Privacy Policy

Your workspace and your information

This Policy explains what Evallo collects, why we use it, when service providers receive it, and the choices available to you.

1. Who controls your information

Evallo is owned and operated by WCM Legacy Group LLC, a Texas limited liability company (“Evallo,” “we,” “us,” or “our”). For the personal information covered by this Policy, WCM Legacy Group LLC decides why and how it is processed. Contact us at contact@getevallo.com.

2. Information we collect

Please avoid adding sensitive information that is not needed for your job search, including in files you attach, such as bank details, passwords, government IDs, medical records, or protected-class information.

3. How we use information

We use personal information to:

• create and secure your account, authenticate you, and keep your workspace private;
• store, display, search, organize, export, and back up the job-search information you choose to save;
• if you connect a calendar, show your events in Evallo’s calendar, suggest events that look like interviews, and add the interviews you choose to your calendar;
• provide Basic Capture and, when you expressly choose it, AI-assisted extraction or suggestions;
• manage trials, plans, entitlements, payments, taxes, invoices, renewals, Hold, cancellation, refunds, and billing communications;
• provide support, respond to requests, deliver service notices, and diagnose failures;
• prevent fraud, abuse, unauthorized access, and security incidents;
• understand how the signed-in app is used, find features that are hard to use, and contact you with help if you seem to be stuck;
• understand which of our links, campaigns, and pages lead people to sign up;
• measure service reliability and improve functionality using limited operational information; and
• comply with law, resolve disputes, and enforce our agreements.

We do not use your private CRM content to advertise to you, sell personal information, or share it for cross-context behavioral advertising. We do not use Customer Content to train Evallo’s own general-purpose AI model. Evallo currently does not operate an advertising network or use third-party advertising cookies.

Signing in with Apple, Google or LinkedIn

Signing in with Apple, Google or LinkedIn. You can create an account or sign in with Apple, Google or LinkedIn instead of a password. We ask only for your basic profile: your name, your email address and whether it’s verified. We use it only to create and secure your account. We never get your password for that account, post to it, or see your contacts.

• We link a provider sign-in to an existing Evallo account only when the provider confirms the same verified email address.
• If you use Apple’s Hide My Email, we receive a private address that forwards to you, and emails we send reach you through Apple.
• You can remove Evallo’s access in that provider’s account settings.

Calendar connections

Calendar connections. Connecting a Google or Microsoft calendar is optional, and you choose which calendars Evallo uses.

• Evallo reads events on those calendars to show them in your Evallo calendar and to suggest ones that look like job meetings: by their title, or because they mention one of your open roles’ companies or come from its email domain. Nothing becomes an interview until you choose it.
• For a personal calendar, Evallo can also add the interviews you choose, and change or remove only the events it added. It never invites anyone.
• A work calendar is read-only unless you allow changes.
• We store the access Google or Microsoft gives us in encrypted form.
• We don’t sell calendar information, use it for advertising, or use it to train AI models. We don’t let people read it, except with your permission, for security, or to comply with law.
• If you use an AI feature on a role, interview details on that role, including ones that came from your calendar, are part of that request (see AI processing).

Evallo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI processing

Basic Capture runs in your browser and does not send pasted text to an AI provider. AI-assisted features are separate and require an affirmative action. When you choose an AI feature, Evallo sends only the content and context needed for that request through Vercel AI Gateway to OpenAI. Files you attach to a role and job descriptions you save are never sent to an AI provider. Evallo configures supported requests not to be stored by the model provider where the integration permits it, but provider abuse-monitoring or operational retention may still apply under the provider’s business/API terms.

Voice debrief. On the website, if you record a debrief, your recording goes from your browser to Evallo and then to OpenAI, only to turn it into text. We don’t keep the recording. The text appears in your debrief review, and nothing is saved until you approve it. We don’t use recordings to identify you by your voice. In the iPhone app, your iPhone turns speech into text on the phone, the recording isn’t sent to Evallo, and it’s deleted from the phone when you save.

AI Quick Capture suggestions are stored privately for retry recovery and made unavailable after 24 hours. Information you separately approve and save to your CRM becomes ordinary Customer Content and follows the retention rules below. Other AI reviews and their usage/accounting records may be kept as needed to provide the review, prevent duplicate charging or requests, enforce limits, investigate failures, and preserve actions you chose to save.

5. When we disclose information

We disclose personal information only as reasonably necessary in these circumstances:

• Service providers. Vendors process information on our behalf for hosting, authentication, databases, email, payments, security, support, and optional AI features.
• Legal and safety needs. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate fraud or security issues, or enforce our terms.
• Business change. Information may be transferred as part of a financing, reorganization, acquisition, sale, or transfer of the Service, subject to appropriate confidentiality and applicable law.
• At your direction. We may disclose information when you ask us to, connect a third-party service, or otherwise consent.

6. Core service providers

Providers may change as the Service evolves. We will update this Policy before making a material change in how private Customer Content is used or disclosed.

7. Payments

Stripe processes payment-card details through Stripe-hosted checkout and billing pages. Evallo does not receive or store your full card number or card security code. Evallo stores transaction and subscription references and billing status needed to provide access, support customers, prevent duplicate processing, handle refunds, and maintain financial records.

8. Cookies and browser storage

Evallo’s own code doesn’t set cookies. We keep a small amount of information in your browser’s storage, and some service providers set their own cookies on their own pages. We don’t use advertising cookies or ad pixels.

Other companies’ cookies.

• Stripe sets its own cookies on Stripe Checkout and the Stripe customer portal for payments and fraud prevention. Stripe’s privacy policy applies there.
• When it’s enabled on sign-in and forms, Cloudflare Turnstile may set security cookies to tell people from bots.
• If you sign in with Apple, Google or LinkedIn, or connect a calendar, that company sets its own cookies on its sign-in pages.
• Vercel Web Analytics doesn’t use cookies. Google Fonts doesn’t set cookies, though Google receives your IP address when the typeface loads.

All of this is needed to run the Service or to remember your choices. We don’t use advertising cookies or ad pixels, and we don’t track you across other companies’ websites. Before that changes, we’ll update this Policy and offer the choices the law requires. You can clear stored data in your browser’s settings, but doing so may sign you out or reset your preferences.

9. Retention

We keep information only as long as reasonably necessary for the purposes described in this Policy, including providing the Service, preserving your account at your direction, maintaining security and transaction history, resolving disputes, and meeting legal, tax, accounting, and contractual obligations.

• Account and Customer Content are generally kept while your account is active or you ask us to preserve them under an available plan or Hold.
• Files you attach to a role are kept until you remove them. A removed file can be restored for one day, then it’s erased. If you delete a role, its files are erased within a day. Deleting your account erases all of them.
• Calendar information is kept while your calendar is connected. When you disconnect it in Settings, we delete our access and the events we read, except events you linked to an interview, which stay with that interview. For Google, we also ask Google to remove Evallo’s access. For Microsoft, you can remove it in your Microsoft account settings.
• If you cancel your account, we keep your account and Customer Content for 30 days after the account closes, then delete them automatically. A closed account can’t be reopened. On a paid plan, you can undo the cancellation in Settings until the account closes.
• AI Quick Capture suggestion content is made unavailable after 24 hours; limited accounting, security, and request metadata may remain.
• Voice recordings aren’t kept by Evallo: we send them for transcription and discard them. A transcript you don’t save is discarded when you close the review.
• Demo requests are deleted one year after our last reply, or one year after they arrive if we haven’t replied.
• Product usage records are deleted 12 months after the activity they describe.
• Help Center feedback. If you answer “Was this helpful?” or send a note, we save your answer and note with your account (or the email you leave, if you’re signed out) so we can follow up. We keep it for one year.
• Billing, tax, consent, delivery, fraud-prevention, and legal records may be kept longer where reasonably necessary.
• After a verified deletion request, or 30 days after a canceled account closes, information is deleted or de-identified unless retention is permitted or required. Residual copies may remain temporarily in backups until they cycle out through normal recovery processes.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including account authentication, private account boundaries, restricted service credentials, payment separation, and access controls. No service can guarantee absolute security. You should use a unique password, protect your email account, and contact us if you suspect unauthorized access.

11. Your privacy choices and rights

Depending on where you live and applicable law, you may have the right to request access, correction, deletion, or a portable copy of personal information; learn about categories of information disclosed; opt out of certain uses; appeal a denied request; or use an authorized agent. Evallo does not discriminate against you for exercising a privacy right.

You can also download a copy of your workspace yourself, any time, in Settings › Your data.

You can disconnect a calendar at any time in Settings › Calendars.

Submit a request to contact@getevallo.com. We may ask for information needed to verify your identity and account. We will respond within the period required by applicable law. If we deny a request, you may reply to appeal the decision. We may retain information when permitted or required for security, fraud prevention, transactions, legal obligations, or legal claims.

You can also cancel your account in Settings at any time. Canceling stops sign-in, and your information is deleted 30 days after the account closes (see Retention). Billing, tax and legal records are kept as long as the law requires. To have your information deleted sooner, send a deletion request.

12. Children and geographic scope

Evallo is for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate.

Evallo is currently offered to customers in the United States. Our providers may process information in the United States and other locations where they operate, subject to their contractual and legal safeguards.

13. Changes to this Policy

We may update this Policy to reflect product, provider, or legal changes. We will post the new effective date and give reasonable notice of material changes. We will request consent when required by law.

Back to top