Privacy Policy

This Privacy Policy explains how EvoxSoft Technologies Inc. (“EvoxSoft,” “we,” “us,” or “our”) collects, uses, and protects personal information when you visit evoxsoft.com (the “Site”) or contact us through it. We have tried to keep it short and in plain English.

Who we are

EvoxSoft Technologies Inc. is a software development and IT consulting company. We are the controller of the personal information described in this policy.

Address: Vandemataram City, Gota, Ahmedabad, Gujarat 382481, India\
Phone: +91 98981 85028\
Email: hello@evoxsoft.com

If you have any questions about this policy or how we handle your information, email us at the address above.

What we collect and why

We only collect the information you choose to give us through the forms on this Site, plus limited technical data needed to run and protect it.

Contact and project inquiry form

What we collect: your name, work email address, the service you are interested in, your budget range, and the project details you provide.

Why: to respond to your inquiry, understand your needs, and prepare a proposal or next steps. We also send you one automatic email confirming we received your inquiry.

Legal basis (GDPR/UK GDPR): taking steps at your request before entering into a contract, and our legitimate interest in responding to business inquiries.

Careers application form

What we collect: your name, email address, portfolio URL, and any note you include.

Why: to review your application, contact you about opportunities, and manage our hiring process. We also send you one automatic email confirming we received your application.

Legal basis: taking steps at your request before entering into a contract (employment or engagement), and our legitimate interest in recruiting.

What we collect: your email address.

Why: to send you our newsletter and occasional updates about our work and insights. We use double opt-in: after you sign up, we email you a confirmation link, and you are subscribed only after you click it and confirm. If you don’t confirm within 7 days, the link expires and we don’t add you.

Legal basis: your consent. You can withdraw consent at any time by using the unsubscribe link in any email or by contacting us.

Technical and usage data

What we collect: when you visit the Site, our hosting provider processes standard technical data such as your IP address, browser type, and request details to deliver pages and protect the Site from abuse. With your consent, we use Cloudflare Web Analytics to understand aggregate traffic (for example, which pages are popular). It is cookieless and does not track you across sites or build a profile of you. Our forms use Google reCAPTCHA to tell humans from bots. It loads when you start filling in a form and sends hardware and software information (such as device and browser data, and your IP address) to Google, which uses it under the Google Privacy Policy and Terms of Service.

Why: to operate, secure, and improve the Site.

Legal basis: our legitimate interest in running a secure, reliable website; your consent for analytics.

Cookies and your privacy choices

We do not use advertising cookies, and we do not sell your personal information or share it for cross-context behavioral advertising.

Strictly necessary technologies (security, spam protection, form delivery, and remembering your privacy choices) are always on, because the Site cannot work securely without them.
Optional technologies (cookieless analytics, and Google Maps, which may set cookies) load only after you opt in. This applies to every visitor, wherever you are.
You can change or withdraw your choice at any time using Your Privacy Choices in the footer of every page. Withdrawing is as easy as giving consent. It does not affect anything done before you withdrew.
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a refusal of all optional technologies.
We ask you again after 12 months, or sooner if we add new optional technologies.

Our Cookie Policy lists each technology, its purpose, and how long it lasts.

How long we keep your information

We keep personal information only as long as we need it for the purposes described above:

Contact and project inquiries: 24 months from our last interaction, unless we enter into a client relationship, in which case records are kept as required by that relationship and applicable law.
Careers applications: 12 months from submission, so we can consider you for other suitable roles. If you are hired, your information becomes part of your personnel records.
Newsletter subscriptions: until you unsubscribe. After that, we keep only your email address on a suppression list so we don’t email you again.
Technical data and logs: for short periods as needed for security and operations, typically no longer than 30 days, unless required to investigate abuse.

When the retention period ends, we delete or anonymize the information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only with service providers (processors) who help us run the Site and handle communications, under contracts that require them to protect it and use it only on our instructions:

Cloudflare, Inc.: website hosting, content delivery and security, and Cloudflare Web Analytics.
Google (reCAPTCHA): spam and abuse protection for our forms.
Resend: delivery of transactional emails, such as notifications when you submit a form and our replies.
Google (Google Maps): the office location map on our contact sections. The map loads only when you scroll to it, and Google may process your IP address and set cookies under its own privacy policy.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

International transfers

EvoxSoft is based in the United States, and our service providers may process data in the United States and other countries. If you are in the European Economic Area, the United Kingdom, or Switzerland, your information will be transferred to countries that may not have the same data protection laws as yours. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an applicable adequacy framework.

How we protect your information

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS), access controls limited to people who need the information, and reputable service providers with strong security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you and regulators of a breach where the law requires.

If you are in the European Economic Area or the United Kingdom, you have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your information in certain circumstances
Restrict or object to our processing, including processing based on legitimate interests
Data portability, meaning receiving your information in a structured, commonly used format
Withdraw consent at any time, where processing is based on consent, without affecting processing that happened before

You also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns first, so please contact us.

Your rights under California law (CCPA/CPRA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose, and to request a copy of it
Delete personal information we have collected from you, subject to certain exceptions
Correct inaccurate personal information
Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
Limit the use of sensitive personal information. We do not collect sensitive personal information through this Site.
Non-discrimination for exercising any of these rights

In the past 12 months, we have collected the categories of personal information described in “What we collect and why”: identifiers (such as name and email address), professional information (such as portfolio URL and project details), and internet activity information (such as technical data). We collect it from you directly and from your device, for the purposes described above, and disclose it only to the service providers listed in “How we share information.”

Your rights in India (Digital Personal Data Protection Act, 2023)

If you are in India, you have the right to:

Access a summary of the personal data we process about you and the processing activities involved.
Correct, complete, update, or erase your personal data.
Withdraw consent at any time, as easily as you gave it.
Nominate another person to exercise your rights in the event of death or incapacity.
Grievance redressal: raise a grievance with us at hello@evoxsoft.com. If it is not resolved, you may complain to the Data Protection Board of India.

Your rights in Brazil (LGPD) and other countries

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you rights including confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent. Residents of other countries (for example Canada, Australia, Singapore, and South Africa) may have similar rights under local law. We honor these requests wherever you are.

How to exercise your rights

To exercise any of the rights above, email us at hello@evoxsoft.com with a description of your request. We may need to verify your identity before responding, usually by confirming details from the email address you used with us. You may use an authorized agent to make a request on your behalf, and we may ask for proof of their authorization.

We will respond within the time required by applicable law, generally within one month for GDPR requests and within 45 days for California requests. We do not charge a fee unless a request is clearly unfounded or excessive.

Children

This Site is intended for businesses and professionals. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date at the top of this page. If the changes are significant, we will take reasonable steps to let you know, such as a notice on the Site. We encourage you to review this policy periodically.

Contact us

If you have questions, requests, or concerns about this policy or our privacy practices, contact us at:

EvoxSoft Technologies Inc.
Vandemataram City, Gota
Ahmedabad, Gujarat 382481
India
hello@evoxsoft.com