Privacy policy

This policy describes information processed when you visit Everflow AI, create an account, use the service, or buy a subscription.

Last updated: October 25, 2026

Data controller/operator: Everflow AI. Contact: everflowaicontactteam@gmail.com.

1. Information we process

Account information: email address, authentication identifiers, and profile information you provide. Supabase provides authentication services.
Product data: customer and user identifiers, event names, timestamps, and optional metadata sent to our API by you. You are responsible for ensuring you have authority to submit this information and should not submit secrets, payment-card data, or sensitive personal information.
Subscription records: subscription status, access period, and Paddle customer, subscription, and transaction references. We do not store full payment-card numbers or security codes.
Support messages: information you include when contacting us, including your account email and payment reference.
Technical information: service and security logs, diagnostic data, and information processed by hosting and analytics providers when you use the website.

2. Paddle and payment processing

When you choose Paddle checkout, Paddle collects and processes the information required to complete and administer your purchase, which may include contact, billing, payment, tax, device, and transaction details. Paddle is the authorized reseller for the purchase under its Buyer Terms. Paddle sends Everflow subscription events so we can associate your purchase with your account and provide or end subscription access. We receive subscription identifiers, status, customer reference, and billing-period information; we do not receive or store your complete card details. For details about Paddle’s handling of your information, review the Paddle Privacy Policy.

If you arrange PayPal or cryptocurrency payment directly with us by email, the payment provider processes that payment under its own terms. We record the payment method and a transaction or receipt reference to activate the subscription.

3. Why we use information

To create and secure accounts, authenticate users, and provide the workspace and API.
To calculate and display product usage summaries and heuristic customer-health signals.
To process subscription status, activate or restrict access, prevent duplicate payment activation, and respond to billing questions.
To operate, maintain, troubleshoot, and protect the service, including detecting abuse and complying with legal obligations.
Where enabled, to provide optional AI-generated suggestions using usage-derived signals. We do not need customer names or raw event payloads for those suggestions.

4. Service providers and disclosures

We use service providers to operate the product, including Supabase for authentication/database services, our website and API hosting providers, Paddle for checkout and subscription processing, and optional OpenAI processing for generated suggestions. We disclose information to those providers only as needed for their services, and may disclose it where required by law or necessary to protect the service and its users. Newsletter signup is currently paused.

5. Retention and security

We retain account and subscription records while needed to operate your account, administer billing, resolve disputes, and meet legal obligations. Product event data is retained in the service database until it is deleted by the operator or as required to address a support request or legal obligation. Operational logs may also be retained by our service providers under their own retention settings. We use measures such as hashed API keys and account-scoped access controls, but no method of storage or transmission is completely secure.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, or to complain to a privacy regulator. To make a request, email everflowaicontactteam@gmail.com from your account address and describe your request. We may need to verify your identity and may retain information where the law requires or permits it. You can manage or cancel a Paddle subscription using Paddle’s available customer support or subscription controls; see our Refund policy for billing requests.

7. International processing and children

Our service providers may process information in countries other than yours. Where required, appropriate safeguards apply to international transfers. Everflow is intended for business users and is not directed to children under 18.

8. Updates and contact

We may update this policy when our practices or legal requirements change. The current version and effective date will appear on this page. For privacy questions or requests, contact everflowaicontactteam@gmail.com.