Privacy Policy

Who we are

everyonegetsawebsite is a subscription service that helps you build and host a website for your business.

Information we collect

Depending on how you use our service, we may collect:

• Account information: Your email address and display name when you register. Your password is never stored in readable form. If you sign in with Google, we receive your name, email, and profile picture from Google.
• Business and website content: The content you add to your shop, such as your business name, description, products, services, prices, images, and bookings. This is used to generate and host your website.
• Billing and subscription records: Your plan, billing interval, subscription status, and a reference to your transaction when you subscribe to a paid plan. Subscription payments are processed by third-party providers; we do not store card numbers, bank details, or other financial credentials.
• Provider integrations: If you connect a payment or email provider to your shop, we store your provider choice, connection settings, and sender details needed to operate those features. Authentication material is kept in protected form. We do not collect or store payment credentials from your customers' purchases; those are handled by the provider you connect. If you use EGAW Payments (our platform-facilitated checkout), your subaccount details, payout schedule, and transaction records are stored to operate and reconcile the service. Customer payment credentials are processed by our payment partner (Flutterwave), not stored on our systems.
• Orders and customer inquiries: Order details, booking requests, lead messages, and related contact information when visitors interact with your shop. Payment card data from customer purchases is not collected or stored by us.
• Charlie AI usage: Tenant-scoped information about your shop (such as content, catalog, leads, and order summaries) sent to our AI provider when you use Charlie. We do not send passwords, payment credentials, or other secrets.
• Website analytics: Privacy-first page view counts for your hosted website, without cookies, third-party scripts, or personally identifiable visitor data.
• Consent records: When you accept our subscription terms or our provider-connection terms in the dashboard, we keep an audit record that includes your user account, the relevant shop, which document and version you accepted, the time of acceptance, and the IP address used. This lets us show what you agreed to and when.
• Data exports: On Pro and Ultra, when you request a shop export from Download your data, or when an archive is created automatically at the end of a data grace period, we generate a downloadable file of your website data, store it temporarily, and email you a secure link. Export files are automatically deleted 7 days after the email is sent. Before you delete your account, you can download a copy of your account profile and site list from Account settings.

How we use your information

• To create and manage your account.
• To generate and host your website.
• To run the features you use, such as your catalog, bookings, and analytics.
• To manage your subscription and process recurring billing through our payment providers.
• To operate checkout and transactional email through providers you connect to your shop.
• To provide Charlie's read-only suggestions.
• To send service-related emails about your account and subscription.
• To display visitor insights in your dashboard.

Sign-in with Google

If you use Google sign-in, we access Google user data only to provide and improve your experience, in line with Google's API Services User Data Policy.

• What we receive: Your name, email address, and profile picture. We do not collect any other Google user data.
• How we use it: Solely to create or link your account, authenticate you, and provide our services. We do not use Google user data for advertising, data brokering, credit decisions, or AI model training.
• Sharing: We do not sell or disclose Google user data to third parties for advertising. We may share the minimum necessary data with infrastructure providers bound by contractual restrictions.
• Protection and retention: Google user data is protected with the same security measures as all user data and retained only while your account is active. You may request deletion by contacting [email protected].

Email

We send service-related emails about your account and subscription, such as confirmations, payment receipts, plan changes, and support responses. Occasional product updates include a one-click unsubscribe link. Essential service emails continue even if you unsubscribe from product updates.

If you connect your own email provider, messages you send from your dashboard (order confirmations, booking notices, invoices, lead replies, and campaigns) are delivered through that provider. Recipient addresses and message content are shared with your provider only to send messages you initiate. Your provider's privacy policy governs how they handle that data.

Cookies and analytics on our marketing site

We use a secure session cookie to keep you logged in. This cookie does not contain personal data. On our marketing site (everyonegetsawebsite.com) only, we also use optional analytics and measurement tools. A consent banner lets you accept all cookies or limit the site to strictly necessary cookies. If you choose necessary only, optional analytics are not loaded.

Cloudflare Web Analytics

A privacy-first service that does not use cookies or collect personal data. It provides aggregate metrics such as page views, referrers, and browser types. Because it does not collect personally identifiable information, it is always active regardless of your cookie choice. Learn more at cloudflare.com/web-analytics.

Google Analytics

We use Google Analytics 4, provided by Google LLC, to understand traffic patterns and how visitors find our site. It may set cookies and collect data such as pages visited, approximate location, device type, and referral source. We do not enable Google advertising features. Google Analytics loads only if you accept optional cookies. You can opt out at tools.google.com/dlpage/gaoptout. See Google's privacy policy at policies.google.com/privacy.

Meta Pixel

We use the Meta Pixel, provided by Meta Platforms, Inc., to measure the effectiveness of our advertising on Facebook and Instagram. It may set cookies and collect data such as pages visited, actions taken, browser type, and referral information. The Meta Pixel loads only if you accept optional cookies. Manage your ad preferences at facebook.com/adpreferences. See Meta's privacy policy at facebook.com/privacy/policy.

TikTok Pixel

We use the TikTok Pixel, provided by TikTok Inc., to measure the effectiveness of our advertising on TikTok. It may set cookies and collect data such as pages visited, actions taken, browser type, and referral information. The TikTok Pixel loads only if you accept optional cookies. Manage your ad preferences in the TikTok app under Settings and privacy. See TikTok's privacy policy at tiktok.com/legal/privacy-policy.

None of these marketing-site analytics tools are used on customer websites we host.

How we protect your information

We use industry-standard practices including encrypted connections, access controls, and regular security reviews. Provider connection settings for your shop are stored in protected form and used only to operate features you enable. We do not sell your data. If a breach affects your personal data on our systems, we will notify you and relevant regulators as required by law.

Payment credentials for subscription billing are processed and stored solely by our payment providers. Payment credentials from customer purchases on your shop are processed and stored solely by the payment provider you connect. We do not store card numbers, bank details, or other financial credentials on our systems. To the fullest extent permitted by law, we are not liable for breaches or security incidents on a third-party provider's systems.

Third-party services

We use trusted third-party services for hosting, authentication, AI suggestions, subscription billing, and marketing analytics. These include Cloudflare, Google, OpenRouter, Meta Platforms, TikTok, Stripe, and Flutterwave. Each provider has its own privacy policy. We share only the minimum data required for each service to function and do not disclose your information for advertising, data brokering, or resale.

Shop owners may connect their own payment and email providers. When someone purchases from a merchant website, payment data goes directly to that merchant's provider; we do not receive or store it. We may store non-financial order details needed to run the website. When a merchant sends email through a connected provider, recipient data is shared under the merchant's account. We facilitate the connection but do not control how those providers handle data on their own platforms. For merchants using EGAW Payments, we share the minimum data required with Flutterwave to process transactions, manage subaccounts, and facilitate payouts. This includes order amounts, merchant identity information for KYC verification (handled by Flutterwave), and payout details.

Your rights and choices

You may:

• Request a copy of data we hold about you or your business.
• Request deletion of your account and associated data.
• Cancel your subscription from your dashboard, subject to our Terms of Service.
• Unsubscribe from product update emails via the link in those emails or by contacting us.

We operate in accordance with applicable privacy laws, including rights under the GDPR, UK data protection law, and California privacy law where they apply. Where service providers process data outside your region, we do so under safeguards required by applicable law.

Retention and minors

We retain personal information only as long as needed to fulfill the purposes in this policy or as required by law. Account data and website content are retained while your account is active. When you delete your account, we remove your user profile, owned shops, and related billing and consent records from our database (including subscriptions and subscription payment history tied to those shops). Payment processors such as Stripe or Flutterwave may retain their own copies of transaction records as required by law. Request deletion at any time from Account settings or by contacting [email protected].

If your shop moves to the Free plan while holding more than the Free plan allows, a 14-day data grace period applies before any content above Free limits is removed. At the end of that period we create a full export of your website data and email you a download link; that export file is automatically deleted 7 days after the email is sent. On-demand shop exports on Pro and Ultra follow the same 7-day deletion schedule. This is described in more detail in our Terms of Service.

Our service is not directed at anyone under 16. We do not knowingly collect data from minors and will delete it promptly if we learn we have collected it.

Changes and contact

We may update this policy from time to time. Changes are posted on this page with an updated date.

Questions or requests? Contact us at [email protected].