Last updated: 2026-08-06
This Privacy Policy explains what data Everix (the “Service”, “we”, “us”) collects, how and why we use it, who we share it with, and the choices and rights you have — including how Meta data is handled and how to request deletion. It applies to businesses and the individuals who use the Service on their behalf.
Account data: your email address, which you use for passwordless (magic-link) sign-in. Brand data: the brand details, product information, target audience, target markets, and settings you enter. Creative assets: the image and video files you upload. Meta data: when you connect Meta, the ad accounts, Pages, datasets (formerly pixels), and apps you grant access to, the access token needed to act on your behalf, and the campaign performance insights we pull for your campaigns. Billing data: your subscription plan and status; payment card details are handled by Stripe and are not stored by us. Usage data: basic logs and technical information needed to operate, secure, and troubleshoot the Service.
Cookies: the Service uses only three strictly necessary cookies — a session cookie to keep you signed in, a CSRF-protection cookie to secure form submissions, and a language-preference cookie to remember your interface language. We do not use advertising, tracking, or third-party analytics cookies, and we do not use cookies to profile you across other websites.
We use your data solely to provide the Service to you: to sign you in, draft ad copy, launch and continuously optimize your campaigns, show you results and recommendations, process your subscription, send service and operational notifications (such as sign-in links, approval requests, and billing alerts), provide support, and keep the Service secure and reliable. We do not sell your personal information, and we do not use your data to build advertising profiles.
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases. Performance of a contract: to provide the Service you have signed up for, including running and optimizing your campaigns and processing your subscription. Legitimate interests: to secure the Service, prevent abuse, troubleshoot, and improve reliability, balanced against your rights. Consent: where you provide it, for example when you connect your Meta account and authorize the scopes we request; you may withdraw consent by disconnecting. Legal obligation: to keep records we are required by law to retain.
We do not sell your data. To run the Service we share data with the following processors, each receiving only what its function requires: Meta (to publish and manage your ads and pull performance data); Stripe (subscription billing and payment processing); Anthropic (AI language-model provider used to draft ad copy); OpenRouter (an alternate AI-model routing provider we may use to draft ad copy when the primary provider is not configured); Resend (email delivery for sign-in links and operational notifications); an error-monitoring provider, Sentry (used only when error monitoring is enabled, to capture technical error reports); and our hosting and database providers (to run the application and store your data). These processors act on our instructions under their own security and privacy commitments.
Data obtained through your Meta connection (ad accounts, Pages, datasets, apps, and performance insights) is used only to operate your own advertising campaigns within the Service. We store the access token and identifiers needed to act on your behalf, and the campaign performance data we pull from Meta. We do not use your Meta data for any purpose other than operating your campaigns, and we do not share it except with the processors listed above as needed to run the Service.
You can disconnect your Meta account at any time from the Account page. Disconnecting removes the stored access token and the connected ad-account, Page, dataset, and app identifiers, and resets the connection to “not connected”. We retain a single identifier — the ID of the Meta user who authorized the connection — solely so we can match and honor a later Meta data-deletion request for your account; it is not used to run ads or for any other purpose. You may request full deletion of your Meta-derived data at any time by contacting us at ops@in.everix.ai, or through Meta's data-deletion flow. When Meta sends us a deletion request for your account, we anonymize the Meta-derived data associated with it — including that retained user ID — and provide a confirmation code you can verify at /data-deletion.
We and our processors may store and process your data in countries other than the one where you are located, including where our hosting, database, and other providers operate. Where data is transferred out of the EU/UK or other regions with transfer restrictions, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses or an equivalent recognized mechanism, so that your data continues to receive a comparable level of protection.
We keep your data for as long as your account is active and as needed to provide the Service. Billing and transaction records are retained for the period required to meet our legal, tax, and accounting obligations. When data is no longer needed, we delete or anonymize it. If you close your account or disconnect Meta, we promptly remove the stored Meta access token and the connected asset identifiers, retaining only the authorizing Meta user ID needed to honor a future data-deletion request, and handle the remainder in line with the retention periods described here.
Depending on where you live, you may have the right to access the personal data we hold about you, to correct inaccurate data, to request deletion, to receive a portable copy of data you provided, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at ops@in.everix.ai; we will respond within the timeframe required by applicable law and may need to verify your identity first. You also have the right to lodge a complaint with your local data-protection authority.
If you are a California resident, you have rights under the California Consumer Privacy Act (as amended), including the right to know what personal information we collect and how we use it, the right to request access and deletion, and the right not to be discriminated against for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise your rights, contact us at ops@in.everix.ai.
We use reasonable technical and organizational measures to protect your data, including access controls and encryption in transit, and we store payment card details with Stripe rather than on our own systems. No system is perfectly secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law, without undue delay.
The Service is a business-to-business product intended for use by businesses and by individuals who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. For material changes, we will notify you by email and post the updated policy on this page with a new effective date. Your continued use of the Service after a change takes effect means you accept the updated policy.
This Privacy Policy and our Terms of Service may be made available in more than one language for your convenience. The English-language version is the authoritative and governing text. In the event of any conflict, ambiguity, or inconsistency between the English version and any translation, the English version controls.
The data controller for the Service is Hangzhou Zhanlan Star Technology Co., Ltd. (杭州湛蓝星空科技有限公司). Subscription billing is handled by Bit Computing Pte. Ltd. (Singapore) through Stripe, and charges appear as “OPENCORD.AI” on the payment page and your card statement; your payment card details are processed by Stripe and are never shared with either entity. Questions or requests about your data: ops@in.everix.ai