Privacy Policy

This Privacy Policy explains how Everpop ("Everpop", "we", "us", or "our") collects, uses, shares, and protects information about you when you use our website and services (the "Service"). By using the Service, you agree to the practices described here. Everpop is operated by [Your Company Legal Name], located in [Your Jurisdiction]. If you do not agree with this Policy, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password (stored hashed) when you register.
• Connected platform data: when you connect a YouTube channel or social account, we receive identifiers, channel/video metadata, and authorization tokens needed to provide the Service. Tokens are encrypted at rest.
• Content: videos, clips, captions, and related metadata processed to deliver clipping and publishing features.
• Billing information: processed by our payment provider (Stripe). We do not store full card numbers.
• Usage data: log data, device/browser information, IP address, and product analytics about how you interact with the Service.
• Communications: messages you send to support.

2. How We Use Information

• To provide, operate, maintain, and improve the Service;
• To detect new uploads, generate clips, and publish content to platforms you authorize;
• To process payments, manage subscriptions, and prevent fraud;
• To communicate with you about your account, security, and updates;
• To monitor, secure, and troubleshoot the Service;
• To comply with legal obligations and enforce our Terms.

3. Legal Bases for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the bases of: performance of a contract (to provide the Service), legitimate interests (to operate and improve the Service and prevent abuse), consent (where required, e.g. certain cookies), and compliance with legal obligations.

4. How We Share Information

We do not sell your personal information. We share information only with service providers ("subprocessors") that help us run the Service, under contractual confidentiality and data-protection obligations. These include, for example: cloud hosting and database providers, our payment processor (Stripe), our social publishing provider, transactional email provider, and product analytics/error-monitoring providers. We may also disclose information to comply with law, enforce our Terms, or protect our rights, users, or the public.

5. YouTube API Services

The Service may use YouTube API Services. By using these features, you agree to be bound by the YouTube Terms of Service. Your use of data obtained through Google/YouTube is also subject to the Google Privacy Policy. You can revoke Everpop's access to your Google/YouTube account at any time via the Google security settings page. We use YouTube data solely to detect uploads and provide the clipping/publishing features you request, and we do not use it for advertising or share it with unauthorized third parties.

6. Third-Party Platforms

When you connect TikTok, Instagram, Facebook, YouTube, or other platforms, your use of those platforms is governed by their own terms and privacy policies. We are not responsible for the practices of third-party platforms. You authorize us to act on your behalf only to the extent needed to publish the content you direct us to publish.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data as described below.

8. Security

We implement technical and organizational measures designed to protect your information, including encryption of sensitive tokens, access controls, and signed webhooks. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise these rights, contact us at support@everpop.app. You may also revoke connected-platform access at any time from your account or the relevant platform's settings.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your rights. We do not sell or share personal information as defined by the CCPA/CPRA.

11. Cookies & Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings; disabling some cookies may affect functionality.

12. International Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

13. Children

The Service is not directed to individuals under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance.

15. Contact

Questions about this Policy? Contact us at support@everpop.app.