Privacy Policy

Effective date: July 20, 2026
Last updated: July 20, 2026

Evolve Telecom LLC (“Evolve,” “we,” “us,” or “our”) operates the Evolve Hub customer and operations portal, related marketing pages, and business communications services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our websites, create an account, manage phone or company settings, contact us, or otherwise use the Services.

By using the Services, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services. This policy is intended for a U.S. audience and describes our practices in plain language. It is not a substitute for a contract or for legal advice.

1. Who we are

Evolve Telecom LLC
2295 South Hiawassee Rd, Suite 205
Orlando, Florida 32835
USA

Privacy and privacy-request contact: info@evolvetelecom.net (or support@evolvetelecom.com for account support).

2. Scope

This Privacy Policy applies to:

• Public marketing and informational pages (for example Home, Plans, Contact, CRM Integration);
• Account registration, login, profile, onboarding, billing, and support features;
• Authenticated administration of business phone / VoIP configuration (where you are authorized); and
• Related backend systems we operate to deliver those features.

It does not control the privacy practices of third-party websites or apps you open through external links, or of CRM platforms you connect at your own direction (for example Zoho), except to the extent we process data as part of that integration as described below.

3. Information we collect

We collect information in three main ways: (a) you provide it; (b) it is generated when you use the Services; and (c) limited information is processed by service providers that help us run the platform.

3.1 Account and identity information

When you register or maintain an account, we may collect:

• Name, email address, and password (stored in hashed form);
• Work phone and other profile fields you enter;
• Email confirmation and authentication status (including multi-factor authentication if enabled);
• Role and access assignments (for example Administrator, ClientManager, UserManager, SiteManager, ClientUser, Registered);
• Account approval or rejection status and related admin notes;
• Trial status and trial expiration, if applicable; and
• Optional linkage between a portal user and a phone extension.

3.2 Company and onboarding information

When you onboard or manage a company, we may collect:

• Company name and account code;
• Business address, city, state / region, and country;
• Company contact name, contact email, billing email, and phone numbers;
• Selected service plan and number of extensions; and
• Product and subscription associations for that company.

3.3 Contact and support messages

When you use contact or support forms, we may collect:

• Name, email, subject, and message content;
• IP address and technical outcome of the submission (for abuse prevention and rate limiting); and
• Whether a bot-protection challenge succeeded (when enabled).

3.4 Billing and payment information

We may collect and store:

• Payment amounts, currency, status, purpose, plan, extension counts, and billing period metadata;
• Invoices and line items associated with your company or account;
• Account or company balance information used for service charges; and
• External payment references (for example a Stripe payment or session identifier).

Card numbers and full payment-card data are processed by our payment processor (currently Stripe), not stored as full card numbers in our application databases. We may store limited billing metadata needed for receipts, audits, and account balances.

3.5 Business phone / VoIP configuration and usage data

If your organization uses our phone services, authorized users may create or manage configuration and operational data tied to a company account code, which can include (depending on features used):

• DIDs (phone numbers), carriers, and routing profiles;
• Schedules, schedule exceptions, IVR menus, ring groups, and services;
• Extensions and display names;
• Audio greetings and related file metadata (for example integrity hashes);
• Voicemail-related records and SMS-related configuration or messages where enabled;
• Call records or call-detail style information available in the portal; and
• CRM phone-bridge or contact-sync settings and credentials you choose to connect (for example Zoho).

This operational data is processed to provide, secure, and support the communications service your organization ordered. Business customers are responsible for their own notices to end users and employees where required by law.

3.6 Technical, security, and activity data

We automatically process certain technical and security-related information, such as:

• IP address, user agent / browser type, and request path;
• Login success and failure signals, lockout-related counters, and last login timestamps;
• Application error logs and operational diagnostics; and
• User activity / audit logs (for example create, update, delete, login, admin, and VoIP configuration changes), including who performed an action and when.

3.7 Optional in-app support chat

When enabled for authenticated users, an in-app chat widget may send your messages and limited session context to our support / AI assistant backend so we can respond to questions about the portal or services. Do not submit sensitive personal information in chat that is not needed for support.

4. How we use information

We use information to:

• Provide, operate, and maintain the Services (accounts, company access, VoIP administration, billing);
• Authenticate users, enforce roles and multi-tenant company access controls, and prevent abuse;
• Process payments, maintain balances and invoices, and communicate about transactions;
• Complete onboarding, trials, and account approval workflows;
• Respond to contact and support requests;
• Secure the Services (rate limiting, bot challenges, malware and vulnerability monitoring as we apply them, audit logging);
• Improve reliability, troubleshoot errors, and understand operational usage of the portal;
• Send service-related messages (security, billing, account status); and
• Comply with law, enforce terms, and protect Evolve, our customers, and the public.

We do not use the portal primarily as an advertising network, and we do not operate third-party behavioral advertising trackers on the site as of the effective date of this policy.

5. Cookies and similar technologies

We use cookies and similar browser technologies that are necessary for the Services to function securely. As of the effective date, these include:

Type	Purpose
Authentication / session	Keep you signed in after login (ASP.NET Core Identity application cookie). Required for authenticated areas of the portal.
Security / antiforgery	Help protect forms and state-changing requests against cross-site request forgery (CSRF).
Short-lived UI messages (when used)	May temporarily store status messages after redirects (for example success or error notices).

These cookies are first-party and used to provide the service you request (login, security, and core portal features). If you block all cookies, sign-in and many authenticated features will not work correctly.

We do not use a shopping cart on this site. We do not currently use advertising cookies or third-party marketing pixels for cross-site behavioral advertising. If that changes, we will update this policy and provide any opt-out or notice required by applicable law.

Bot-protection tools (for example Cloudflare Turnstile, when enabled) may set or read cookies or similar storage as described in the provider’s documentation, for fraud and abuse prevention.

You can control cookies through your browser settings. Disabling essential cookies will limit or break account features.

6. How we share information

We do not sell your personal information for money. We also do not share personal information for cross-context behavioral advertising as of the effective date of this policy.

We may disclose information in these situations:

6.1 Service providers (processors)

We use vendors that process data on our behalf to run the Services, including:

• Payment processing — currently Stripe, for checkout and payment events;
• Bot and abuse protection — currently Cloudflare Turnstile, when enabled on forms;
• Email delivery — SMTP / email providers used to send contact form and transactional messages;
• Hosting, database, and infrastructure providers that store and serve the application and data;
• Optional support chat / AI backend — when the authenticated chat feature is enabled; and
• CRM platforms you connect — for example Zoho, when your organization authorizes an integration; data shared is limited to what the integration needs and you configure.

These parties are expected to use personal information only to provide services to us (or to you, for integrations you enable), subject to their agreements and policies.

6.2 Within your organization

Company administrators and other authorized roles may see user and company information appropriate to their permissions (for example user management, billing, or VoIP configuration for companies they can access).

6.3 Legal, safety, and business transfers

We may disclose information if we believe it is reasonably necessary to:

• Comply with law, regulation, legal process, or governmental request;
• Enforce our terms and policies;
• Protect the rights, property, or safety of Evolve, our customers, or others; or
• Complete a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction under appropriate safeguards.

7. Data retention

We retain information for as long as needed to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary by data type. For example:

• Account and company records are kept while the account or service relationship is active and for a reasonable period afterward;
• Billing and invoice records are kept for accounting and tax purposes;
• Security, abuse-prevention, and activity logs are kept for operational security and audit needs; and
• Contact-form attempt logs used for rate limiting and abuse prevention are kept as needed for those purposes.

When information is no longer required, we delete or de-identify it in accordance with our operational practices, except where retention is required by law.

8. Security

We implement technical and organizational measures designed to protect personal information, including:

• Transport encryption (HTTPS / TLS) for the website;
• Hashed password storage via ASP.NET Core Identity;
• Access controls based on authentication and roles, including company-scoped access for multi-tenant VoIP data;
• Antiforgery protection on state-changing form posts;
• Rate limiting and optional bot challenges on sensitive endpoints; and
• Activity logging for significant account, admin, and configuration changes.

No method of transmission or storage is completely secure. If we become aware of a security incident that requires notification under applicable law, we will notify affected parties and regulators as required. Where law does not specify a timeline, we aim to provide notice without unreasonable delay and, where feasible, within seven business days after we confirm a notifiable incident involving personal information.

9. Your choices and rights

9.1 Account controls

• You can review and update many profile fields while logged in.
• Company name and account code are treated as permanent identifiers after creation for service integrity; contact us if a correction is required.
• You can sign out at any time; clearing cookies will also end browser session state.

9.2 Marketing email

We primarily send transactional and service messages (for example account, security, and billing). If we send marketing emails, you can unsubscribe using the link in the email (when provided) or by contacting info@evolvetelecom.net. We will honor opt-out requests for marketing messages; transactional messages related to your account or service may still be sent as needed.

9.3 Access, correction, and deletion requests

Subject to applicable law and our need to retain certain records, you may request access to, correction of, or deletion of personal information we hold about you by emailing info@evolvetelecom.net. We may need to verify your identity before fulfilling a request. Business customers may also need to direct requests through their company administrator when the data is controlled as part of a company account.

9.4 California and other U.S. state privacy rights

Depending on where you live and whether a state privacy law applies to Evolve (for example based on revenue or volume thresholds), you may have rights to know, access, correct, delete, or opt out of certain “sales,” “sharing,” or targeted advertising of personal information.

As of the effective date, we do not sell personal information and do not share personal information for cross-context behavioral advertising. If that changes, we will provide a clear “Do Not Sell or Share My Personal Information” mechanism (or equivalent) as required.

California residents may also have rights under the California Consumer Privacy Act as amended (CCPA/CPRA), including the right to non-discrimination for exercising privacy rights. To submit a request, contact us at info@evolvetelecom.net. Authorized agents may submit requests as permitted by law; we may require proof of authorization.

We do not use or disclose sensitive personal information for purposes that require a separate “limit the use of my sensitive personal information” right beyond what is necessary to provide the Services, as of the effective date.

9.5 Do Not Track and Global Privacy Control

Some browsers offer a “Do Not Track” (DNT) signal. There is no uniform industry standard for responding to DNT. Our site does not change its essential cookie behavior solely because a DNT signal is present: if you sign in, authentication and security cookies are still required for the portal to work.

Where a browser or extension sends a legally recognized opt-out preference signal (such as Global Privacy Control) and applicable law requires us to honor it for sale/share or targeted advertising, we will treat it as an opt-out of those activities to the extent they apply. Because we do not currently sell or share personal information for cross-context behavioral advertising, such signals do not change essential service cookies.

10. Children’s privacy

The Services are directed to businesses and adults. We do not knowingly collect personal information from children under 13, and we do not target children. If you believe a child has provided personal information to us, contact info@evolvetelecom.net and we will take appropriate steps to delete it.

11. International visitors

We are based in the United States. If you access the Services from outside the United States, you understand that your information may be processed in the United States and other locations where we or our providers operate. Those jurisdictions may have different data-protection rules than your country.

12. Third-party links

Our sites may link to third-party sites (for example payment pages hosted by Stripe, CRM vendor docs, or partner sites). Their privacy practices are governed by their own policies. We are not responsible for the content or privacy practices of third-party sites we do not control.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top of this page. Material changes may also be communicated by email or a notice in the portal when appropriate. Continued use of the Services after an update means you acknowledge the revised policy.

14. Contact us

Questions about this Privacy Policy or privacy requests:

Effective / Last updated: July 20, 2026