Privacy policy

• We collect what we need to run EveryPage, and no more.
• We use no advertising or tracking cookies, and we do not sell personal data.
• Visitors' questions are kept 90 days, without their IP address.
• Everything is hosted on Microsoft Azure in the United States (Central US).

EveryPage (everypage.dev, askthissite.com and app.everypage.dev) is run by retriv, Inc. (“EveryPage”, “we”, “us”). We are the controller of the personal data described here, except where we process data for our customers (see “Visitors to our customers' sites” and our DPA).

• Account: your email address and password (stored as a one-way hash). If you sign in with GitHub, your GitHub account's name and email.
• Sign-in security: the IP address you sign in from, so we can ask you to confirm a sign-in from somewhere new.
• Sites: the addresses of the sites you add, and the public pages we crawl from them.
• Billing: your plan and billing history. Stripe handles card details; we never see your full card number.
• Console assistant: if you use the assistant in the Console, what you type is sent to Anthropic to answer you.

When someone uses the Ask box on a customer's site, we process it for that customer. The customer is the controller; we are their processor.

• What we keep: the question, the answer, the pages cited, when it was asked, and any thumbs up or down.
• What we do not keep: the visitor's IP address, name or any account. Questions are not linked to a person.
• How long: 90 days, then deleted.
• Who sees it: the site's owner, in the EveryPage Console.
• Short-term use of IP addresses: we use a visitor's IP address briefly, in memory, to stop abuse (rate limits). It is not stored with the question.
• Visitors may type personal details into a question. We ask customers not to invite this; we treat it like any other question and delete it after 90 days.

• Anyone can try EveryPage on a site without an account.
• We keep the site address entered and the demo built from it for 24 hours, then delete them.
• Questions asked in a demo are kept like any other question (90 days, no IP address).

• No tracking or advertising cookies. The Ask box on customers' sites sets no cookies.
• Sign-in cookies: the Console uses cookies only to keep you signed in and to protect forms. They are strictly necessary.
• Page analytics: our own sites count page views with Footfall, a cookieless analytics service run by SearchStack. It stores no cookies and does not identify you.
• Error reports: if a page breaks in your browser, the error is sent to SearchStack's error-reporting service so we can fix it.
• Theme: your light or dark mode choice is saved in your browser only.

• To provide EveryPage under our contract with you.
• Legitimate interests: keeping the service secure, stopping abuse, fixing errors, and understanding which pages are visited.
• Legal obligations: tax and accounting records.

We use these providers to run EveryPage. Each processes data only on our instructions.

• Microsoft Azure: hosting, databases and storage (Central US region), and email through Azure Communication Services.
• SearchStack: the search engine that stores crawled pages and visitors' questions, and serves search and answers.
• Anthropic: its Claude (Haiku) models write answers and power the Console assistant.
• Stripe: payments and invoices.
• GitHub: only if you choose to sign in with GitHub.

We do not sell personal data, or share it for advertising. We may disclose data if the law requires it.

Data is stored in the United States.

• Visitors' questions and feedback: 90 days.
• Demo sites: 24 hours.
• Free accounts unused for 40 days: deleted (we warn you by email after 30 days).
• Paid accounts: while the account is active, then about 30 days after the plan ends.
• Billing records: as long as tax law requires.

• You can ask to see, correct, export or delete your personal data, or object to how we use it.
• You can delete sites and your account in the Console at any time.
• If you visited a customer's site, contact that site's owner first: they control that data. We will help them answer you.
• You can complain to your local data protection authority.
• Write to support@everypage.dev.

• Data is encrypted in transit (HTTPS) and at rest on Azure. Access is limited to the people who run EveryPage.
• EveryPage is not meant for children under 16, and we do not knowingly collect their data.

We will post changes here and update the date at the top. For important changes we will email customers.