Privacy Policy

Last updated 7 September 2026.

Evolamate ("we", "us") provides AI-generated marketing content and marketing automation for Australian businesses. Evolamate is a product of SkilliHire (ABN 61 661 477 964), of Sydney, Australia. This is an early-stage product. Please read this policy with that in mind, and contact us with any questions before signing up.

What we collect

  • Account details: your email address and password. Your password is stored securely by our authentication provider, Supabase. We never see it in plain text.
  • Business details you provide: business name, industry, website URL, location and service areas, marketing objective and automation preferences.
  • Publicly available text from your business website, fetched to ground the research we generate about your business.
  • Anything you add yourself: your logo and product photos, corrections and additions to what we have learned about your business, competitors you ask us to look at, and customer messages you enter or import.
  • Documents you upload (company profiles, brochures, service lists, price guides). We read the words in a document to understand your business and we keep the extracted text and facts. We do not keep the file itself, and there is nothing to download it back from. Evolamate is not a document storage service.
  • Content we create on your behalf: research summaries, strategy, post captions, generated images and derivative creatives, campaign plans, proposed ad campaigns, recommendations and monthly reviews.
  • Access tokens for the social accounts you connect, so we can publish on your behalf. These are stored encrypted (AES-256-GCM).
  • A record of what was published, where, and whether it succeeded, including posts you tell us you published yourself.
  • Publicly available information about competitors you nominate, fetched from their public websites to produce market analysis. We do not collect personal information about individuals from competitor sites.
  • Questions you ask the advisor ("Ask Evolamate") and the answers, kept so the conversation has context.
  • Billing details are collected and held by Stripe, our payment provider. We never see or store your full card number.

How we use it

To research your business, plan your marketing, generate, store, schedule and publish the content you ask for, classify and draft replies to customer messages, propose campaigns, run your subscription, and email you about your account. We record the AI model, token and image usage of each operation so we can monitor cost and quality. We do not sell your data, and we do not use it to train any AI model.

Publishing to your social accounts

When you connect a Facebook Page, you authorise us to publish on your behalf. Once you approve a post, we send its text and image to Facebook, and to Instagram if your Page has an Instagram business account linked. This is a real transfer of your content and images to Meta, governed by Meta's own terms and privacy policy once it arrives. Nothing is ever sent without your approval, unless you have explicitly switched your account to Autopilot mode, in which case content is published under the rules you set and you can stop it at any time from the Planner or Settings.

LinkedIn Company Pages and Google Business Profile can also be connected for publishing where the platform has granted us API access. Where access is not yet available for your account, posts are prepared for you to publish yourself. Medium and Reddit content is prepared for manual publishing. Disconnecting an account stops all future publishing to it and removes the stored access token. Content already published stays on the platform; only you can remove it there.

Customer engagement (comments, messages and reviews)

If you use the Inbox, Evolamate collects comments, messages and reviews sent to your connected accounts, along with the sender's name and platform identifier, timestamps, and the reply history you create. A person who comments on or messages your account did not sign up to Evolamate; this data is collected because they interacted with your own business account, the same way it would already be visible to you directly on the platform.

We may generate an AI-suggested reply from this data, grounded in your own business information, and we may recognise an enquiry as a sales lead and track its status for you. Evolamate never sends a reply automatically; every reply requires you to review it and choose to send it.

Comments, messages and reply history are retained for 180 days from when we receive them, then removed automatically. Post- and account-level performance figures are retained for 24 months. Disconnecting stops new collection but does not delete history already collected. You can delete that history on its own at any time from Settings, separately from disconnecting or deleting your account.

Who we share it with

Your data is processed by the providers we run on. Each processes data on our behalf under its own security and privacy commitments; none of them uses your data for its own purposes.

  • Supabase: database, authentication and file storage.
  • Microsoft Azure: hosting of the application and background workers, and AI text and image generation.
  • Stripe: subscription billing and payment details.
  • Brevo: sending the emails we send you.
  • Meta (Facebook and Instagram): receives the content and images you approve for publishing, and is the source of any comments or messages the Inbox collects.
  • LinkedIn and Google: receive your authorisation and, where API access is granted, the content you approve for publishing to those platforms.
  • GitHub: hosts our source code and deployment pipeline. No customer data is stored there.

Data retention and deletion

We keep your data for as long as your account is active. Generated media (master images and channel derivatives) is retained for 75 days, after which it is removed automatically while the structured record of what was created and published is kept. You can delete your account yourself at any time from Settings. Doing so removes your business, every generated post, every generated image, your uploaded logo and photos, the document text you added and everything we learned from it, your connected-account tokens, your inbox and leads, and your usage history, and then deletes your login. If any part of that cannot be completed, we stop and tell you rather than reporting a deletion that did not happen.

You can also remove a single document from the Business page without deleting your account. Doing that immediately removes the facts we extracted from it, and Evolamate stops using them for any new content. Posts already written are not rewritten. You can email us to request a copy of your data.

Where your data is held

Our primary database and authentication (Supabase) run in the ap-southeast-2 region (Sydney, Australia). Our application runs on Microsoft Azure in the Australia East region (Sydney).

We use Microsoft Azure for AI-generated text and images. Our text models are configured in the Australia East region; our image-generation model is configured in a United States region because Microsoft does not offer it in Australia. Some deployments use Azure's "Global Standard" service tier, which by Microsoft's design may route processing to any Azure datacentre with available capacity. In practice this means the prompts and content you submit for a caption or image may be processed outside Australia as part of how Microsoft operates this service.

Stripe (payments), Brevo (email), and Meta, LinkedIn and Google (once you connect or approve publishing to them) also process data overseas as part of how those services work, regardless of where our own database sits. We are still confirming the exact overseas-disclosure terms for these providers with a legal reviewer.

What this policy does not yet cover

We would rather tell you what is missing than imply it is settled. This policy does not yet set out our position under the Privacy Act 1988 and the Australian Privacy Principles in full, or a formal complaints procedure. Those are with a legal reviewer, and this page will be updated when that review is complete.

Contact

Questions about this policy: use the contact form, reply to any email you receive from us, or email contact@evolamate.com.