Version 2.0 · Last updated 5 October 2026
The short version
Evergrowth (“we”) is 2 companies. Your contract is with the one for your region.
For every privacy question or request, write to privacy@evergrowth.io.
| You are | Who decides how your data is used |
|---|---|
| Visiting our website | Evergrowth, UAB |
| A user at one of our customers | The company your employer signed with, for your account data: Evergrowth, UAB in Europe, Evergrowth Holdings, Inc. in the United States |
| A person whose details a customer works with in Evergrowth | The customer. We process that data on their behalf, under our Data Processing Agreement. Ask the customer first; we help them answer |
| Someone we contacted about Evergrowth | Evergrowth, UAB. See section 7 |
| A job applicant | Evergrowth, UAB |
Evergrowth is a business service for people aged 18 and over. We do not knowingly collect data about children.
| When | What we collect | Why | Legal basis | How long |
|---|---|---|---|---|
| You browse our website | Pages viewed, device and browser, approximate location, IP address, cookie identifiers | Measure visits, improve the site, measure our ads, recognise companies that visit | Your consent, for every cookie that is not strictly necessary | Per cookie, see section 9 |
| You fill in a form, book a demo or chat with us | Name, work email, company, job title, phone if you give it, your message | Reply, run the demo, follow up | Steps you asked for before a contract; our legitimate interest in following up | Reviewed at least every 12 months, deleted when no longer needed |
| You use Evergrowth | Name, work email, role, sign-in details, settings, support messages | Provide the service, secure your account, support you | Our contract with your company | For the contract, then deleted within 30 days of it ending |
| You use features in the app | Features used, session recordings, error reports | Fix problems and improve the product | Our legitimate interest in a working product | No longer than those purposes need |
| We bill your company | Billing contact, company details, invoices, payments | Invoice and keep accounts | Legal obligation | As long as accounting and tax law requires |
| We send you news | Name, work email, what you open or click | Newsletters, product news, events | Legitimate interest for customers and people who asked us for information; consent where the law requires it | Until you unsubscribe |
| We contact you about Evergrowth | See section 7 | |||
| You apply for a job | CV, contact details, experience, interview notes | Recruit | Steps before a contract; our legitimate interest in hiring | For the hiring process, longer only with your consent |
| The law or a dispute requires it | Any of the above, only what is needed | Comply with the law, defend legal claims, prevent fraud and abuse | Legal obligation; legitimate interest | As long as the law or the claim requires |
We do not collect sensitive data such as health, religion or political views, and we do not want it.
Where we rely on legitimate interest, we have weighed it against your rights. You can object at any time (section 8).
We never sell personal data. We share it only with providers that help us run Evergrowth, and only what each one needs.
| Who | What they do | What they receive |
|---|---|---|
| Hosting and infrastructure | Run the platform on Amazon Web Services | Data stored in Evergrowth |
| AI model providers | Power the agents: Microsoft Azure, AWS Bedrock, OpenAI, Google. See section 6 | Prompt content, limited to what the task needs |
| Contact data and verification providers | Find and check business contact details | Company name, job title, country; 1 email address or phone number to verify |
| Platform services | Sign-in, monitoring, error tracking, product analytics, support, billing | What each function needs |
| Marketing and CRM | HubSpot (CRM, forms, chat), LinkedIn and Google (ads, analytics), RB2B (identifies US website visitors) | Website and contact data. Cookie-based tools run only with your consent |
| Advisors and authorities | Lawyers, auditors, and authorities when the law requires | Only what is needed |
Every provider is bound by a written contract with data protection terms. Our sub-processor register names each one and its country of processing. It is available on request at privacy@evergrowth.io and during a security review.
If Evergrowth is sold or merges, personal data passes to the new owner under this policy.
Detail for security and procurement reviewers: Data Flow.
No AI provider uses customer data to train or improve its models. Evergrowth does not train or fine-tune models either.
To judge whether a contact fits, a model receives the person's name, job title, LinkedIn profile and employer. Most of what the agents process is research about companies, not people.
AWS Bedrock, our default, does not store prompts or completions. Where another provider handles a request, it may keep data briefly for abuse monitoring under its published terms.
Agents score whether a company or a contact fits a profile our customer sets. The scores help the customer choose who to contact. They do not produce legal or similarly significant effects for the person scored.
This section is for people we contacted who are not customers and who never gave us their details directly. Article 14 of the GDPR requires us to tell you the following, and we would rather set it out here than wait to be asked.
Evergrowth, UAB, company code 304811551, Gynėjų g. 4-333, LT-01109 Vilnius, Lithuania, is the controller for personal data we process for our own outbound. Privacy questions go to privacy@evergrowth.io.
From publicly accessible professional profiles and company websites, and from commercial B2B contact data providers. If you ask, we will tell you which of those applied to your record.
Your name, job title, business email address, business phone number, professional profile and employer. We do not collect and do not want payroll, employee, health or payment card data.
To contact you in your professional capacity about our products and services. Our lawful basis is legitimate interest under Article 6(1)(f) of the GDPR, which Recital 47 recognises for direct marketing.
We weigh that interest against your rights rather than assuming it. We only process people whose role matches a buyer persona at a company matching a profile we sell to, the reason a person qualified is recorded against their record at the moment it is created, and we hold business contact details rather than anything private. If that balance does not hold for you, the right to object below settles it immediately.
Our CRM and sequencing tools, our contact data and verification providers, and our hosting and monitoring providers. The categories, and the country each one processes in, are available on request.
Primarily in the EU. Where a transfer outside the EEA or the UK is necessary, it takes place under Standard Contractual Clauses or another safeguard permitted by Chapter V of the GDPR.
We keep a prospect record while that person remains in a role matching the profile we sell to. We review prospect records at least every 12 months and delete those that no longer match. If you object, we keep only the minimum needed to make sure we do not contact you again.
We use software to decide whether a company and a role match the profile we sell to. That is not a decision producing legal or similarly significant effects for you, and a person reviews anything that results in us contacting you.
You can tell us to stop at any time, and we will stop. You do not have to give a reason and you do not have to justify it. Reply to any email we sent you, or write to privacy@evergrowth.io. We will stop processing your data for outbound and keep only what is needed to make sure you are not contacted again.
You can ask us for a copy of your data, ask us to correct it, ask us to restrict how we use it, ask us to erase it, or ask us to transfer it to someone else. Write to privacy@evergrowth.io and we will respond within one month.
You can also lodge a complaint with a data protection supervisory authority. In Lithuania that is the State Data Protection Inspectorate. If you are elsewhere in the EEA, you can complain to the authority where you live or work.
| Right | What it means |
|---|---|
| Access | Get a copy of the data we hold about you |
| Correction | Have inaccurate data fixed |
| Erasure | Have your data deleted when we no longer need it |
| Restriction | Have us pause using it while a question is settled |
| Portability | Get it in CSV or JSON, or sent to another service |
| Objection | Stop processing based on legitimate interest. For direct marketing, any time, no reason needed |
| Withdraw consent | Any time. For cookies, use cookie settings |
Write to privacy@evergrowth.io. It is free. We answer within one month and may ask you to confirm who you are.
Please tell us first, so we can put it right. You can also complain to a data protection authority. Ours is the State Data Protection Inspectorate of the Republic of Lithuania, L. Sapiegos g. 17, LT-10312 Vilnius. You can also go to the authority where you live or work. In the UK, that is the Information Commissioner's Office.
Depending on your state, for example California, you can ask to know, correct and delete your personal information, and to opt out of its sale, its sharing and targeted advertising.
Strictly necessary cookies make the site work and need no consent. Everything else (preferences, statistics, marketing) runs only after you agree in our cookie banner.
The list below names every cookie on this site, who sets it, why, and how long it lasts. Our consent tool, Cookiebot, keeps it up to date automatically.
You can also block or delete cookies in your browser: Chrome, Firefox, Edge, Safari.
Inside the Evergrowth app, cookies and similar storage keep you signed in and secure, and support the product analytics in section 3.
Data is encrypted in transit and at rest, and access is limited by role. Evergrowth is SOC 2 Type 2 audited and ISO 27001 certified. Detail: Security & Trust.
If you think your data is at risk, write to privacy@evergrowth.io straight away.
Version 2.0, last updated 5 October 2026. We post every change on this page. If a change is significant, we tell customers by email. Previous versions are available on request.