Is this email really from Everpop?
Use these checks before acting on a message that claims to be from Everpop:
- Expected Everpop mail uses an @everpop.app From address. A visible sender can be spoofed, so do not rely on this check by itself.
- Every link points to everpop.app. Hover (or long-press) a link to check before clicking.
- We will never ask you to reply with, or type into an email, your password, a verification code, or card details, and we never take payment through a link in an email. Every action happens on everpop.app after you log in — a code we email you is only ever typed into everpop.app itself.
- Your mail provider may show SPF, DKIM, and DMARC results in the message headers. Passing authentication is useful evidence, but it does not replace checking the destination of a link.
Never fully sure? Skip the link entirely. Everything an email asks of you can be done by typing everpop.app into your browser and logging in — if we detected a new upload, the same one-click button is waiting on your Videos page. An email from us is a convenience, never a requirement.
Your channel's safety
- Everpop talks to YouTube exclusively through YouTube's official APIs — upload detection, publishing, and analytics. We clip from the video file you provide (a one-click add, or a Drive folder you share) — we never download your content from YouTube.
- You can revoke Everpop's access at any time from your Google account permissions — publishing stops immediately.
- OAuth tokens are encrypted at rest (AES-256-GCM); we never see or store your Google password.
Report something suspicious
Forward any suspicious email claiming to be Everpop to support@everpop.app. A human reads it — fast. If you believe your Everpop account is affected, change your password at everpop.app and contact us the same way.
Responsible disclosure
Found a security weakness in Everpop? Email support@everpop.app with the steps to reproduce it. We acknowledge reports, we do not take legal action against good-faith research that stays within your own accounts and data and does not disrupt the Service, and we will credit you if you wish once the issue is fixed. Please give us a reasonable time to fix a problem before you talk about it publicly. Our machine-readable contact file is at /.well-known/security.txt.
Your data
What we store and why lives in the Privacy Policy. Settings provides a structured, machine-readable export of your account, content, publishing, outcome, consent, and activity records. Large collections are capped and marked as truncated in the export; contact privacy@everpop.app for a complete access request. Account deletion removes your content and revokes connected-platform access; the short list of what survives (legally required financial records, payment-dispute evidence for 120 days, legal-hold records, a technical deletion manifest, non-reversible identity fences, and deletion-request records) is set out on our Data deletion page.