Evoluta Privacy Policy
This is a translation provided for convenience. The Korean version is the governing text; in case of any discrepancy, the Korean version prevails.
1. Controller
Evoluta (Evoluta) is the controller of the personal data described in this policy.
- Address
- [Business address]
- Contact
- support@evoluta.cloud · [연락처]
- Privacy contact
- Chris Shin
2. Personal data we collect
| Category | Data | When |
|---|---|---|
| Required | Email address (used as the account ID), password, name | Account registration |
| Optional | Company name, phone number, stated purpose of use | Account registration |
| Enquiries without an account | Email address | When you send an enquiry without signing in |
| Collected automatically | IP address, access timestamps, login history, session identifier, service usage records | While using the Service |
| Paid plans | Plan, subscription period, payment records | On subscribing |
Passwords are stored only as a one-way hash and cannot be recovered by us. Design data you enter and the calculation results derived from it are not personal data; under clause 10 of the Terms they belong to you.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and administering your account; providing the calculation tools; saving and retrieving your projects | Contract — Art. 6(1)(b) |
| Confirming identity by email verification and preventing fraudulent sign-ups (the stated company and purpose of use may be checked after registration if misuse is suspected) | Legitimate interests — Art. 6(1)(f): preventing misuse of a professional engineering tool |
| Security: preventing unauthorised access, limiting concurrent sessions, rate-limiting login attempts, keeping audit records | Legitimate interests — Art. 6(1)(f): securing the Service and its users |
| Billing, refunds and statutory record keeping | Contract — Art. 6(1)(b) and legal obligation — Art. 6(1)(c) |
| Responding to enquiries; service announcements. An email address given with an enquiry sent without an account is used only to reply to that enquiry | Contract — Art. 6(1)(b) |
| Marketing emails, where you opt in | Consent — Art. 6(1)(a); you may withdraw at any time |
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
4. Retention
We delete personal data without delay when you close your account, except where law requires us to keep it:
| Records | Period | Basis |
|---|---|---|
| Contracts and withdrawal of subscription | 5 years | Korean Act on Consumer Protection in Electronic Commerce |
| Payment and supply of services | 5 years | same |
| Consumer complaints and dispute handling | 3 years | same |
| Advertising and representations | 6 months | same |
| Access logs (login records, IP) | 3 months | Korean Protection of Communications Secrets Act |
5. Recipients and processors
We do not sell personal data and do not disclose it to third parties, except with your consent or where required by law. We use the following processors under written agreements:
| Processor | Service |
|---|---|
| 가비아 | Hosting and data storage |
| Brevo | Verification and notification email |
| (해당 없음) | Payment processing |
6. International transfers
The Service is operated from the Republic of Korea and personal data is stored there. For users in the European Economic Area and the United Kingdom, transfers to Korea are covered by the adequacy decision adopted by the European Commission for the Republic of Korea (17 December 2021), and by the corresponding UK adequacy regulations. No further transfer mechanism is required.
Where a processor is located outside Korea, we put appropriate safeguards in place, such as Standard Contractual Clauses.
7. Your rights
You have the right to:
- Access your personal data and obtain a copy;
- Rectify inaccurate or incomplete data;
- Erase your data (subject to statutory retention above);
- Restrict processing;
- Object to processing based on legitimate interests;
- Data portability — receive your data in a structured, commonly used, machine-readable format;
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Exercise these rights through your account page or by writing to support@evoluta.cloud. We respond within one month. We do not charge for these requests unless a request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with a supervisory authority — in Korea, the Personal Information Protection Commission (pipc.go.kr); in the EEA or UK, the authority in your country of residence.
8. Security
- Passwords stored as a one-way hash that cannot be reversed
- HTTPS for data in transit
- Access to personal data limited to the minimum number of staff, with separated privileges
- Audit records of account-related actions, protected against tampering
- Login attempt limits, one concurrent session per account, and automatic logout after inactivity
9. Cookies
We use a session cookie to keep you signed in. It expires when you close the browser or sign out. We do not use advertising or tracking cookies, and we do not use third-party analytics that profile you. Because the cookie is strictly necessary to provide a service you requested, no consent banner is required; you may block cookies in your browser, but then features requiring sign-in will not work.
10. Children
The Service is intended for professional engineering use and is not directed at children. We do not knowingly collect personal data from persons under 14 (Korea) or under 16 (EEA, unless a lower age applies locally).
11. Changes to this policy
We announce changes in the Service at least 7 days before they take effect, and at least 30 days in advance for changes that materially affect your rights, seeking fresh consent where required.