Privacy Policy

Account information. When you sign up, we collect your email address. Authentication itself — including password storage — is handled by our authentication provider; we never see or store your raw password. We do not currently offer sign-in through a third-party identity provider; if we add one, it would share basic profile information (such as your name and email) with us, and we will update this Policy before that option becomes available.

Workspace and brand data. Information you provide to build your brand profile — mission, voice, audience personas, content pillars, website URLs, uploaded brand assets (fonts, colors, logos), and your list of competitors.

Content data. Plans, briefs, drafts, generated content items, generated images, and the approval and review decisions (approve, reject, edit, feedback) your team makes on them.

Connected-account data. When you connect a social media or advertising account for publishing or ad campaigns, we store the authorization tokens and account identifiers needed to act on your behalf, via our publishing and advertising partners. We store these credentials encrypted at rest.

Payment data. Subscription and billing information is processed by our payment processor. We store the resulting subscription status and transaction records, but we do not store your full card number.

Usage and log data. Information about how you use the Service — API requests, feature usage, AI-generation usage (including token and cost metadata used for quota enforcement and billing), error logs, IP address, browser and device information, and timestamps.

Cookies and local storage. We use a small number of strictly necessary cookies to keep you signed in (set by our authentication provider) and browser local storage to remember interface preferences such as theme and language. We do not use third-party advertising or cross-site tracking cookies on the Service today; if that changes, we will update this Policy.

We use the information above to:

• provide and operate the Service, including generating content, images, competitor analyses, and trend insights for your workspace from your own brand and content data — this is a core, expected use of your data, not an incidental one, since the Service's AI features work by processing exactly this information on your behalf;
• maintain the security, integrity, and availability of the Service, including enforcing per-workspace data isolation;
• process payments and manage subscriptions;
• communicate with you about your account, changes to the Service, or support requests;
• monitor and improve the Service, including debugging and, in aggregated or de-identified form, understanding usage patterns; and
• comply with legal obligations and enforce our Terms of Service.

Generating content, images, and analyses involves sending relevant parts of your brand and content data to AI model providers — including large-language-model and image-generation providers, and a specialized marketing-tuned model we operate — so they can produce output for your workspace. We select providers that contractually restrict use of submitted data to providing the requested output rather than using it to train their own general-purpose models, where such terms are available to us; we do not otherwise control a third-party model provider's own infrastructure or retention practices beyond what we can contractually arrange.

We do not sell your personal information. We share information with:

• Infrastructure and processors that run the Service — database, authentication, and file-storage providers; cloud hosting providers; AI model and image-generation providers; social-publishing aggregator providers; advertising-platform providers, when you connect an ad account; our payment processor; and error-monitoring and observability tooling;
• Professional advisors and successors — legal, accounting, or other advisors, and, if Everyside is involved in a merger, acquisition, or asset sale, the counterparty to that transaction, subject to this Policy or a materially equivalent one; and
• Legal and safety — where required by law, legal process, or to protect the rights, property, or safety of Everyside, our users, or the public.

We retain your account and workspace data for as long as your account is active, and for a reasonable period afterward to allow you to reactivate, comply with legal or tax obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated data as described in Section 7; some information may be retained longer where required by law — for example, billing records.

We use industry-standard safeguards to protect your information, including encryption in transit and at rest for stored credentials, database-level tenant isolation so one workspace cannot read another's data, and encrypted storage for connected-account tokens and any API keys you provide. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can update most account and brand information directly in the Service, or contact us using the details in Section 12 to exercise these rights. We will respond within a reasonable timeframe and consistent with applicable law.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

We and our processors may store and process information in countries other than your own. Where we transfer personal information internationally, we take steps intended to ensure it receives an adequate level of protection consistent with applicable law.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice — for example, by email or an in-product notice — before the changes take effect.

This Policy is governed by the laws of the Arab Republic of Egypt. Placeholder jurisdiction: this clause is provisional pending confirmation of Everyside's registered legal entity and a qualified lawyer's review. See our Terms of Service for the terms governing use of the Service generally.

Questions about this Privacy Policy, or requests relating to your personal information, can be sent to info@everyside.ai.