Privacy Policy

1. Introduction

EvoDax ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our logistics management platform.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email, company name, phone number)
• Billing information (processed securely via Stripe)
• Business data (orders, customers, delivery addresses, routes)
• Communications with our support team

2.2 Information Collected Automatically

• Device information (browser type, operating system)
• Usage data (features used, pages visited, actions taken)
• Location data (for route optimization and delivery tracking)
• Log data (IP address, access times, error logs)

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process transactions and send billing notifications
• Optimize delivery routes and provide analytics
• Send service updates and promotional communications
• Respond to customer support requests
• Improve and develop new features
• Detect and prevent fraud or security issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our Service (e.g., Stripe for payments, cloud hosting providers)
• Business Transfers: In connection with any merger, acquisition, or sale of company assets
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Secure data centers with physical security measures
• Regular backups and disaster recovery procedures

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days to allow for data export. Some data may be retained longer for legal compliance or legitimate business purposes.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request transfer of your data in a machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where applicable

To exercise these rights, contact us at privacy@evodax.com.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze usage patterns and improve the Service
• Provide personalized content and features

You can control cookie settings through your browser. Disabling cookies may affect some functionality of the Service.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Ireland, this is the Data Protection Commission (DPC).