Privacy policy

1. Data controller

Made in Evolve S.r.l., Via Rosalba Carriera 26, 41126 Modena (MO), Italy — VAT IT03497200364, REA MO-392876, Share capital €12,000. You can contact us at hello@madeinevolve.com.

2. What data we collect

• Form data — when you submit one of our forms (demo request, contact, partner application, integration request, waitlist) we collect only what you type: name, work email, company, role, company website, annual revenue bracket, modules of interest and your message.
• Newsletter data — if you subscribe to the newsletter (from the home page or by ticking the opt-in box on a form) we collect your email address, the date and source of your subscription, and the confirmation of your double opt-in.
• Technical data — like any website, our servers keep standard access logs (IP address, user agent, requested pages, timestamps) for security and operations.
• Analytics data — only if you consent via the cookie banner, we measure how the site is used through Google Analytics 4, loaded via Google Tag Manager (pages visited, approximate location, device and browser type, interaction events). IP addresses are not logged by GA4 and data is not combined with the form data above. Without your consent no cookie is set and no identifier is used: Google Consent Mode v2 (advanced) only sends anonymous, cookieless signals that cannot be linked to you or followed across pages, which Google uses for aggregate estimates.
• Pricing configurations — the stack you compose on the pricing page is stored in your own browser (localStorage) and never leaves it. If you create a shareable link, an anonymous copy of the configuration (modules, connections, volumes — no personal data) is stored on our EU servers for 12 months.

3. Why we process it (purposes and legal bases)

• To answer your requests and schedule demos or intro calls — based on your consent (art. 6(1)(a) GDPR, the checkbox on each form) and on pre-contractual measures taken at your request (art. 6(1)(b)).
• To keep the site secure and running (logs, abuse prevention) — based on our legitimate interest (art. 6(1)(f)).
• To understand how the site is used and improve it (analytics) — only based on your consent (art. 6(1)(a)), given through the cookie banner and revocable at any time from “Cookie preferences” in the footer.
• To send you our newsletter — only based on your consent (art. 6(1)(a)), given by subscribing and confirmed via double opt-in (you receive a confirmation email and are subscribed only after clicking it). Every issue includes an unsubscribe link; unsubscribing stops the newsletter immediately.
• We do not use your data for marketing without your consent, we do not sell it, and we do not carry out automated decision-making or profiling.

4. Who processes it for us

Data is processed by suppliers acting as processors under art. 28 GDPR:

• DigitalOcean LLC — hosting of this website in the European Union (Frankfurt, Germany).
• Twilio Inc. (SendGrid) — delivery of form notification emails, configured on the EU region.
• Google Ireland Ltd. — Google Tag Manager and Google Analytics 4, only if you consent to analytics cookies.
• Klaviyo, Inc. — newsletter delivery and subscriber management, only if you subscribe to the newsletter.

5. Transfers outside the EEA

Our services are configured on EU regions. Where a supplier's group companies could access or store data outside the EEA (e.g. for support, Google LLC for analytics data if you consented, or Klaviyo, Inc. for newsletter data if you subscribed), transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework (Google LLC, Twilio Inc. and Klaviyo, Inc. are certified).

6. How long we keep it

• Form submissions: up to 24 months from our last contact, or until you withdraw consent, whichever comes first.
• Newsletter subscription: until you unsubscribe (every issue has an unsubscribe link); the record of your consent is kept as proof of compliance.
• Server logs: up to 12 months.
• Shared pricing configurations: 12 months from creation (they contain no personal data).

7. Your rights

You can exercise at any time your rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent, by writing to hello@madeinevolve.com. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali, www.gpdp.it) or the authority of your country of residence.

8. Updates

We may update this policy as the site evolves (for example if analytics tools are introduced — in that case, consent will be requested first). The date above reflects the latest revision.