Evolve OS

Privacy Policy

Last updated: 5 July 2026

Evolve OS ("the Service") is operated by Evolve Holdings Group Ltd ("we", "us"), a company registered in the United Kingdom. This policy explains what personal and business data we process when you use Evolve OS, why, and the choices you have. Questions? Email [email protected].

1. Who this applies to

This policy covers the account holders and team members of the businesses we onboard onto Evolve OS. Evolve OS is an invite-only operating system — access is provisioned by an administrator; there is no public sign-up.

2. What we collect

Account information — your name, email address, and profile photo, used to sign you in (via a passwordless magic link) and to attribute your work to you.
Business data you enter — plans, goals, metrics, notes, decisions, and messages you and your team create in the Service.
Connected account data — when you choose to connect an accounting or commerce provider (QuickBooks Online, Xero, or Shopify), we access read-only financial and sales data (e.g. profit & loss, balances, orders) to display it inside your workspace. We request the minimum scopes needed and never write to your connected accounts.

3. How we use it

Solely to provide and operate the Service for you: to display your numbers, run the Evolve OS methodology, and let your team collaborate. We do not sell your data, and we do not use it for advertising.

4. Legal basis (UK GDPR)

We process your data to perform our contract with you (providing the Service) and on the basis of our legitimate interests in operating and securing the Service. Where you connect a third-party provider, we act on your explicit consent, which you can withdraw at any time by disconnecting it in Settings.

5. Who we share it with

We share data only with the service providers ("sub-processors") needed to run Evolve OS:

Hosting & database — Railway (application hosting and PostgreSQL).
Email delivery — Resend (sign-in and notification emails).
Data sources you authorise — Intuit QuickBooks, Xero, and Shopify, only for the connections you explicitly set up.

We do not share your data with anyone else, and we never sell it.

6. Security

Data is encrypted in transit (TLS). Access and refresh tokens for your connected accounts are encrypted at rest using AES-256-GCM. Each company's data is isolated at the database level (row-level security), so one company can never see another's data. Access is restricted to authenticated, provisioned members.

7. Data retention & deletion

We retain your data for as long as your account is active. You can disconnect any data provider at any time, which stops further access and lets us delete the stored tokens. You may request deletion of your account and associated data by emailing us; we will action it within a reasonable period, subject to any legal retention obligations.

8. Your rights

Under UK data protection law you have the right to access, correct, or delete your personal data, to restrict or object to its processing, and to data portability. To exercise any of these, contact [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO).

9. Cookies

Evolve OS uses only essential cookies required to keep you signed in and secure your session. We do not use advertising or third-party tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised "last updated" date.

11. Contact

Evolve Holdings Group Ltd — [email protected]