Skip to main content

Privacy Policy

Last updated: March 13, 2026

1. Introduction

EverOpt ("we," "us," or "our") operates the website at get-everopt.com and the EverOpt web analytics platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account information: When you sign up, we collect your email address through our authentication provider (Clerk). If you request a demo via our website, we collect any information you submit through the form.
  • Conversation data: When you use the Service, we store the full text of your queries, the responses generated, and associated tool call details (such as analytics API requests and results).
  • Third-party credentials: When you connect external services, we store OAuth refresh tokens (for Google Analytics, Google Sheets, and Google Tag Manager) and API keys or credentials you provide (for PostHog and Convert.com) in our database.
  • Payment information: If you purchase a paid plan, our payment processor (Stripe) collects billing details on our behalf. We store your Stripe customer ID and subscription details but do not store full credit card numbers.
  • Communications: When you contact us by email, we collect the contents of your messages and any attachments.
  • Email preferences: If you manage your email notification settings, we store your opt-out preferences, including per-property preferences for analytics insight emails.

2.2 Information Collected Automatically

  • Usage and billing data: We track token consumption (input and output tokens per API call), credit usage, and subscription status for billing purposes.
  • Error and diagnostic data: We use Sentry for error monitoring, which may capture technical details such as IP address, browser type, operating system, and email address when errors occur.
  • Cookies and session data: Our authentication provider (Clerk) uses cookies to manage your login session. We use browser session storage temporarily during OAuth connection flows. See Section 7 for more details.

2.3 Third-Party Analytics Data

When you connect your Google Analytics, PostHog, or Convert.com accounts to EverOpt, we access your analytics and A/B testing data through their respective APIs using credentials you authorize. We query this data in real time to answer your questions. Query results are stored as part of your conversation history for context continuity and are subject to the same retention policies as other conversation data (see Section 6). We do not sell your analytics data.

To provide the Service's natural language query and analysis features, your analytics data and conversation history are sent to third-party AI providers (currently Anthropic) for processing. These providers process data according to their own privacy policies and data processing agreements.

2.4 Google Tag Manager Configuration Data

When you connect your Google Tag Manager account to EverOpt, we access your GTM account structure (account IDs, container IDs, workspace names) and container configuration (tags, triggers, variables, and built-in variables). We may also create, update, or publish tags, triggers, and variables on your behalf when you instruct the Service to do so. This configuration data is stored as part of your conversation history.

EverOpt accesses only your GTM configuration metadata — we do not receive or process the end-user data that your website collects through GTM (such as visitor behavior, form submissions, or click data). That data flows directly between your website, GTM, and your analytics destinations (e.g., Google Analytics).

3. Google API Data

EverOpt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data We Access

When you connect your Google account, we request the following permissions:

  • Google Analytics (read-only): We access your GA4 property data including dimensions (such as page paths, traffic sources, device types, and geographic data) and metrics (such as sessions, users, page views, and conversion events) to answer your analytics questions.
  • Google Sheets: We create spreadsheets in your Google Drive when you export query results. We only access spreadsheets that EverOpt creates.
  • Google Tag Manager (read and write): We access your GTM accounts, containers, and workspaces. We read your existing tags, triggers, variables, and built-in variable configurations. When you instruct the Service, we create or update tags, triggers, and variables, enable built-in variables, and publish workspace changes to your live container.

How We Use Google Data

We use Google user data solely to provide and improve the user-facing features of the Service, specifically:

  • Answering your natural language analytics questions
  • Generating reports and visualizations you request
  • Exporting data to Google Sheets when you request it
  • Generating analytics insights delivered to you via email notifications, including suggested questions based on your property data
  • Reading, creating, updating, and publishing Google Tag Manager tags, triggers, and variables at your direction

Prohibited Uses

We do NOT use Google user data for:

  • Advertising, retargeting, or marketing purposes
  • Selling or transferring to third parties for their own purposes
  • Credit, lending, or insurance eligibility decisions
  • Any purpose unrelated to the Service's core functionality

Data Sharing

Google user data is shared only with Anthropic (our AI provider) as necessary to process your queries. This transfer is essential to the Service's core functionality and is disclosed prominently in this policy. We do not share, sell, or transfer Google user data to any other third parties except as required by law.

Credential Storage

We store only your Google OAuth refresh token (not your password) in our database. Access tokens are generated on-demand and are not persisted. You can disconnect your Google account at any time, which will delete your stored credentials.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your requests and respond to your inquiries
  • Send you service-related communications, including updates, security alerts, and support messages
  • Send you analytics insight emails containing data-driven findings and suggested questions based on your connected analytics properties
  • Analyze usage patterns to improve user experience and develop new features
  • Detect, prevent, and address technical issues or fraud
  • Comply with legal obligations

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • AI and language model providers: Your conversation queries and analytics data are sent to third-party AI providers (currently Anthropic) for natural language processing. This is essential to the Service's core functionality.
  • Service providers: We share information with third-party vendors who help us operate the Service, including Clerk (authentication), Stripe (payment processing), Sentry (error monitoring), PostHog (product analytics), and AWS (hosting, content delivery, and email delivery via Amazon SES).
  • Legal requirements: We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your information within 90 days, unless we are required to retain it for legal or compliance purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your authenticated session. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you will not be able to log in to the Service.

  • Essential cookies: Our authentication provider (Clerk) uses cookies for session management and authentication. These are required for the Service to function.
  • Analytics cookies: Our marketing website (get-everopt.com) uses Google Analytics to understand visitor traffic. The application uses PostHog for product analytics to help us understand how users interact with the Service and improve the user experience.

8. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS for all API communications), JWT-based authentication with signature verification, webhook signature validation, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request that we delete your personal information, subject to certain exceptions.
  • Portability: Request a machine-readable copy of your data.
  • Opt-out: Unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails. For analytics insight emails, you may opt out globally or on a per-property basis using the unsubscribe link included in each email.

To exercise any of these rights, please contact us at ryan@get-everopt.com.

10. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including the right to know what personal information we collect, the right to delete your data, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your California privacy rights, contact us at ryan@get-everopt.com.

11. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

12. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete that information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at:

EverOpt
Email: ryan@get-everopt.com