Privacy Policy

Effective Date: January 15, 2025 — Last Updated: March 8, 2026

Toeverything Inc. ("Toeverything," "we," "us," or "our") operates the Everything Stack platform and the everythingstack.com website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Register for an account or request a demo
• Fill out forms on our website (e.g., name, email address, company name, job title)
• Communicate with us via email, support tickets, or other channels
• Subscribe to our newsletter or marketing communications
• Participate in surveys, promotions, or events

This information may include your name, email address, phone number, company name, job title, team size, and any other information you choose to provide.

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or source
• Device type and screen resolution

1.3 Platform Usage Data

If you use the Everything Stack platform, we may collect usage data such as feature usage patterns, agent interaction logs, and workspace activity metrics. In self-hosted deployments, this data remains on your infrastructure unless you explicitly configure it otherwise.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service
• To process demo requests and respond to inquiries
• To send administrative information, such as updates, security alerts, and support messages
• To send marketing and promotional communications (with your consent, where required)
• To analyze usage trends and improve our website and platform
• To detect, prevent, and address technical issues, fraud, or security incidents
• To comply with legal obligations and enforce our terms

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our website. These include:

• Essential Cookies — Required for the website to function properly (e.g., session management, security tokens)
• Analytics Cookies — Help us understand how visitors interact with our website (e.g., Google Analytics or similar services)
• Preference Cookies — Remember your settings and preferences for a better experience

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

4. Third-Party Services

We may use third-party services to support our operations. These services may have access to your information only to perform specific tasks on our behalf and are obligated to protect your data. Third-party categories include:

• Analytics Providers — To measure and analyze website traffic and usage patterns
• Email Service Providers — To send transactional and marketing communications
• Cloud Infrastructure Providers — To host and deliver the Service
• Customer Support Tools — To manage and respond to support inquiries
• Payment Processors — To process subscription payments securely

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data — Retained for the duration of your account and up to 90 days after deletion
• Communication Records — Retained for up to 3 years for support and compliance purposes
• Analytics Data — Retained in aggregate, anonymized form indefinitely; personally identifiable analytics data is retained for up to 26 months
• Marketing Data — Retained until you unsubscribe or request deletion

For self-hosted deployments, data retention is governed by your organization's own policies and infrastructure configuration.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security assessments and penetration testing
• Role-based access controls and least-privilege principles
• Audit logging for administrative and data access actions
• SOC 2-ready security controls

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Deletion — Request deletion of your personal information, subject to certain exceptions
• Portability — Request a portable copy of your data in a structured, machine-readable format
• Opt-Out — Opt out of marketing communications at any time
• Restriction — Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at hello@everythingstack.com. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA.

9. International Data Transfers

If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. We take appropriate steps to ensure that your information receives adequate protection in accordance with this Privacy Policy.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Company: Toeverything Inc.
• Email: hello@everythingstack.com
• Website: everythingstack.com