Privacy Policy

Everhelm Studios ("Everhelm," "we," "us," or "our") provides website design, hosting, automation, and business management services through our website and client portal (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

We collect the following categories of information:

• Account information — your name, email address, business name, and login credentials when you create a portal account.
• Billing information — payment details and transaction history, processed securely through our payment provider (Stripe). We do not store full card numbers.
• Service data — domains, hosting configuration, website content, and settings you manage through the portal.
• Usage data — pages visited, features used, device and browser type, and IP address, collected to operate and improve the Services.
• Communications — messages you send us through support, email, or the Forge chat assistant.

When you connect a third-party platform (such as Facebook, Instagram, Google, or others) through our Connections feature, you authorize Everhelm to access specific data from that platform on your behalf. We only request the permissions needed to provide the feature you enabled.

For Facebook and Meta platforms, when you connect a Page we may access:

• The list of Facebook Pages you manage, to let you choose which Page to connect.
• Page details such as name, category, follower count, and profile picture.
• Page content and engagement data (posts, reactions, comments, and insights) to display activity in your portal.
• With your additional consent and where approved, the ability to publish or schedule posts to your Page.

Access tokens for connected platforms are stored securely on our servers and are never exposed to your browser or shared with other clients. You can disconnect any platform at any time from the Connections page, which revokes our stored access and removes the associated tokens. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies.

We use the information we collect to:

• Provide, operate, and maintain the Services.
• Process payments and manage your subscription.
• Display your business data, analytics, and connected platform activity in the portal.
• Respond to support requests and communicate with you about your account.
• Detect, prevent, and address technical issues, fraud, and abuse.
• Improve and develop new features.

We do not sell your personal information, and we do not use data from connected platforms for advertising.

We share information only as necessary to operate the Services:

• Service providers — infrastructure, payment processing, email delivery, and analytics partners who process data on our behalf under confidentiality obligations.
• Connected platforms — when you authorize a connection, data flows between Everhelm and that platform as needed for the feature.
• Legal compliance — when required by law, regulation, legal process, or to protect rights, safety, and property.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

Your data is stored on secure, access-controlled infrastructure (Google Firebase and managed hosting servers). We use encryption in transit (TLS/SSL), restricted access controls, and secure server-side storage for sensitive credentials. While no system is perfectly secure, we take reasonable measures to protect your information. Learn more in our Security & Trust Center.

We retain your information for as long as your account is active or as needed to provide the Services. When you disconnect a platform, we delete the associated access tokens promptly. When you close your account, we delete or anonymize your personal data within a reasonable period, except where retention is required for legal, accounting, or fraud-prevention purposes.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Disconnect any connected platform at any time.
• Opt out of non-essential communications.

To exercise any of these rights, contact us at privacy@everhelmstudios.com.

You can request deletion of your data, including data obtained from connected platforms like Facebook, at any time. See our Data Deletion Request page for step-by-step instructions.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used. For details and your choices, see our Cookie Policy.

The Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the portal or by email. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Everhelm Studios
Email: privacy@everhelmstudios.com
General: hello@everhelmstudios.com