Privacy Policy

Evalation LLC — Evalation Ops

Last updated: October 27, 2026

This Privacy Policy describes how Evalation LLC ("Evalation," "we," "us," or "our") collects, uses, and protects information in connection with Evalation Ops, our business management platform for residential contractors, accessible at evalationops.com and evalation.app (the "Platform").

This policy also covers Evalation Tint (our iPad app for paint estimates), Evalation CORR and Evalation Team, our companion apps available on the App Store. Section 1.9 describes what Evalation Tint collects.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, business name, phone number, and billing information.

1.2 Business Data

We store client records, project information, estimates, blueprints, and communications you enter into the Platform. This data belongs to you.

1.3 Website and Funnel Data

If you use Evalation Ops to host websites or marketing funnels, we collect information about their visitors on your behalf. By default, browsing is not tracked: our server keeps only a daily count of views for each page. When a visitor sends a form, we collect what they entered, the consent line shown next to the button, the page they landed on, the site that referred them, and any campaign tags or ad click IDs they arrived with. If you have connected Meta or Google Ads, the lead is then sent to your own accounts in the same way section 1.7 describes for our website (Google conversion uploads are covered in section 8), unless the visitor's browser sends a Global Privacy Control signal. Form submissions our spam filter blocks are kept with the visitor's country, region and browser type.

If you turn on page-view tracking for a site or funnel, its visitors see a cookie banner. Only after a visitor accepts do we also collect the pages they view, the referring site, campaign tags, their device type, a visitor ID stored in their browser, the country and region of their IP address, how they scroll and click, and how much of each video they watch, and only then do your own analytics and ad tags load. When such a visitor sends a form, we link their earlier visits to the lead, along with their IP address and browser type.

You can turn that banner off for a site or funnel where the law lets a business track visitors before asking and offer a way to opt out (for example, in Texas). Then the same information is collected, and your own analytics and ad tags load, as soon as a visitor opens a page. Every page keeps a “Privacy choices” link where visitors can turn analytics, marketing tools and embeds off at any time, and a Global Privacy Control signal keeps ad tags off and stops their form from being sent to ad partners. You are responsible for turning the banner off only where that is allowed for your visitors.

1.4 Google Business Profile Data

If you connect your Google Business Profile to Evalation Ops, we access your GBP data through the Google Business Profile API using the https://www.googleapis.com/auth/business.manage scope. We may access:

• Business name, address, phone number, and hours
• Business categories and service areas
• Posts, photos, and Q&A content you create through our Platform
• Review content and your responses to reviews
• Performance metrics from your Google Business Profile

We access this data only to provide GBP management features within Evalation Ops. We do not sell, share, or use this data for any purpose beyond operating these features. You may disconnect your Google account at any time from your account settings. The other Google services you can connect (Google Ads, Gmail and Google Calendar) are described in section 8.

1.5 SMS Communications Data

If you opt in to receive SMS messages from Evalation Ops, we collect your mobile phone number and your consent record (date, time, and method of opt-in). We use this information solely to send you the SMS messages you consented to receive. We do not share your phone number with third parties for their marketing purposes.

1.6 Usage Data

We collect information about how you use the Platform to improve it and troubleshoot issues.

1.7 Cookies and Tracking

Signing in to Evalation Ops uses a cookie that keeps you signed in.

On our public website (evalationops.com and its sign-up pages) there is no cookie banner, because nothing that tracks you runs while you browse: no Meta Pixel, no Google Analytics or other advertising or analytics tools, and none of our own browser analytics. Our server counts how many times each page is viewed each day, and that count keeps nothing about you: no cookie, IP address or device details.

If you arrive from an ad or from a link with tracking tags (such as an ad click ID or UTM tags), the page keeps those tags in your browser tab while you browse. They are deleted when you close the tab, and they are sent to us only if you send a form.

Each form has a line next to its button saying that by submitting you agree to this policy, including sharing your information with our ad partners to measure our ads. When you send the form, we save what you entered, and our server sends Meta and Google your email address and phone number in hashed (scrambled) form, the ad click ID and tags you arrived with, and the page and time. Meta also receives your city, state and ZIP code if you gave them (hashed), your IP address and your browser type. We use this to see which of our ads led to your form.

If your browser sends a Global Privacy Control signal, or you opt out with the “Your Privacy Choices” link at the bottom of our pages, we still receive your form but send nothing to Meta or Google. Your opt-out is remembered with a small cookie in your browser. The sign-up page also loads Stripe, which handles payment and may set its own cookies to prevent fraud. We do not sell your personal information.

1.8 Phone Calls

Contractors can make and receive calls through phone numbers they get in Evalation Ops. When a contractor has call recording turned on (it is on unless they turn it off), the other person hears “This call may be recorded and transcribed.” before any part of the call is recorded. The recording is kept by our calling provider, SignalWire, and Deepgram turns it into a written transcript, which is saved with the call in the contractor's account. Deepgram is told not to use the audio to improve its own models. With recording off, calls are not recorded or transcribed. Voicemails are always recorded, and callers hear “Your message will be recorded.” before the tone. We also keep each call's phone numbers, time and length.

1.9 Evalation Tint (iPad app)

Evalation Tint is used by contractors and their staff, who sign in with an account their business created in Evalation Ops. It collects:

• Room scans. With your permission, Tint uses the iPad's camera and LiDAR Scanner, through Apple's RoomPlan, to measure rooms. The scan is processed on the iPad; Tint keeps the room's measurements and layout (walls, doors, windows and openings), not video of the room. An exterior scan also keeps still pictures of the outside of the house on the iPad; those pictures are not uploaded.
• Photos and notes. Photos you take or choose for a room, and the notes you write about them.
• Location, during an exterior scan only. With your permission, Tint reads the iPad's precise location while you scan the outside of a house, and sends those coordinates to Evalation Ops, which asks Google's Solar API for that roof's shape. Tint does not track location at any other time.
• Job details. The homeowner's name, phone, email and address that you enter, paint colors, estimates, and the homeowner's signature on an estimate.
• Card payments. When a homeowner pays a deposit or invoice by card in Tint, the card details go directly to Stripe. We never see or store full card numbers.

Projects are saved on the iPad. When you send a job to Evalation Ops, Tint uploads the job's details, estimate, measurements, paint plan and plan sheets, and room photos to your business's account, where they are treated as Business Data (section 1.2). Tint has no advertising, does not track you across other apps or websites, and contains no third-party analytics.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform
• Process payments and manage your subscription
• Send transactional communications (receipts, account notifications)
• Send SMS messages you have explicitly opted in to receive
• Respond to support requests
• Operate Google Business Profile management features on your behalf
• Comply with legal obligations

We do not sell your personal information. We do not use your business data to train AI models without your explicit consent.

3. SMS Messaging

Evalation Ops sends SMS messages to users who have explicitly opted in.

Message types: Transactional notifications including lead alerts, project updates, account notifications, and platform announcements.

Frequency: Message frequency varies based on account activity. You may receive up to 5 messages per week.

To opt out: Reply STOP to any message at any time. You will receive one final confirmation and no further messages will be sent.

For help: Reply HELP to any message or contact david@evalation.shop.

Cost: Message and data rates may apply.

We do not share your phone number with third parties for marketing purposes. Carriers are not liable for delayed or undelivered messages.

4. Data Sharing

We share your information only with:

Service Providers: companies that run parts of the Platform for us, such as Supabase (database), Vercel (hosting), Stripe (payments), Resend (email), SignalWire (texts and calls), Deepgram (call transcripts) and Anthropic (AI features). The full current list, with what each one receives, is at evalationops.com/subprocessors. These providers access your data only as necessary to perform services on our behalf.

Meta and Google, when you send a form on our website: the information described in section 1.7, so we can measure our ads. Nothing is sent while you only browse, and nothing is sent if your browser sends Global Privacy Control or you opted out under “Your Privacy Choices.”

Google: When you connect a Google service, data is exchanged with Google as described in section 8, under Google's API Services User Data Policy.

Legal Requirements: We may disclose information if required by law or court order.

Business Transfers: Your information may transfer if Evalation LLC is acquired or merges with another company.

5. Data Retention

Your account: We keep your account data while your account is open. If you cancel, we keep it so you can come back, until you ask us to delete it. You can ask us to delete your account and its data at any time at evalationops.com/privacy-request or by emailing david@evalation.shop. We will confirm your request and delete the data within 45 days, except records the law requires us to keep, such as billing records and SMS consent records.

Records in your account: clients, leads, projects, messages, call recordings and transcripts, and the form submissions and page counts from your websites stay in your account until you delete them or we delete your account.

Google data: when you disconnect a Google service, we delete our access to it right away (section 8). Information already brought into your account from Google, such as reviews, posts and campaign results, stays in your account until you delete it or ask us to delete it.

SMS consent records are kept for at least 4 years to comply with carrier recordkeeping requirements.

6. Security

We use TLS encryption in transit, encryption at rest, and access controls. Our infrastructure uses Supabase and Vercel, both of which maintain SOC 2 compliance programs.

7. Your Rights

You may have the right to access, correct, delete, or export your personal information. Contact david@evalation.shop to exercise these rights.

8. Google Services and Google User Data

You can connect these Google services to Evalation Ops. We use each one only for the feature you connect it for.

• Google Business Profile (business.manage): we read your business information, reviews and performance metrics to show and manage them in Evalation Ops, publish the posts you create, and post the review replies you choose to publish. To suggest a reply to a review, we send the review's text and rating to our AI provider, Anthropic, which processes it on our behalf to write a draft that you can edit or discard.
• Google Ads (adwords): we read your Google Ads accounts and your campaigns' performance (such as spend, clicks and conversions) to show your results in Evalation Ops, get keyword ideas for campaigns you build, create the campaigns you build in Evalation Ops (they start paused), and create Evalation Ops's conversion actions in your account.
• Google Ads conversion uploads (datamanager): when you turn on conversion uploads, we send your own Google Ads account the conversions from your website forms and your pipeline (a new lead, a booked appointment, a closed job) for people who agreed to share their information with your ad partners when they sent the form: the ad click ID, the time, a value, and a one-way SHA-256 hash of their email address and phone number. We send nothing for people whose browser sends a Global Privacy Control signal or who have opted out. We use this access only to send data to your account, not to read data from Google.
• Gmail (gmail.send): we send the emails you send from Evalation Ops, such as estimates, invoices and messages, from your Gmail address. We cannot read, search or delete the email in your mailbox.
• Google Calendar (calendar.freebusy, calendar.events.owned): we read your free and busy times so your booking pages offer only times you are available, and we add and cancel the appointments booked through Evalation Ops on your own calendar. We do not read the details of your other events.
• Your Google account email (userinfo.email): to show which Google account is connected.

Limited Use. Evalation Ops's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use data from Google APIs only to provide and improve the features described above that you use in Evalation Ops.
• We transfer it to others only as needed to provide those features (for example, to our hosting, database and AI providers acting on our behalf), to comply with the law, or as part of a merger, acquisition or sale of assets, with notice to you.
• We do not sell it, and we do not use or transfer it to serve advertising, including retargeting, personalized or interest-based ads. Sending conversions to your own Google Ads account is a feature you turn on yourself; we do not use your Google data for our advertising or anyone else's.
• No one at Evalation reads it unless you ask us to (for example, for support with a specific item), it is needed for security purposes such as investigating abuse, it is required by law, or it has been aggregated and made anonymous for our internal operations.
• We do not use it to develop, improve or train generalized artificial intelligence or machine-learning models. Our AI provider processes review text only to write your draft and does not use it to train its models.

You can disconnect any Google service at any time in Evalation Ops's settings, or remove Evalation Ops's access from your Google Account at myaccount.google.com/permissions. When you disconnect, we delete our access tokens for that service and stop using it.

9. Children's Privacy

Evalation Ops is intended for adults. We do not knowingly collect information from individuals under 18.

10. Changes to This Policy

We will notify you of material changes by email or Platform notice. Continued use after changes constitutes acceptance.

11. Contact Us

Evalation LLC
david@evalation.shop
evalationops.com