Everpop · Privacy & Data

Everpop privacy & data

Read from Everpop's own page on 2026-11-09. 26 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: controller
As the controller is established in Bulgaria, our lead supervisory authority is the Bulgarian Commission for Personal Data Protection (cpdp.bg).
Read from Everpop's own page on 2026-11-09

Data categories

category: identifying
Account information: name, email address, and password (stored hashed) when you register.
Read from Everpop's own page on 2026-11-09
category: contact
email address of a person a workspace owner invites (Section 4)
Read from Everpop's own page on 2026-11-09
category: financial
Billing information: processed by our payment provider (Stripe). We do not store full card numbers.
Read from Everpop's own page on 2026-11-09
category: location
Usage data: log data, device/browser information, IP address, and — only if you enable it — product analytics about how you interact with the Service.
Read from Everpop's own page on 2026-11-09
category: communication
Communications and reports: messages you send to support
Read from Everpop's own page on 2026-11-09
category: behavioral
Clip performance data: aggregate per-clip and per-channel metrics retrieved from platform analytics APIs you authorize (see Section 5). Never viewer-level data.
Read from Everpop's own page on 2026-11-09

Purposes

purpose: Providing the Service
To provide, operate, maintain, and improve the Service
Read from Everpop's own page on 2026-11-09
purpose: Payments and subscriptions
To process payments, manage subscriptions, and prevent fraud
Read from Everpop's own page on 2026-11-09
purpose: Security and monitoring
To monitor, secure, alert our team about, and troubleshoot the Service
Read from Everpop's own page on 2026-11-09
purpose: Legal compliance
To comply with legal obligations and enforce our Terms.
Read from Everpop's own page on 2026-11-09

Retention

scope: Account & profile dataperiod: no later than 30 days
deleted promptly when you delete your account — normally immediately and no later than 30 days
Read from Everpop's own page on 2026-11-09
scope: Verify saved checksperiod: 21 days
We keep your latest 20 saved checks for 21 days
Read from Everpop's own page on 2026-11-09
scope: Cached public video informationperiod: up to 3 hours
cached public video information — up to 3 hours
Read from Everpop's own page on 2026-11-09
scope: Audit and security logsperiod: up to 12 months
Audit & security logs, server logs, and IP addresses in them: kept for fraud-prevention and security no longer than necessary for those purposes (up to 12 months)
Read from Everpop's own page on 2026-11-09

Residency

region: Bulgaria/EU
Everpop-operated render machines (Bulgaria, EU)
Read from Everpop's own page on 2026-11-09

International transfers

mechanism: SCC
For recipients outside the EEA and the UK we rely on the European Commission's Standard Contractual Clauses (Decision 2021/914)
Read from Everpop's own page on 2026-11-09
mechanism: DPF
or on the EU-US Data Privacy Framework (and its UK Extension) where the recipient is certified under it
Read from Everpop's own page on 2026-11-09

Subprocessors

url: https://everpop.app/privacy
8. Subprocessors We use the following service providers and subprocessors to operate Everpop.
Read from Everpop's own page on 2026-11-09

Data processing agreement

available: true
business customers can request the current details and DPA.
Read from Everpop's own page on 2026-11-09

Deletion

route: Data deletion page, or request via privacy@everpop.app
You may request deletion of your account and associated personal data at any time — see our Data deletion page.
Read from Everpop's own page on 2026-11-09

Data subject rights

right: access, correct, delete, port, restrict
you may have the right to access, correct, delete, port, or restrict processing of your personal data
Read from Everpop's own page on 2026-11-09
right: object
You may object at any time to processing based on our legitimate interests, and to direct marketing
Read from Everpop's own page on 2026-11-09
right: withdraw consent
you may withdraw any consent you have given at any time without affecting the lawfulness of processing before the withdrawal
Read from Everpop's own page on 2026-11-09
right: complain to supervisory authority
You have the right to lodge a complaint with your local supervisory authority
Read from Everpop's own page on 2026-11-09

Sale or sharing

stance: prohibited
We do not sell or share personal information as defined by the CCPA/CPRA.
Read from Everpop's own page on 2026-11-09

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page