Privacy policy

The short version: your workspace data is yours, lives in its own database, and we don't track you. Here's the longer version.

What we collect

• Account details — your email, organization name, and workspace address, collected at signup to create and administer your workspace.
• Billing — handled entirely by Stripe. Card numbers never touch our servers; we receive only subscription status and receipts metadata.
• Workspace content — whatever your team puts in your workspace. It's stored in your own isolated database and processed only to provide the service.
• Operational logs — standard server logs (IP, timestamp, request path) kept briefly for security and reliability.

What we never do

• No cookies for tracking, no advertising trackers, no cross-site tracking — here or in your workspace. This site runs no analytics at all: no measurement script, no analytics cookies. The only record of your visit is the standard server log described above.
• No selling, sharing, pooling, or mining of your data.
• No training of AI models on your content.
• No third-party cookies.

Cookies & on-device storage

You can change these choices anytime via Cookie preferences in the footer.

Where your data lives

Each workspace runs on its own dedicated PostgreSQL database — no shared tenancy, no cross-workspace queries. Traffic is encrypted in transit (TLS), passwords are stored as salted hashes, and every workspace database is backed up before every platform update. More in Security & data.

Your rights

• Access & export — export records from any list view, bulk-download files, or request a full export.
• Correction & deletion — edit or delete your data in the workspace anytime; on cancellation we delete workspace data on request or per retention schedule.
• Questions or requests — email company@everjust.co and a human will handle it.

The EVERJUST iPhone app

This section applies only if you use the EVERJUST iPhone app — the one where you text an agent that does work in your workspace. If you only use EVERJUST in a browser, nothing below happens to your data. Everything above still applies either way.

Policy version 2026-07-01 — this is the version the app records when you accept the disclosure on first run. It changes only when what you agreed to changes, which is not the same as the last-updated date below.

What the app processes

• Your messages to the agent, and the workspace records the agent reads or writes to act on them — the customers, invoices, leads, tasks or email drafts it had to open to answer you.
• Sign-in and session data — the email address you sign in with, an account identifier derived from your workspace and user number, and an encrypted key scoped to your workspace so the agent can keep working while your phone is asleep. Your password is passed straight to your own workspace to authenticate you and is never stored.
• A device push token, if you turn notifications on, and a random per-install identifier so signing out can be scoped to one device. Neither is an advertising identifier; the app contains no advertising or analytics code of any kind.
• Operational logs and token counts — errors and usage totals, so we can run the service and show you what you have used. Message contents are not written to logs.

Who else sees it

OpenAI, L.P. is the AI model provider behind the agent. Your messages, and the workspace records the agent read in order to answer, are sent to OpenAI's models to produce each reply. This data is not used to train models — OpenAI's API terms do not train on business API data. The app shows you this before anything is sent and our server refuses to forward a single message until it has recorded your acceptance.

OpenAI is the only third party that receives your content. There are no advertising networks, no analytics vendors, and no crash reporting service. Processing happens in the United States.

Which provider runs the agent is a deployment setting, and this paragraph is the one place that names the current one. If we ever add or change a provider, this page changes in the same breath — a provider we have not named here is a provider we are not allowed to send your data to.

How long it is kept

We do not age anything out automatically. Conversations, the records the agent quoted back to you, and your encrypted workspace key are kept until you delete them or delete your account. The service has automatic retention windows built in and they are deliberately switched off, because deleting your work on a timer you did not choose is worse than keeping it. If we ever turn one on we will state the period here first.

Backups taken for disaster recovery can still contain data for a period after you delete it. They are never used to answer you.

Deleting it

Settings → Account → Delete account removes your app footprint: your conversations and their history, the encrypted workspace key, your device token, and your saved settings. Deleting a single conversation removes it and any action still waiting for your approval inside it. Settings → Data and privacy also exports everything the app holds about you, in one file.

Two things deliberately survive deleting your account, and neither holds any of your content:

• your account identifier, kept as a tombstone so a session issued before the deletion can never be replayed against us; and
• the consent record — the account identifier, the policy version you accepted, the install you accepted it on, and when. It is the record that this disclosure was actually shown to you, so it has to outlive the account it is about.

Your underlying business data lives in your workspace and is governed by the rest of this policy and your EVERJUST agreement. Deleting the app, or your app account, does not delete your workspace.

What the agent remembers

The app can list, and let you delete, short facts the agent has noted about how you work. That feature is not switched on in this deployment: the agent is noting nothing, and the list in Settings → Memory is empty for everyone. The screen ships first on purpose — being able to see and delete what is stored is the precondition for storing anything. If we turn it on, this section changes before it does.

What the app will not do without you

• The AI provider key never ships inside the app. Your workspace key is stored encrypted and used only to carry out your instructions.
• Every action that changes a record, deletes anything, or sends mail stops and asks you first, naming exactly what it is about to do. Nothing happens until you tap approve, and declining costs nothing.
• The agent can only reach what your own workspace login can reach. It is not an administrator.

Changes

If this policy changes materially, we'll note it here and, for significant changes, email workspace administrators.

Last updated: 3 August 2026