Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is published by National Evermore Services LLC ("NES," "we," "us," or "our") and explains how we collect, use, share, and protect personal information in connection with the NES website at evermoreaudits.com, the NES Client Portal, the NES Auditor Portal, our job application pages, and related services, tools, reports, and integrations (collectively, the "Services").

This Policy applies to website visitors, job applicants, clients and their portal users, auditors, and any other individual whose personal information we process in connection with the Services. It is incorporated by reference into the NES Terms of Service. If this Policy conflicts with a separately executed data processing agreement or client contract, that agreement controls.

Our role. For audit and operational data that our business clients provide or that we create for them, NES generally acts as a service provider (processor) on the client's behalf, and the client decides how that data is used. If you are an employee of one of our clients and have a request about that data, we may refer you to the client. For website visitors, job applicants, auditors, and our own account records, NES decides how the data is used.

Information We Collect

The information we collect depends on how you interact with us:

1. Account & Identity Data

Information you or your organization provides to set up and manage portal access: full name, business email address, username, role or title, employer or client organization, mobile phone number (if you choose to receive account-security texts), login credentials, sign-in provider (if you sign in with Microsoft, Google, or Apple), language, and account preferences.

2. Audit & Operational Data

Information created or uploaded in connection with food-safety audits and corrective actions: inspection findings and scores, violation records, auditor notes, photos taken during audits, corrective action plan (CAP) responses and approvals, uploaded documents and reports, store and facility names and addresses, inspection histories, and comments entered by auditors or client personnel. Notes and photos can incidentally include names or images of people present at a location.

3. Auditor Data

For auditors who work with NES: contact details, the work area and approximate home base used to plan audit schedules and travel (we store the location rounded to about 100 meters), availability, assignments, credentials, and records of completed audits.

4. Job Applicant Data

If you apply for a position: your name, email address, phone number, city and state, the position applied for, your cover note, your résumé, the IP address and browser used to submit the application, and, during onboarding, documents and electronic signatures you provide.

5. Contact Form Data

If you use our contact form: your name, email address, company, the topic you choose, and your message.

6. Website Visit Data

When you browse our public website, we record the pages you view, how long you stay on each page, the website that referred you (the site name only, not the full address), campaign tags in the link, your device type and browser language, and an approximate location and network organization (city, region, country, and organization name) derived from your IP address. We do not store your IP address: we store a one-way code derived from it so repeat visits can be counted, and the code cannot be turned back into your address. If you send us a message through the contact form, it may be linked to the pages viewed in that visit. If your browser sends a Global Privacy Control (GPC) signal, we do not record your visit.

7. Portal Activity & Technical Data

When you use the portals, we collect IP address, browser and device information, and timestamps of sign-ins and security events. To keep the portal secure and improve it, we also record portal activity: pages visited (including page addresses), time on page, clicks (including the short label or text of the item clicked), feature usage, form interactions such as abandoned forms, and error signals such as repeated failed clicks. We also record when a report link that we email you is opened, so clients and NES know a report was received.

8. Information From Other Sources

We receive inspection data from audit platforms our clients use (such as SafetyCulture), information our clients provide about their locations and staff, and public records such as health department inspection results published by government agencies.

How We Use Your Information

NES uses personal information to:

• Provide, operate, maintain, and improve the Services
• Schedule audits, plan auditor travel, and match auditors to locations
• Generate, deliver, and store audit reports, corrective action plans, and compliance records
• Authenticate users, manage access controls, and enforce role-based permissions
• Detect and prevent unauthorized access, fraud, abuse, and security threats
• Send transactional communications such as account notifications, security alerts, and audit-related notifications
• Review job applications and onboard auditors and staff
• Respond to inquiries submitted through our contact form
• Understand how our website is used so we can improve it
• Perform quality control, auditor calibration, and service analytics, including aggregated and de-identified benchmarks that do not identify a client, location, or individual
• Comply with laws, regulations, legal process, and governmental requests
• Protect the rights, safety, and property of NES, our clients, users, and the public, and investigate disputes and incidents

NES does not use personal information for targeted advertising or sell it to anyone.

Artificial Intelligence

NES uses artificial intelligence tools provided by Anthropic (Claude) as part of its services. AI is used to:

• Help refine the wording and consistency of audit notes. This runs as part of NES's standard audit workflow, and results pass through NES's quality-assurance review before an audit report is released to a client
• Draft summaries for certain reports
• Answer questions and analyze data for NES staff
• Analyze photos that users choose to submit in features that use images

To do this we send the relevant content to Anthropic, such as audit note text, report figures, store and client names, and submitted photos. We send only what each task needs and do not send account passwords. Free-text notes and photos can contain personal information, so we do not claim that AI requests never include it.

Anthropic processes this data under its commercial terms, which do not permit it to use the data to train its models. NES does not train its own AI models. When NES staff accept or correct an AI suggestion, that example may be reused to improve later suggestions. AI output is advisory and is reviewed by people before it becomes part of an official report. Clients may ask in writing that AI tools not be used on their data.

Service Providers We Use

NES uses the following service providers to run the Services. Each receives only the data needed for its function and is bound by contract or its business terms to protect it. We do not allow them to use personal information for their own advertising.

NES may also disclose information to professional advisors (such as attorneys, accountants, and insurers) under confidentiality obligations, or to a successor in a merger, acquisition, or sale of assets, with notice as required by law.

Cookies & Similar Technologies

Our website and portals use only a small number of first-party cookies and browser storage items. We do not use advertising cookies, analytics services from other companies, tracking pixels, or social media trackers.

You can block or delete cookies in your browser settings, but the portals will not work without the session cookie. We honor the Global Privacy Control signal for website statistics. We do not respond to "Do Not Track" signals because there is no agreed standard for them.

We Do Not Sell or Share Personal Information

NES does not sell personal information, and does not "share" it for cross-context behavioral advertising, as those terms are defined under California law and similar state laws. We have not done so in the past twelve (12) months. Because we do not sell or share personal information, we do not offer an opt-out link; if this ever changes, we will update this Policy and provide one first. We do not knowingly sell or share the personal information of anyone under 16.

Data Retention

We keep personal information only as long as needed for the purposes in this Policy, our contracts, and our legal obligations:

Information subject to a legal hold, investigation, audit, or dispute is kept until that obligation ends. Clients may ask us to delete their data sooner by emailing support@evermoreaudits.com; we will delete data that is not subject to such an obligation and confirm in writing when deletion is complete.

Data Security

NES uses administrative, technical, and physical safeguards designed to protect personal information, including:

• TLS encryption for data sent between your browser and NES systems
• Role-based access control and least-privilege access for users and staff
• Optional two-step sign-in verification where enabled
• Logging of sign-ins, security events, access to shared report links, and administrative actions
• Session controls including idle timeout, a maximum session length, and checks that a session stays on the same browser and network
• Threat detection, rate limiting, and automatic blocking of suspicious activity
• Protection against cross-site request forgery on actions that change data
• Security headers including HSTS, Content Security Policy, and Permissions Policy
• File-type checks on uploads
• Separation of web-accessible files from application code and credentials

No system can be completely secure. Please keep your login credentials confidential and report any suspected unauthorized access to support@evermoreaudits.com.

Your Rights & Choices

Depending on where you live, you may have the right to:

• Know what personal information we have collected about you, including the categories, sources, purposes, and recipients described in this Policy, and obtain a copy
• Correct inaccurate personal information
• Delete personal information, subject to legal and contractual exceptions
• Receive your information in a portable format where technically feasible
• Opt out of the sale or sharing of personal information and of targeted advertising (NES does neither)
• Withdraw consent for optional features such as text messages
• Not be discriminated against for exercising these rights

California residents. The categories of personal information we have collected in the past twelve (12) months are: identifiers (such as name, email, phone, and online identifiers); professional or employment information (such as role, employer, and job application details); internet or other electronic activity (website and portal activity); approximate geolocation (from IP address) and auditor home-base location; audio-visual information (photos taken during audits); and inferences about website use for statistics. Sources, purposes, recipients, and retention for each are described in the sections above. Sensitive personal information we collect (account login credentials and auditors' home-base location) is used only to provide the Services, secure accounts, and schedule work, so a right to limit its use does not apply. This Policy also serves as our notice at collection, including for job applicants.

Other states. We honor comparable rights for residents of states with consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, as those laws apply to us.

How to make a request. Email support@evermoreaudits.com or call (844) 637-6673. Tell us your name, the email address you use with NES, your state of residence, and what you are asking for. We will confirm receipt within ten (10) business days and respond within forty-five (45) days, or tell you if we need up to another forty-five (45) days. We will verify your identity by matching the information you give us with our records, and may ask for more information for sensitive requests. An authorized agent may submit a request for you with your signed permission, and we may ask you to confirm your identity directly.

Appeals. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will respond to appeals within forty-five (45) days. If you are not satisfied, you may contact your state attorney general.

Employees of our clients. If your request concerns audit or operational data we process for your employer, we may forward it to your employer and assist them in responding.

Data Breach Notification

If NES confirms a security incident that results in unauthorized access to, or disclosure or destruction of, personal information, NES will:

• Notify affected clients without undue delay, targeting notice within seventy-two (72) hours of confirming the breach
• Describe the nature of the incident, the categories and approximate number of records affected, the likely consequences, and the steps taken or proposed to address it
• Notify affected individuals and regulators as required by applicable law
• Cooperate with applicable regulatory reporting obligations

Children's Privacy

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under sixteen (16), and portal accounts are limited to individuals eighteen (18) or older. If you believe a child's information has been submitted to NES, contact support@evermoreaudits.com and we will delete it.

Where Data Is Processed

NES serves clients in the United States and its territories, including Puerto Rico, and hosts the Services on servers in the United States. Some of our service providers may process limited data in other countries; for example, SafetyCulture is based in Australia and some mapping services operate servers in Europe. We do not currently offer the Services in the European Union or United Kingdom; before doing so, we will put appropriate transfer safeguards in place and update this Policy.

Law Enforcement & Legal Process

NES may disclose personal information to government authorities, law enforcement agencies, regulatory bodies, or other third parties where required or permitted by law, including in response to a valid subpoena, court order, search warrant, regulatory demand, or other lawful legal process.

Where legally permitted to do so, NES will notify affected users or clients prior to complying with a governmental request, unless such notification is prohibited by law, would obstruct a lawful investigation, or would pose a risk to the safety of any person. NES may challenge legal process it believes to be overbroad, improper, or inconsistent with applicable law.

NES may also disclose information without legal process where NES reasonably believes such disclosure is necessary to protect the safety, rights, or property of NES, its clients, users, or the public, or to detect and prevent fraud, security incidents, or unlawful activity.

Text Messages (SMS)

During portal account activation you may choose to receive account-security text messages by entering your mobile number and checking the SMS consent box. This is optional, the box is unchecked by default, and consent is collected directly from you, not from third parties. How the program works is shown on our Text Message Program page.

Texts are transactional and limited to account security, such as password reset codes and, if text-based sign-in verification is enabled on your account, sign-in codes. They are sent only in response to an action you take. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Reply STOP to opt out at any time, or turn off text messages under Settings → Preferences in the portal. Reply HELP for help, or contact support@evermoreaudits.com. NES does not send marketing texts. Mobile numbers are used only for account security. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes, and text-messaging opt-in data and consent will not be shared with any third parties, except service providers that deliver the messages for us (such as Twilio). Consent to receive texts is not a condition of purchasing services.

Email

NES sends transactional emails needed to run the Services, such as sign-in, report, and corrective-action notifications. If NES sends optional newsletters or updates, each one will include a way to unsubscribe, and unsubscribing will not affect transactional emails.

Changes to This Policy

We may update this Policy from time to time. The "Last updated" date at the top shows when it last changed. For material changes, meaning changes that substantially affect your rights or how we use personal information, we will give at least thirty (30) days' notice before the change takes effect, by a notice in the portal and on this page, and by email to users who have opted in to email notices. Other changes take effect when posted. Prior versions are available on request.

Contact Us

For questions or requests about this Policy or your personal information, contact:

National Evermore Services LLC
Privacy & Data Inquiries
Email: support@evermoreaudits.com
Phone: (844) 637-6673

We will confirm receipt of privacy requests within ten (10) business days and respond within the time required by applicable law.