Privacy Policy

Privacy Policy

Effective Date: 8/20/2026

This Privacy Policy explains how EvahTech Corporation, with its SaaS platform CertManager (“EvahTech,” “we,” “us”), collects, uses, discloses, and protects personal information in connection with our website at certmanager.com and our compliance data management platform (together, the “Service”). This Policy applies to visitors to our website, prospects, and the individual users of our customers who access the Service (“you”).

1. Information We Collect

1.1 Information You Provide to Us

Contact information you submit through forms on our site, such as name, company, job title, business email, and phone number (for example, when requesting a demo or contacting sales).

Account and profile information when you or your organization sets up access to the Service, such as name, work email, and role.

Communications you send us, including support requests and correspondence.

Billing information provided by your organization’s authorized administrator for subscription purposes (processed through our payment processor; EvahTech does not store full payment card numbers).

1.2 Information Collected Automatically

Usage data: pages visited, features used, timestamps, referring/exit pages, and general interaction with the website and platform.

Device and log data: IP address, browser type, operating system, and similar technical identifiers.

Cookies and similar technologies, as described in Section 4.

1.3 Information From Other Sources

Information from your employer or organization’s administrator when they create or manage your platform account.

Information from service providers that help us operate our website and business, such as analytics and email delivery providers.

2. How We Use Information

We use the personal information described above to:

Provide, maintain, secure, and improve the Service and website;

Respond to inquiries, schedule demos, and manage the sales process;

Create and administer platform accounts, including authentication and permissions;

Send administrative communications, such as service notices, security alerts, and renewal or billing notices;

Send marketing communications where permitted, which you may opt out of at any time;

Monitor and analyze usage trends to improve product features;

Detect, investigate, and prevent fraud, abuse, and security incidents; and

Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use personal information to train third-party, publicly-available AI models. Any AI or machine-learning features within the Service that process Customer Data operate under the terms of the applicable customer subscription agreement, not this Policy.

3. Legal Bases for Processing (EEA/UK Visitors)

If you are located in the European Economic Area or United Kingdom, we process personal information on the following legal bases: performance of a contract (for example, to provide platform access to a registered user); our legitimate interests (for example, to secure and improve the Service, and for direct marketing to business contacts, subject to your right to object); your consent (for example, for certain cookies or marketing communications, where required); and compliance with legal obligations.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember preferences, and understand how visitors use our site.

Essential cookies: necessary for core website functionality, such as security and load balancing; these cannot be disabled through our cookie tool.

Analytics cookies: help us understand aggregate visitor behavior so we can improve the site and product marketing.

Functional/marketing cookies: support features such as remembering form inputs or measuring the effectiveness of campaigns.

Third party cookies include Google Analytics and HubSpot. You can also control cookies through your browser settings; disabling certain cookies may affect site functionality.

5. How We Share Information

We do not sell personal information. We share it only in the following circumstances:

Service providers: vendors who host, support, or help operate our website and platform (for example, cloud hosting, customer relationship management, email delivery, and analytics providers), under contractual confidentiality and data protection obligations.

Your organization: if you are a platform user, your organization’s administrator can access account and usage information associated with your login.

Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets, including transfers of the EvahTech business to an affiliated or successor entity, subject to reasonable confidentiality protections.

Legal requirements: where required to comply with law, legal process, or to protect the rights, property, or safety of EvahTech, our customers, or others.

With your consent, or as otherwise disclosed to you at the point of collection.

6. Data Retention

We retain personal information for as long as needed to provide the Service, maintain business records, and comply with legal, tax, and accounting obligations. Account and usage data associated with a platform login is generally retained for the duration of the applicable subscription and for a reasonable period afterward for support, security, and legal purposes, after which it is deleted or anonymized.

7. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, consistent with our SOC 2 Type II control environment, including encryption in transit and at rest, role-based access controls, and single sign-on support for platform accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

We are based in the United States and may process personal information in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers of personal information from the EEA, UK, or Switzerland.

9. Your Privacy Rights

9.1 All Users

You may request access to, correction of, or deletion of your personal information, or object to or restrict certain processing, by contacting us at the address in Section 12. If you are a platform user, some requests may need to be directed to your organization’s administrator, who controls your account.

9.2 California Residents

Under the California Consumer Privacy Act, as amended, California residents have the right to know what personal information we collect, request deletion or correction of it, and opt out of any “sale” or “sharing” of personal information (we do not sell or share personal information as those terms are defined by the CCPA) and the right not to receive discriminatory treatment for exercising these rights. To exercise these rights, contact us using the information in Section 12; we may need to verify your identity before fulfilling a request.

9.3 EEA/UK Residents (GDPR)

If applicable data protection law grants you these rights, you may have the right to access, rectify, erase, restrict, or object to processing of your personal information, the right to data portability, and the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

10. Children’s Privacy

The Service is intended for business use and is not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child in violation of this Policy, we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice, such as a website banner or direct email to account administrators. We encourage you to review this Policy periodically.

12. Contact Us

If you have questions about this Policy or wish to exercise a privacy right, contact us at:

EvahTech Corporation

8601 Six Forks Rd.
Raleigh, NC 27615

Email: info@certmanager.com