Privacy Policy

Privacy Policy

In accordance with Regulation (EU) 2016/679 (GDPR), this Privacy Policy describes how Evolbot di M. V. processes the personal data of users who visit and use the website ai.evolbot.com.

1. Data Controller

Evolbot di M. V.
Via Carlo Ghega 3, 34132 Trieste (TS), Italy
VAT number: IT01432170320 - Tax code: VDMMTJ83A23L424Z
Email: vidmar@evolbot.com

No Data Protection Officer (DPO) has been appointed, as the conditions set out in Article 37 GDPR do not apply to this business.

2. Data Collected and Purposes of Processing

2.1 Account registration and management

To create an account on this website, we collect your first name, last name and email address. This data is required to allow access to the platform and to the download dashboard for purchased products.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.2 Purchase and invoicing

During the purchase process, we collect the data required to issue the relevant fiscal document: name, surname, address, and — if an invoice addressed to a company is requested — company name and VAT number. Credit card or other payment details are never transmitted to or stored on our servers. All payment processing is handled directly by Stripe, Inc., an external payment processor subject to its own Privacy Policy.

Legal basis: performance of a contract and compliance with a legal obligation (Art. 6(1)(b) and (c) GDPR).

2.3 Order-related communications

The email address provided during registration or purchase is used to send order confirmations, download links and communications strictly necessary for the provision of the purchased service.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.4 Technical navigation data

The computer systems and software procedures of this website acquire, in the course of their normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols: IP addresses, browser type, operating system, pages visited, access times. This data is used exclusively to ensure the correct functioning of the website and for security purposes.

Legal basis: legitimate interest of the data controller (Art. 6(1)(f) GDPR).

3. Data Processing and Retention

All data is processed using electronic tools. No automated decision-making or profiling takes place.

Account data (name, email) is retained for the entire period during which the account remains active. Upon a request for account deletion, data is deleted within 30 days of the request, subject to the provisions below.

Purchase-related data (billing details, amounts, dates) is retained for 10 years from the date of the fiscal document, in compliance with applicable accounting and tax obligations.

4. Disclosure of Data to Third Parties

Personal data is not sold or transferred to third parties. It is shared with the following parties only to the extent strictly necessary to provide the service:

• Stripe, Inc. (payment processor) — for processing payments. Stripe acts as a data processor pursuant to Art. 28 GDPR.
• Hetzner Online GmbH (hosting and server infrastructure provider, Germany) — for website hosting and data storage. Hetzner operates within the European Economic Area.

An up-to-date list of data processors is available upon request by writing to vidmar@evolbot.com.

5. International Data Transfers

Data hosted by Hetzner Online GmbH remains within the European Economic Area and does not involve transfers to third countries.

Stripe, Inc. is a company headquartered in the United States. Data transfers take place in compliance with the safeguards required under the GDPR, in particular on the basis of Standard Contractual Clauses approved by the European Commission. For more information, please refer to Stripe's Privacy Policy.

6. Cookies

This website uses only technical and session cookies, which are necessary for the website to function correctly (e.g. maintaining the authentication session). No profiling cookies, tracking cookies or third-party cookies for advertising or behavioural analysis purposes are used.

The use of technical cookies only does not require your consent under applicable EU law and Italian data protection authority guidelines.

7. Your Rights

You have the right, at any time, to:

• access your personal data (Art. 15 GDPR);
• request rectification if inaccurate (Art. 16 GDPR);
• request erasure ("right to be forgotten", Art. 17 GDPR);
• request restriction of processing (Art. 18 GDPR);
• object to processing (Art. 21 GDPR);
• receive your data in a structured, machine-readable format (data portability, Art. 20 GDPR);
• lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the supervisory authority of your country of residence.

To exercise your rights, please write to: vidmar@evolbot.com. We will respond within 30 days of receiving your request.

8. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be notified to registered users by email. The date of the most recent update is shown at the bottom of this page.

Last updated: March 2026