Privacy Policy

How Every collects, uses, stores, and protects your information.

Effective Date: October 9, 2026

At Every AI, your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, store, and protect your information when you use our application (the "Service"). By using Every AI, you agree to the terms of this Privacy Policy.

For the personal data you put into your workspace (for example, your contacts and clients), you are the controller and Every processes it on your behalf under our Data Processing Agreement. This Privacy Policy covers the personal data Every controls: your account, billing, security and usage data.

1. Information We Collect

We may collect the following types of information:

  • Information You Provide: Account Information (Name, email address, company details), User-Submitted Data (feedback, inquiries, invoice data, client information, expense details).
  • Automatically Collected Information: Device Information (IP address, device type, operating system, browser type, app version), Usage Data (log data including timestamps, features accessed, actions performed within the app).
  • Browser Extension Capture Data: If you use the Every browser extension, the text content, title, and URL of the web page you are viewing are sent to Every's servers only when you click the capture button, solely to create or update a contact in your account (including AI-assisted extraction and enrichment of contact details such as name, role, and company). The extension does not read, collect, or transmit any browsing data in the background, and captured page content is not sold or used for any purpose unrelated to providing this feature.

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service's functionality and features.
  • Communicate updates, respond to inquiries, and send important notifications.
  • Ensure the security and integrity of our systems and your data.
  • Process payments and manage financial transactions securely.
  • Analyze usage patterns to enhance user experience.

3. How We Protect Your Information

We use technical and organizational safeguards to protect your data, including:

  • Encryption: Data is encrypted both in transit (using TLS/SSL) and at rest.
  • Access Control: Strict controls limit internal access to your information.
  • Secure Infrastructure: Data is stored in secure cloud environments with robust security practices.

More detail on our security measures, backups and deletion is at every.ai/security.

4. Third-Party Services

Every AI uses third-party service providers to operate the Service. Depending on the feature you use, those providers may process account information, business data, or the content needed to complete your request. The full list of subprocessors that process customer data, with their locations and purposes, is at every.ai/subprocessors. It includes Railway (hosting), Supabase (database and storage), Clerk (sign-in), Stripe (payments), Resend (email delivery), and the AI providers OpenAI, Google AI and Anthropic, which power AI features with the content and business context reasonably needed for your request.

We also use these analytics tools to understand how Every is used:

  • Google Analytics (website and web app) and Google Firebase Analytics (mobile app): To understand how the Service is used. We send your user identifier and, in the mobile app, your workspace identifier and plan; not your workspace content.
  • Promptwatch: To measure visits to the every.ai marketing site that originate from AI search products, identify which public pages those visitors land on, and report aggregate source, location, browser, and device trends.

The Promptwatch visitor script runs only on the public every.ai marketing site. It sends the visited page URL (including ordinary query parameters), referring URL, locale, time zone, and the technical request data needed to report source, approximate location, browser, and device. Every captures and removes referral-code and signed invite-token parameters before Promptwatch or other analytics initialize. Promptwatch does not receive form entries, Every account records, or workspace content. See Promptwatch's Visitor Analytics documentation and privacy policy for its data-processing practices.

These providers process data under their applicable service terms and data-processing commitments. Avoid submitting data you are not authorized to process, and review generated output before relying on it or sending it externally.

5. Google User Data

We access, use, store, and share Google user data as follows:

  • Access: We access your Google Contacts, Calendar, Gmail, and Google Drive data to power product features you authorize.
  • Use: We use contact, calendar, Gmail, and Drive data solely to power product features you authorize. Any data we access is not used to develop, improve, or train generalized AI and/or ML models.
  • Store: We securely access and, where necessary, store limited data only for invoice generation, client management, time tracking, document creation, and client communication workflows that you initiate.
  • Share: We disclose Google user data only as needed to provide or secure features you authorize, including to service providers that assist with data processing. When an AI-powered request uses Google-sourced context, content reasonably needed for that request may be processed by the AI provider used for that feature.
  • Compliance: Our use of Google user data conforms with Google's Limited Use Requirements.

6. QuickBooks and Xero Accounting Data

If you connect Xero to Every Agent, you authorize Every to access and process the Xero data needed to carry out the requests you make of Every Agent. Depending on the permissions you grant and the request, this may include organization information, contacts, chart-of-accounts entries, tax rates, products and services, invoices, payments, bank transactions, tracking categories, reports, and connection status information.

  • Purpose: We use this data only to carry out the Xero requests you make of Every Agent and to operate, secure, troubleshoot, and support the Xero connection.
  • AI model training: We do not use Xero API data to train, fine-tune, adapt, enhance, or otherwise improve artificial intelligence or machine learning models. When you ask Every Agent to act on information from Xero, we process only the information needed to carry out that request; this does not train or improve a model.
  • Customer separation: We do not use one customer's Xero data to provide results, benchmarks, or insights to another customer, and we do not share Xero data across customer accounts.
  • Storage and access: OAuth tokens are encrypted and restricted to server-side processes that connect Every Agent to Xero. Information retrieved from Xero and limited audit history are stored only as needed to carry out your requests and to operate, secure, troubleshoot, and support the connection.
  • Disconnecting and deletion: Disconnecting Xero stops Every Agent's access to your Xero organization and deletes the stored OAuth tokens. Information previously retrieved from Xero and audit history remain subject to the retention and deletion terms below, and you may request deletion by contacting us.

QuickBooks Online

An organization admin can connect QuickBooks Online to Every Agent through Intuit OAuth. This authorizes the agent to access customers, invoices, payments, and reports on demand during a chat turn to carry out your requests. Every does not run a background sync of QuickBooks data. The agent creates or updates records only after you confirm each write.

  • Purpose: We use QuickBooks data only to carry out your requests through Every Agent, within your consent. We do not process it on Intuit’s behalf.
  • AI processing: Data needed for your request is processed by the AI provider used for that chat. We do not use QuickBooks data to train or improve AI models or to provide results to other customers.
  • Storage and retention: Every stores OAuth tokens encrypted in its systems. Tool results can appear in your chat history. See the retention, deletion, and international storage terms below.
  • Your controls: An organization admin can disconnect QuickBooks in Agent → Connections. Disconnect revokes the grant at Intuit and deletes the stored tokens. If you disconnect from inside QuickBooks instead, Intuit revokes the grant, Every stops using the connection, and the stored tokens are removed when an admin disconnects or reconnects in Every. Disconnecting stops future access but does not delete prior chat history. Contact [email protected] to request deletion.

7. Social Channels (LinkedIn and Instagram)

Every AI offers an optional, currently limited feature that lets you connect your own LinkedIn or Instagram account. You authenticate directly with that platform through a secure virtual browser session using your own credentials — Every never receives or stores your platform password.

  • What we access: When you connect a social account, we access your contacts or connections and your direct messages on that platform, in order to populate your Every contacts and deal activity.
  • What we store and how: We store the resulting login session state for the connected account, encrypted at rest using AES-256-GCM.
  • How we use it: We use contact and direct-message data accessed through a connected social account solely to provide the CRM contact-sync and deal-activity features you authorize. This data is not used to develop, improve, or train generalized AI and/or ML models.
  • Retention and deletion: Disconnecting a social channel immediately deletes the stored session. Previously synced contacts and deal activity remain subject to the retention and deletion terms below, and you may request deletion by contacting us.

8. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share data only in the following limited scenarios:

  • With Your Consent: When you explicitly authorize us to share data.
  • Service Providers: With trusted third parties who perform services on our behalf.
  • Legal Obligations: When required to comply with applicable laws.
  • Business Transfers: If Every AI is involved in a merger, acquisition, or asset sale.

9. Data Retention

We keep your information while your account is active and as needed to provide the Service. You can permanently delete individual People, Companies and Deals at any time in the app or through our API, and remove a deleted person's name from your activity history. When you delete your workspace, we delete its data. Deleted data remains in our encrypted backups for up to about 7 days, after which it is overwritten. We keep limited records longer where the law requires (for example billing records). You can also request deletion of your account and associated data by contacting us.

10. Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to:

  • Access, update, or correct your personal information.
  • Request deletion of your personal information.
  • Withdraw consent for data processing.
  • Object to certain types of data processing.

To exercise these rights, please contact us at [email protected].

11. Children's Privacy

Every AI is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

12. International Users

Every AI Inc. is a Canadian company. Our servers and primary data storage are in the United States, and some of our service providers process data in other countries. When we transfer personal data from the EEA, the United Kingdom or Switzerland, we rely on the safeguards in our Data Processing Agreement (the EU Standard Contractual Clauses and the UK Addendum).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy within the Service or via email.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Every AI Inc.
100 King Street West, Suite 6200, 1 First Canadian Place, Toronto ON
M5X 1B8, Canada
Email: [email protected]