Legal

Privacy Policy

Effective 15 September 2026

1. Who we are

Evalo is operated by Nexentis Technologies Limited. In this policy, “Evalo”, “we”, “us” and “our” refer to Nexentis Technologies Limited and the Evalo service. This policy explains how we process personal data when you visit the Evalo website, create an account, use the platform, request a demonstration or communicate with us.

2. Data we process

Depending on how you use Evalo, we may process account and identity information such as name, business email, company and authentication records; organisation information such as members, roles and departments; procurement information such as projects, requirements, supplier details, quotations, documents, scores, recommendations, approvals and audit events; and technical information such as browser, device, IP/security logs and service diagnostics.

3. How we use information

We use information to provide and secure Evalo, authenticate users, isolate organisations, process procurement documents, extract structured quotation information, calculate deterministic compliance and scoring results, generate decision narratives, maintain audit records, provide support, prevent abuse, improve reliability and communicate service or account information.

4. Procurement documents and AI processing

Procurement documents and extracted quotation data may be processed by third-party AI or infrastructure providers that we use to operate Evalo. Evalo's deterministic compliance, scoring and recommendation-selection logic remains the authoritative decision layer; AI is used for extraction and explanatory narrative. Customers should not upload information they are not authorised to process.

5. Sharing and service providers

We may share information with infrastructure, authentication, storage, AI, communications, analytics and payment providers acting on our behalf and only as necessary to provide the service. We may also disclose information where required by law, to protect rights and safety, or in connection with a corporate transaction. We do not sell procurement data.

6. International processing

Evalo and its service providers may process information in countries other than the country where you are located. Where applicable, we will use appropriate contractual, technical or other safeguards for international transfers and comply with applicable data-protection requirements.

7. Security and retention

Evalo uses authentication, row-level database access controls, organisation-level isolation, private document storage and audit logging. No internet service can guarantee absolute security. We retain information for as long as reasonably necessary to provide the service, meet contractual or legal obligations, resolve disputes and maintain legitimate business records, after which it is deleted or anonymised where appropriate.

8. Your rights

Subject to applicable law, you may have rights to access, correct, delete, restrict or object to certain processing of your personal data, and to request a copy of information we hold about you. Organisation customers may also have contractual rights concerning procurement data they control. Requests can be made through the contact channel provided by Evalo.

9. Cookies and similar technologies

Evalo uses essential technologies required for authentication, security and application functionality. If we introduce non-essential analytics or marketing technologies, we will provide the notices and choices required by applicable law.

10. Children

Evalo is a business service and is not directed to children.

11. Changes to this policy

We may update this policy as Evalo, our processing activities or applicable requirements change. The effective date above will be updated when material changes are published.

12. Contact

Privacy or data-protection requests should be submitted through the Evalo contact/demo channel so they can be routed to the appropriate team.