1. Introduction

1.1. Purpose

This Cookie Policy explains how Evaste uses cookies and similar technologies on our website and platform.

1.2. Scope

This policy covers:

• evaste.co and all subdomains
• Evaste web application
• Our marketing pages

1.3. Your Consent

When you first visit our website, you will see a cookie banner asking for your consent. You can choose which cookie categories to accept.

Strictly necessary cookies do not require consent and cannot be disabled.

2. What Are Cookies?

2.1. Definition

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.

2.2. Similar Technologies

In addition to cookies, we may use:

• Local Storage - stores data in your browser
• Session Storage - stores data for a browser session
• Pixels/Web Beacons - small images that track activity
• Fingerprinting - NOT used by Evaste

2.3. First-Party vs Third-Party

• First-party cookies: Set by Evaste (evaste.co domain)
• Third-party cookies: Set by external services we use

3. Types of Cookies We Use

3.1. Strictly Necessary Cookies

These cookies are essential for the website to function. They enable:

• Authentication and login
• Security features
• Load balancing
• Cookie consent preferences

Legal Basis: Leğitimate interest (service provision)

Consent Required: No

3.2. Functional Cookies

These cookies enable enhanced functionality:

• Language preferences
• User interface settings
• Personalization
• Live chat functionality

Legal Basis: Consent or Leğitimate interest

Consent Required: Yes (in some jurisdictions)

3.3. Analytics Cookies

These cookies help us understand how visitors use our website:

• Page views and navigation
• Time spent on pages
• Traffic sources
• User behavior patterns

Legal Basis: Consent

Consent Required: Yes

3.4. Marketing Cookies

These cookies are used for advertising purposes:

• Ad targeting and retargeting
• Campaign effectiveness measurement
• Interest-based advertising
• Social media integration

Legal Basis: Consent

Consent Required: Yes

3.5. Meta Pixel and Meta Conversions API

Evaste uses the Meta (Facebook) Pixel in your browser, and the Meta Conversions API from its servers, solely to measure the performance of its own advertising. They are used only on evaste.co and on the sign-up (/register), onboarding and subscription/payment pages of app.evaste.co.

They are not loaded on other dashboard pages, not inside the consent widget that our customers install on their own websites, and are not used with the data of our customers' end visitors.

Consent: The Pixel is loaded only after you accept the "Marketing" category in Evaste's own cookie banner. If you reject it, the Pixel is never loaded and nothing is sent to Meta. You can withdraw your consent at any time through the cookie banner/settings; on later page loads the Pixel will no longer be loaded.

Data that may be sent to Meta after you consent:

• Page views
• Sign-up, email verification, domain verification, contact-form sales request and paid subscription events
• Hashed email address, hashed internal user ID and hashed phone number (contact form only)
• IP address and browser user agent
• The _fbp and _fbc identifiers

Payment card data is never shared with Meta.

This data is received by Meta Platforms Ireland Limited and Meta Platforms, Inc. (USA), which act as independent controllers under Meta's own terms. Transfers are protected by safeguards such as the EU-US Data Privacy Framework and/or Standard Contractual Clauses. Meta's privacy policy: https://www.facebook.com/privacy/policy

4. Cookie Details

4.1. Strictly Necessary Cookies

4.2. Functional Cookies

4.3. Analytics Cookies

Note: We use Google Analytics with IP anonymization enabled.

4.4. Marketing Cookies

Note: Marketing cookies are only set with your explicit consent.

5. Third-Party Cookies

5.1. Third-Party Services

We use the following third-party services that may set cookies:

• Google Analytics (analytics.google.com) - Privacy Policy: https://policies.google.com/privacy - Opt-out: https://tools.google.com/dlpage/gaoptout
• Intercom (intercom.com) - Privacy Policy: https://www.intercom.com/legal/privacy - Purpose: Customer support chat
• Stripe (stripe.com) - Privacy Policy: https://stripe.com/privacy - Purpose: Payment processing
• Cloudflare (cloudflare.com) - Privacy Policy: https://www.cloudflare.com/privacypolicy/ - Purpose: Security and performance
• Meta Platforms Ireland Limited and Meta Platforms, Inc. (facebook.com) - Privacy Policy: https://www.facebook.com/privacy/policy - Purpose: Measurement of our own advertising (Meta Pixel and Conversions API, only with your Marketing consent)

5.2. Social Media

If you interact with social media features on our site:

• Facebook - facebook.com/privacy
• Twitter - twitter.com/privacy
• LinkedIn - linkedin.com/legal/privacy-policy

5.3. Third-Party Responsibility

We are not responsible for third-party cookie practices. Please review their privacy policies for more information.

6. Managing Your Cookie Preferences

6.1. Cookie Consent Banner

When you first visit our website, you can:

• Accept all cookies
• Reject non-essential cookies
• Customize your preferences

6.2. Preference Center

You can change your preferences at any time by:

• Clicking the cookie icon in the footer
• Visiting: https://evaste.co/cookie-preferences
• Clearing your browser cookies and revisiting

6.3. Granular Control

You can enable or disable each cookie category:

• Strictly Necessary: Always on (required)
• Functional: On/Off
• Analytics: On/Off
• Marketing: On/Off

6.4. Withdrawing Consent

You can withdraw your consent to the Marketing category at any time through the cookie banner/settings. On later page loads, the Meta Pixel will not be loaded.

7. Browser Settings

7.1. Managing Cookies via Browser

Most browsers allow you to:

• View cookies stored
• Delete specific cookies
• Block all cookies
• Block third-party cookies
• Clear cookies on exit

7.2. Browser-Specific Instructions

Chrome: Settings > Privacy and security > Cookies and other site data

Firefox: Settings > Privacy & Security > Cookies and Site Data

Safari: Preferences > Privacy > Manage Website Data

Edge: Settings > Cookies and site permissions > Cookies and site data

Opera: Settings > Advanced > Privacy and security > Cookies

7.3. Mobile Devices

iOS Safari: Settings > Safari > Block Cookies

Android Chrome: Settings > Site settings > Cookies

8. Impact of Disabling Cookies

8.1. Strictly Necessary Cookies

Disabling these cookies will:

• Prevent login functionality
• Break security features
• Cause the website to malfunction

Recommendation: Do not disable

8.2. Functional Cookies

Disabling these cookies will:

• Reset language preferences each visit
• Disable live chat
• Remove personalization

Impact: Reduced user experience

8.3. Analytics Cookies

Disabling these cookies will:

• Not affect website functionality
• Prevent us from improving our services

Impact: None to user experience

8.4. Marketing Cookies

Disabling these cookies will:

• Not affect website functionality
• Show generic (not personalized) ads elsewhere

Impact: None to user experience

9. Policy Updates

9.1. Changes

We may update this Cookie Policy periodically. Changes will be posted on this page with an updated effective date.

9.2. Notification

Material changes will be communicated via:

• Website banner
• Email notification (for registered users)

9.3. Review

We recommend reviewing this policy regularly.

10. Contact Information

For questions about cookies:

Evaste (Group Taiga) Address: Levent, Istanbul, Turkey Email: privacy@evaste.co Web: https://evaste.co

Data Protection Officer: dpo@evaste.co

This Cookie Policy became effective on September 21, 2026.