Effective date: October 12, 2026
Evolua HR Hub LLC, Michigan, USA
Contact: leonard@evoluahrhub.com
The short version. Evolua is a one-person business. We collect as little as possible, we do not sell or share your personal data, and we do not use it for advertising. Please do not enter other people's personal information into our tools.
1. Scope
This policy explains how Evolua HR Hub LLC handles personal data collected through evoluahrhub.com, app.evoluahrhub.com, and the tools and communications offered there. It does not cover third-party sites we link to.
2. Information we collect
- Contact information you give us: your name and email address when you use the contact form or subscribe to updates.
- Account information if you create an account for the tools: your email address and authentication data held by our authentication provider. We do not store your password.
- Content you submit to the Risk Check, the Job Offer Reality Check, or the AI assistant: the descriptions, answers, and context you type in.
- Technical data generated automatically when you visit: IP address, browser and device type, pages requested, referring page, and timestamps, recorded in standard server and security logs by our hosting providers.
- Correspondence you send us by email.
We do not knowingly collect government identifiers, payment card details, or health information, and we do not ask for them. We do not use advertising trackers or sell data to data brokers.
3. What we ask you not to submit
Our tools are designed to work from a general description of a situation. Please do not enter personal data about identifiable third parties, including employee names, contact details, government identifiers, financial details, medical or health information, immigration status, union membership, or personnel and disciplinary records. If you do, you are responsible for having the right to disclose it. We may delete such content when we become aware of it.
4. How we use information
- To operate the website and the tools and to return a result to you.
- To respond to your enquiry or deliver updates you asked for.
- To keep the Services secure, to detect and prevent abuse, and to diagnose faults.
- To understand, in aggregate, which pages and tools are used, so we can improve them.
- To comply with legal obligations and enforce our Terms of Service.
We do not use your content to train our own models. Our AI provider processes submitted content to return a response; see section 6.
5. Legal bases (EU, EEA, and UK users)
Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract, for operating an account or a tool you asked us to run; consent, for marketing emails, which you may withdraw at any time; legitimate interests, for security, fault diagnosis, and aggregate improvement; and legal obligation, where the law requires it.
6. Service providers
We use a small number of providers to run the Services. Each receives only what it needs:
- Cloudflare – website hosting, DNS, and network security.
- Vercel – hosting for the tools at app.evoluahrhub.com.
- Supabase – account authentication and application data storage.
- OpenAI – generation of narrative text in the assessment tools. Content you submit to those tools is sent to OpenAI's API to produce a response.
- Resend – delivery of transactional email, such as results and sign-in messages.
- Zoho – our business email.
We may also disclose information where we are legally required to, or where it is necessary to protect our rights, safety, or property. We do not sell personal data, and we do not share it for cross-context behavioral advertising.
7. Cookies
The main website at evoluahrhub.com sets no cookies and runs no analytics or advertising trackers. The tools at app.evoluahrhub.com use cookies and similar browser storage that are strictly necessary to keep you signed in and to keep your session secure. You can block or clear cookies in your browser, though the tools will not work if you block the necessary ones.
8. Retention
We keep personal data only as long as needed for the purpose it was collected for, or as the law requires. Contact enquiries are kept while the matter is live and for a reasonable period afterwards. Account and tool data is kept while your account is active. If you ask us to delete your account, we will delete or anonymize the associated data within a reasonable period, except where we must keep records to comply with law or resolve a dispute. Backups and provider logs may persist for a limited time before expiring.
9. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to processing, to receive it in a portable format, and to withdraw consent. Residents of California and other US states with similar laws may also have the right to know what is collected and to opt out of sale or sharing, which we do not do in any case. We will not discriminate against you for exercising a right.
To make a request, email leonard@evoluahrhub.com. We will verify your identity before acting, and will respond within the period the applicable law allows. If you are in the EU, EEA, or UK, you may also complain to your local supervisory authority.
10. Security
Data is transmitted over HTTPS, and our providers apply access controls and encryption in transit and at rest. We keep the number of people and systems touching personal data small. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Children
The Services are intended for adults and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. International transfers
We are based in the United States and our providers store and process data in the United States and in other countries. If you use the Services from outside the US, your data will be transferred to the US, where data protection law differs from your own. Where required, our providers rely on recognized transfer mechanisms such as the European Commission's standard contractual clauses.
13. Business changes
If Evolua is sold, merged, restructured, or wound down, personal data may be transferred as part of that transaction or deleted. We will give notice on this site before personal data becomes subject to a materially different privacy policy.
14. Changes to this policy
We may update this policy. The effective date above will change when we do, and we will post a notice on the site for material changes. Continued use after an update means you accept the revised policy.
15. Contact
Privacy questions and requests: leonard@evoluahrhub.com, or use the contact form.