Evidora will only collect, use, and disclose Personal Data as described in this Privacy Policy.
This Privacy Policy applies to Personal Data processed by FormClue LLC d/b/a Evidora (“Evidora”, “we”, “us”, or “our”) when you visit www.evidora.io and any related sub-pages (the “Site”), and when you access or use Evidora’s platform and services (the “Platform”).
This Privacy Policy explains what Personal Data we collect, how and why we collect it, how we use and disclose it, and the rights individuals may have regarding their Personal Data.
Evidora provides software that enables businesses to capture, preserve, and access digital records of user interactions, including form submissions, consents, disclosures, and related activity (“Evidence Records”). In many cases, Evidora processes Personal Data on behalf of its customers in connection with their use of the Platform.
We may update this Privacy Policy from time to time. The most current version will always govern our practices for collecting, processing, and disclosing Personal Data. If we make material changes, we will provide notice on this page and, where required, notify customers by email. Continued use of the Site or Platform following the effective date of any updates constitutes acceptance of the revised Terms of Service and this Privacy Policy.
All capitalized terms not otherwise defined in this Privacy Policy shall have the meanings assigned to them in the Terms of Service or under applicable law.
Evidora is operated by FormClue LLC, an Arizona-based company that provides Software as a Service (SaaS) solutions. The Evidora Platform enables organizations to document and preserve digital evidence of online interactions, including user consent, disclosures, submissions, and related activity, to support compliance, dispute resolution, and operational accountability.
The Personal Data we collect depends on the individual’s relationship with Evidora, including whether the individual is:
• A visitor to the Evidora Site
• A customer or authorized user (the “User”) of the Evidora Platform
This section applies to Personal Data Evidora collects from visitors to www.evidora.io and any related sub-sites or sub-domains (for example, dash.evidora.io).
Any Personal Data provided by a visitor to our Site will be used only as described in this Privacy Policy and Evidora’s Acceptable Use Policy.
When someone visits the Evidora Site, we may collect certain technical and usage information, including the visitor’s IP address, internet service provider, referring website, pages visited, date and duration of the visit, and information about the device used (such as device type, operating system, screen resolution, language, country, and browser type).
We process this information to operate, maintain, secure, and improve our Site, including adapting the Site to the devices used, analyzing performance, preventing fraud or abuse, and optimizing user experience. Where possible, we use aggregated and/or anonymized data for analytical purposes.
Cookies are small data files placed on a visitor’s device. Evidora uses cookies and similar technologies to collect standard internet log information and details about how visitors interact with our Site. We use cookies to:
• Operate and maintain our Site;
• Improve functionality and user experience; and
• Support marketing and outreach efforts, where permitted by applicable law.
Visitors to Our Site have the opportunity to contact Us to ask Us questions, for example via a contact form, where We ask for contact information (e.g. name, email address etc.). We use this data in connection with answering the queries We receive.
If a visitor to Our Site receives emails from Us, We may use certain analytics tools, to capture data such as when the email is opened or when any links or banners in the email have been clicked. This data helps Us understand the effectiveness of Our communications and marketing campaigns.
This section applies to Personal Data Evidora collects from its customers and authorized users (“Users”) when accessing or using the Evidora Platform.
When an individual creates an account, administers a customer account, contacts customer support, or subscribes to communications from Evidora, we may collect Personal Data such as name, email address, company name, job title, billing details, and other information necessary to provide and support the Platform.
Where a User accesses the Platform on behalf of a customer organization, Evidora processes Personal Data as necessary to perform its contractual obligations to that organization and, where applicable, based on its legitimate interests in operating, securing, and improving the Platform.
We may collect technical and operational data related to Platform usage, including IP addresses, timestamps, system logs, and device information, for purposes such as security monitoring, fraud prevention, performance optimization, and troubleshooting. Access to such data is limited to personnel with an operational or security-related need.
Account holders may request deletion of their accounts at any time. Upon account deletion, Evidora may retain certain Personal Data as required to comply with legal obligations, resolve disputes, enforce agreements, maintain security logs, and satisfy recordkeeping requirements under applicable law.
Evidora may generate aggregated and anonymized information derived from Platform usage data for purposes such as analytics, service improvement, benchmarking, and reporting. Such aggregated data does not identify any individual.
Personal Data collected from customers and Users is disclosed only as described in this Privacy Policy, the Terms of Service, applicable data processing agreements, and in accordance with applicable law.
Evidora engages a limited number of trusted third-party service providers to support the operation of the Platform, including hosting, infrastructure, security monitoring, payment processing, analytics, and customer support tools. These providers are contractually bound to process Personal Data only as necessary to provide services to Evidora and in accordance with applicable data protection laws.
We may also disclose Personal Data to professional advisors (such as legal, accounting, or auditing firms), regulators, courts, or public authorities where necessary to comply with legal obligations or to protect our rights.
In the event of a merger, acquisition, financing, asset sale, reorganization, or similar transaction, Personal Data may be transferred as part of that transaction, subject to confidentiality obligations and applicable law.
Except as described above, Evidora does not sell Personal Data and will not disclose Personal Data to third parties without a lawful basis to do so.
We may send service-related communications to customers and Users regarding account activity, platform updates, security notices, changes to legal terms, or important administrative information. These communications are necessary for the operation of the Platform.
Where permitted by applicable law, we may also send marketing communications about Evidora’s services. Recipients may opt out of marketing communications at any time by using the unsubscribe link included in such messages or by contacting us directly.
Evidora may use limited Personal Data from customers, Users, or Site visitors to inform them about relevant product updates, industry developments, or services that may be of interest. We may use reputable third-party marketing platforms to facilitate these communications, subject to contractual confidentiality and data protection obligations.
Personal Data used for marketing purposes is shared through secure channels and only to the extent necessary to provide the requested marketing services.
Evidora may use Personal Data where necessary to:
• Protect the rights, privacy, safety, or property of Evidora, its customers, Users, or others;
• Enforce our Terms of Service and other contractual agreements;
• Detect, prevent, and investigate security incidents, fraud, or unauthorized or unlawful activity;
• Audit and maintain compliance with legal and contractual obligations; and
• Comply with applicable laws, regulations, lawful requests, and legal processes.
Evidora may use and retain information derived from Platform usage in aggregated and de-identified form for purposes such as service improvement, security enhancement, analytics, capacity planning, industry reporting, and benchmarking.
Aggregated and de-identified data does not identify any individual or customer organization and cannot reasonably be used to re-identify a person. Evidora may publish or share such information in summary form, including in reports, insights, or other materials.
Where required by applicable law, Evidora will obtain consent before collecting, using, or disclosing Personal Data for purposes not otherwise described in this Privacy Policy. Individuals may withdraw consent at any time, subject to legal or contractual restrictions.
Evidora retains Personal Data for as long as necessary to fulfill the purposes for which it was collected, including to provide the Platform, maintain Evidence Records, comply with legal obligations, resolve disputes, enforce agreements, and protect against legal claims.
Retention periods may vary depending on the nature of the data, contractual requirements with customers, applicable laws, and legitimate business needs. Where Personal Data is no longer required, it will be securely deleted or anonymized.
Evidora may process and store Personal Data in the United States and other jurisdictions where we or our service providers operate. Where Personal Data is transferred internationally, Evidora implements appropriate safeguards consistent with applicable data protection laws, which may include contractual data protection clauses, adequacy decisions, or other lawful transfer mechanisms.
Additional information regarding international transfers may be provided upon request, where required by law.
The Evidora Platform is not directed to children and is intended for use by businesses and individuals acting in a professional capacity. We do not knowingly collect Personal Data from children under the age required by applicable law.
If we become aware that Personal Data has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information and, where appropriate, terminate the associated account.
Subject to applicable law, individuals whose Personal Data is processed by Evidora may have the right to request access to, correction of, deletion of, or restriction of processing of their Personal Data. Individuals may also have the right to object to certain processing activities or request data portability where applicable.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.
To protect privacy and security, Evidora may take reasonable steps to verify identity before responding to any request. Requests may be submitted using the contact details provided in this Privacy Policy.
This section applies to Personal Data processed by Evidora as a “business” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”).
California residents may have the right to request disclosure of the categories and specific pieces of Personal Data collected, the categories of sources from which the Personal Data is collected, the business purposes for collecting or disclosing Personal Data, and the categories of third parties with whom Personal Data is shared.
California residents may also have the right to request deletion or correction of Personal Data, to opt out of the sale or sharing of Personal Data (if applicable), and to limit the use of sensitive Personal Data where required by law.
Evidora does not sell Personal Data as defined under the CCPA.
To exercise California privacy rights, please contact us using the contact information provided in this Privacy Policy. We will not discriminate against individuals for exercising their privacy rights.
Evidora provides its Platform to customer organizations that may use it to collect, generate, or store information relating to their own end users, including through digital forms, agreements, transactions, or other interactions (“Customer Data”).
In these circumstances, Evidora acts as a service provider or data processor on behalf of the customer organization, which is the data controller responsible for determining the purposes and means of processing such Customer Data.
If you are an end user interacting with a customer’s website, application, or service that uses the Evidora Platform, the privacy policy of that customer governs the collection and use of your Personal Data. Evidora processes such Personal Data solely in accordance with its contractual obligations to the customer.
Evidora does not respond directly to requests from end users regarding Personal Data contained within Customer Data. Such requests should be directed to the relevant customer organization.
Evidora may process limited technical data (such as IP address, timestamps, device information, and system logs) as necessary to operate, secure, and maintain the Platform. This processing is conducted for operational, security, and integrity purposes.
Copyright © Evidora, a FormClue LLC company. All rights reserved.