbaar.
Privacy policy
Last updated: 31 August 2026
This policy explains what data Evollin processes and how.
1. Who we are
Evollin is a B2B software service (SaaS) that automates the handling of incoming enquiries: AI-led conversations, qualification, automatic follow-up and meeting booking.
Full details of the legal entity operating the service will be published here once registration is complete. Until then, you can reach us through the contact form on this site or the email address used in our commercial relationship.
2. Data we process
Account and workspace data: name, business email, company, role, account settings, usage and authentication logs.
Lead and contact data: name, job title, company, email, phone, public firmographic data and their status in your sales process.
Conversations and messages: the content of messages sent and received through connected channels, together with metadata (date, time, channel, delivery status, replies, qualification labels).
Company material (“Company Brain”): website, documents, offers, pricing, FAQs and any other material you upload or point us to in order to build the answering context.
Meetings and calendar: proposed slots, confirmations, attendees and events created in the connected calendar.
Technical data: IP address, device and browser type, error and security logs.
3. Purposes of processing
Providing and operating the service, including generating replies, qualifying opportunities and booking meetings.
Support, implementation and configuration around your sales process.
Security, abuse prevention, troubleshooting and service quality improvement.
Billing and management of the contractual relationship.
Commercial communication with people who request a demo, based on legitimate interest or consent, with the ability to opt out at any time.
4. Roles: controller and processor
For data about visitors and customers of our own website, Evollin acts as controller.
For lead and contact data you upload, import or collect through the platform, you are the controller and Evollin acts as processor, processing data according to your instructions.
As controller, you are responsible for ensuring that the processing of contact lists you upload or import, and the communication you send, are lawful: a valid legal basis, informing data subjects, and complying with rules on unsolicited commercial communication and objection requests.
5. Integrations and providers
The service can be connected, at your choice, to third-party services such as Google / Gmail and Google Calendar, channels where you receive enquiries, automation workflows such as n8n, as well as hosting, database and AI model providers.
These connections are enabled only with your authorisation and only to the extent needed for the service to work. Each provider processes data under its own terms and policies.
We select providers that offer adequate contractual safeguards. We do not claim certifications we do not hold; any certification obtained will be stated explicitly here.
6. Security
We apply appropriate technical and organisational measures: encryption in transit, role-based access control, workspace separation, logging and strictly limited internal access.
No system is entirely risk-free. In the event of a security incident affecting your data, we will inform you without undue delay.
7. Data retention
Account and workspace data is kept for the duration of the contractual relationship.
Lead data, conversations and company material are kept while the account is active or until you request deletion.
After termination, we delete or anonymise data within a reasonable period, except where retention is required by legal or accounting obligations or to defend a legal claim.
8. Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where processing is based on consent.
You may ask us at any time to stop sending you commercial communications.
If you were contacted through the platform by an Evollin customer, your request will be passed to that customer, who is the controller of that data; we can help you identify them.
You have the right to lodge a complaint with the competent supervisory authority.
9. Cookies and local storage
The public website uses a minimum of cookies and browser local storage, necessary for it to work (for example to remember the selected language) and, where applicable, for aggregated usage statistics.
The application uses cookies and local storage for authentication and session management. Details are in the Cookie policy.
10. International transfers
Some providers may process data outside the European Economic Area. In those cases we rely on recognised transfer mechanisms, such as standard contractual clauses, together with additional measures where required.
11. Changes
We may update this policy to reflect changes in the service or in legal requirements. The current version is always published on this page, with the date of the last update.
12. Contact
For any question about personal data or to exercise your rights, use the contact form on this site or the email address used in our commercial relationship.
13. Google Workspace Data and AI/ML Processing
Evollin uses Google Workspace API data only to provide user-facing functionality explicitly requested and authorised by the connected user. This includes reading relevant Gmail messages and thread context, preparing and sending replies and follow-ups, checking calendar availability, and creating, updating, rescheduling or cancelling calendar events.
Evollin does not use raw, aggregated, anonymised or derived Google Workspace API user data to create, train or improve any generalised or foundation AI/ML models.
Evollin does not sell Google Workspace API data.
Where AI/ML processing is used to provide Evollin's requested functionality, Google Workspace data is processed only for that user-facing service and is not used by AI service providers for generalised model training.
Evollin uses the Google Gemini Developer API as its third-party AI/ML inference provider for user-requested sales functionality. The Gemini API account used in production is on Google's paid Tier 1 (Prepay), and the model currently used by the Evollin workflow is models/gemini-3-flash-preview.
This data is sent directly to Google's Gemini API endpoint (https://generativelanguage.googleapis.com). Evollin does not route Workspace data through a multi-model aggregator or model hub. n8n is used only as a workflow orchestration layer, not as an AI model provider.
Workspace-derived content is sent to Gemini only as needed to perform the user-requested functionality, such as understanding inbound lead messages and conversation context, determining the next action, generating relevant replies and follow-ups, and appointment-related responses.
For the Gemini GenerateContent API project used by Evollin, API request storage is disabled. Evollin does not train or fine-tune generalised or foundation models using Google Workspace API data and does not sell such data.
Access is limited to the minimum permissions needed for connected Gmail and Calendar functionality and is subject to user authorisation.
The use of raw or derived user data received from Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.