Privacy Policy

1. Who this policy covers

This policy describes how EvolRed handles personal data on the evolred.com website. Our Atlassian Marketplace applications each have their own dedicated privacy policy that describes the data the app processes inside Atlassian Cloud — see Apps and follow each app's "Privacy Policy" link. The two are kept separate because the marketing site (this domain) and the apps (Atlassian-hosted) run on completely different infrastructure with different data.

2. What we collect on evolred.com

2.1 Analytics — bcon

We use bcon, a privacy-first analytics product, to measure how the site is being used. bcon was chosen specifically because it is engineered to avoid tracking individuals:

• No cookies. bcon does not read or write any cookies on your browser.
• No fingerprinting. No device, font, or canvas fingerprinting is performed.
• Anonymous by default. IP addresses are processed only to derive an approximate country/region and are not stored against the page-view event.
• Do Not Track is honoured. If your browser sends a DNT signal, bcon will not record analytics for your visit.

Information collected: page URL, referrer, approximate country (from IP, then discarded), UTM campaign parameters when present in the URL, anonymous click events (e.g. which links you followed), and approximate device type. This information is used only to understand traffic and improve the site. We do not use it to build profiles of individuals.

Legal basis (UK GDPR / EU GDPR): legitimate interest in understanding aggregate site usage. Because no information is read from or written to your device beyond what is strictly necessary to load the page, prior consent is not required under PECR / the EU ePrivacy Directive for analytics of this character.

2.2 Server logs

Our hosting provider records standard server access logs (IP address, timestamp, requested URL, user agent) for security and abuse prevention. These logs are retained for a short rolling window (typically 30 days) and are not joined with any other data. Legal basis: legitimate interest in security and operational integrity.

2.3 Newsletter / launch updates

If you sign up via the newsletter form (footer, /subscribe, or the "Notify me" band on a coming-soon app page), we store your email address with our email-delivery provider, Plunk (privacy policy), along with the source you signed up from (e.g. footer, apps-detail-hero) and — for per-app launch alerts — which app you asked to be notified about. We use this to send you the email you asked for and nothing more. Every email contains a one-click unsubscribe link, and you can also email us to be removed.

Legal basis: consent (Article 6(1)(a) GDPR) — you actively submitted the form. Retention: until you unsubscribe or ask for deletion.

2.4 Contact form

When you submit the contact form, the message is delivered to us via Plunk as a transactional email. We retain the message in our email inbox so we can reply and follow up on the conversation. We do not add you to any marketing list from a contact submission.

Legal basis: taking steps at your request prior to entering a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to enquiries. Retention: for as long as the conversation is active, plus a reasonable archival period for record-keeping (typically up to 24 months).

2.5 Local browser storage

evolred.com does not persist any tracking data in localStorage, sessionStorage, or IndexedDB. The site may store transient UI preferences (e.g. a dismissed banner state) using browser storage that is strictly necessary to remember your interaction with the page. These do not leave your device.

3. Data we do NOT collect

• We do not track you across other websites.
• We do not run advertising or behavioural retargeting.
• We do not sell, rent, or trade personal data.
• We do not use your data to train AI models, ours or anyone else's.
• We do not embed third-party social media widgets that would track you (no Facebook Pixel, no Google Analytics, no LinkedIn Insight Tag).

4. Sub-processors

We rely on a small number of vendors to operate the site. Each is chosen for their privacy posture, contracted under a Data Processing Agreement where applicable, and listed below.

• Self-hosted infrastructure — evolred.com runs on a virtual private server we manage directly, deployed via Dokploy. Standard HTTP request data (IP, URL, headers) reaches the server for the duration of each request and is retained in short rolling access logs for security and abuse prevention.
• Plunk — email delivery and newsletter list management. Stores email addresses and message content for transactional and opt-in marketing email. Privacy policy.
• bcon — privacy-first analytics. No cookies, no fingerprinting, IP discarded after country lookup.

5. International transfers

Some of our sub-processors operate servers outside your country of residence. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement and the EU Standard Contractual Clauses.

6. Your rights

Under the UK GDPR and EU GDPR you have the right to:

• access the personal data we hold about you;
• have it corrected if it is inaccurate;
• have it erased;
• restrict or object to processing;
• receive your data in a portable format (where applicable);
• withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal);
• lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

7. Children

evolred.com is a B2B website and is not directed at children under 16. We do not knowingly collect personal data from children.

8. Atlassian Marketplace apps

Our Atlassian apps run inside Atlassian's Forge platform and handle a different set of data than this website. Each app publishes its own privacy policy alongside a per-app data summary — see /apps and click "Privacy Policy" on the app you're interested in. In short: our apps store no personal data on EvolRed-owned infrastructure, run with no external egress, and rely entirely on Forge KV storage scoped to your Atlassian Cloud instance.

9. Changes to this policy

If we change how we handle data, we'll update this page and move the "last updated" date at the top. Substantive changes that affect you (for example, adding a new sub-processor) will be communicated to newsletter subscribers by email.

10. Contact

For any privacy question, write to [email protected]. The first reply is from the founder, Luis Lerones.