Privacy Policy

1. What we collect

We collect only what's needed to make EverBox work. We don't sell your data.

• Space content — the boxes you create, stored on our servers so you can access them anywhere
• Email address — if you create an account, used for sign-in and account recovery
• Billing info — if you subscribe to Pro, Stripe handles your payment details directly; we only store your subscription status

We use a session cookie to keep you signed in and local storage to remember your recent spaces. We don't use tracking or analytics cookies.

2. How we use it

Your data is used to provide the service — storing and syncing your spaces, authenticating you, and processing payments. That's it. No advertising, no profiling, no selling to third parties.

3. Who we share it with

We use a small number of services to operate EverBox:

• Stripe — payment processing
• Resend — sending sign-in emails
• Cloudflare — hosting and infrastructure

We don't share your data with anyone else.

4. Your rights and data retention

You can export your data or delete your account at any time from your account settings. Spaces inactive for 2 years are automatically deleted.

Regardless of where you live, you have the right to access, export, correct, or delete your data. For requests you can't handle in-app, email us at hello@everbox.space.

5. Security and changes

We use HTTPS, secure cookies, and rate limiting to protect your data. No system is perfectly secure — if you find a vulnerability, please let us know.

We may update this policy. If we make significant changes, we'll notify you by email. The effective date at the top reflects the latest revision.

Questions? Reach us at hello@everbox.space.