Website research and launch notifications
EverySchema is currently validating demand for a service that is not yet available. The setup questionnaire collects role, desired use case, selected tools, and current workflow. Your email stays in the browser until you choose to receive a launch notification. If you decline, only your selections are saved, without your email. If you opt in, we save your email, answers, and consent timestamp to notify you when the service becomes available. We use Resend to deliver confirmation and launch emails, which requires sharing your email address with that provider. You may withdraw consent and remove your email using the unsubscribe link in your confirmation email. We review these records after six months and delete information no longer needed. The platform descriptions below concern the intended service; no source account is connected through this questionnaire.
01Scope and contact
This Privacy Policy explains how EverySchema processes personal data when you visit our website, contact us, or use our data connection platform.
For account administration, website operation, and our own business communications, EverySchema determines the purposes and means of processing. When we process data from connected tools on a customer’s instructions, the customer determines those purposes and EverySchema acts as a processor. The applicable data processing agreement governs that processing.
02Information we process
Account and workspace information includes your name, work email, workspace membership, permissions, and authentication information. Communications include the information you provide when contacting us or requesting documents.
Connected data includes the records, fields, metadata, and connection credentials needed to provide the integrations you authorize. Depending on the sources and datasets you select, these records may contain personal data about your customers or other individuals.
Technical information includes IP addresses, browser and device information, timestamps, access events, queries, and error information needed to operate and protect the service.
03Purposes and legal bases
We use account and contact information to provide the service, manage your workspace, and respond to requests. Where applicable, this processing is necessary to perform our contract with you or take steps you request before entering a contract.
We process technical and security information for our legitimate interests in maintaining a reliable service, preventing misuse, investigating problems, and protecting accounts. We balance these interests against the rights of affected individuals.
We process information where necessary to meet legal obligations. Where processing relies on your consent, you may withdraw that consent at any time without affecting processing that took place before withdrawal. Customer dataset processing follows the customer’s documented instructions and applicable data processing agreement.
04Connected tools and AI assistants
You choose which sources to connect and which datasets an assistant may access. EverySchema retrieves and prepares data to provide the functions you request. Read-only AI access does not authorize an assistant to change records in your connected tools.
When you connect ChatGPT, Claude, or another supported destination, information returned to that service is subject to its own terms, privacy policy, and account settings. Review those settings before sharing personal or confidential information. Disconnecting a service does not erase information already sent to it.
05Who receives information
Information is accessible to authorized workspace users according to their permissions. Service providers that support hosting, storage, authentication, and related operations may process information to deliver their services. Access is limited to the purposes for which it is needed.
We disclose information when required by law or when necessary to establish, exercise, or defend legal claims. If a business restructuring involves personal information, applicable confidentiality and data protection requirements continue to apply. Request information about the sub-processors relevant to your service through our Trust Center.
06Hosting and international transfers
Customer data, backups, and logs are associated with a defined hosting region. This does not mean that every third-party destination you connect processes data in that same region.
Where personal data is transferred across borders, applicable transfer requirements apply. Depending on the recipient and destination, safeguards may include an adequacy decision or contractual safeguards such as standard contractual clauses. Contact us for information about safeguards applicable to your processing.
07Retention and deletion
We retain personal data for as long as needed for the purposes described here, taking account of the account relationship, customer instructions, security needs, legal obligations, and the establishment or defense of legal claims.
Customer dataset retention and deletion are governed by the applicable agreement and instructions. Backup copies follow their retention cycle rather than disappearing immediately when active records are deleted. Contact us for the retention arrangements relevant to your workspace.
08Security
Workspace permissions, scoped assistant access, encrypted connection credentials, and query audit records support the protection of customer data. More information is available in the Trust Center. No method of transmission or storage guarantees absolute security.
09Cookies and external resources
The website loads fonts from Google Fonts. Your browser contacts Google to retrieve those resources, which discloses technical information such as your IP address and browser request information.
Authentication and essential browser storage support account sessions and security where those features are used. Any optional tracking that requires consent must remain disabled until consent is provided. You can manage browser storage through your browser settings; restricting essential storage may affect account features.
10Your privacy rights
Depending on applicable law, you may request access, correction, erasure, restriction, or portability of your personal data. You may also object to processing based on legitimate interests and withdraw consent where processing relies on consent. Contact the service operator to exercise your rights. We may request proportionate information to verify your identity.
If your information is part of a customer-controlled dataset, contact that customer first. We assist the customer with requests according to our obligations. You may also complain to the data protection authority responsible for your location. Where the GDPR applies, we respond within one month, subject to permitted extensions and exceptions.
11Changes to this policy
We update this policy when our processing practices or legal requirements change. The date below identifies the current version. We provide additional notice of material changes where required.