privacy.

This Privacy Policy describes how Femi Studio LC ("EverLoud," "we," "us," or "our") collects, uses, and shares personal information when you visit https://everloud.app (the "Site") or use the EverLoud service (the "Service").

If you do not agree with this policy, please do not use the Site or the Service.

1. Who we are and the two roles we play

Femi Studio LC is a Maryland limited liability company.

We process personal information in two distinct roles:

• As a controller, for information about our own account holders, Site visitors, and prospective customers. This policy governs that processing.
• As a processor (service provider), for information contained in communications between our business customers and their customers (for example, messages, and contact details handled through the Service). We process that information on our customers’ behalf and under their instructions. If you have communicated with a business that uses EverLoud, that business is the controller of your information. Please direct privacy requests to them. We will assist our customers in responding to such requests.

2. Information we collect

Information you provide to us:

• Account information: name, business name, and email address. We do not use passwords: you sign in with a single-use link sent to your email address.
• Purchases: when you buy a plan, you pay Paddle.com, our reseller and Merchant of Record, on a checkout it runs. Paddle.com collects your name, email address, payment details, billing country and address, and your network (IP) address, to take the payment, work out tax, and prevent fraud. We never receive your full card number.
• Communications with us: support requests, emails, and feedback.

Information processed through the Service (on behalf of our customers):

• Conversation content across connected channels (Instagram, Facebook, Threads, X, LinkedIn, TikTok, YouTube, Pinterest, Google Business, Reddit, Bluesky, Telegram, Discord, and WhatsApp), including message text.
• Contact details of the people communicating with our customers (such as names, phone numbers, and email addresses).
• Metadata about conversations (timestamps, channel, delivery status).

Information from Facebook and Instagram. When you connect a Facebook Page, and the Instagram professional account linked to it, you choose on Facebook’s own screen which Pages and accounts EverLoud may use. For each one you choose, EverLoud receives and stores:

• the Page’s name and ID, and the Instagram account’s username and ID;
• a Page access token, which lets EverLoud publish the posts you approve, read and reply to comments, and send the messages you set up. EverLoud stores this token encrypted. The token for your personal Facebook account is used once during connection to find the Pages you chose, and is never stored;
• the list of permissions you granted, and the ID Facebook assigns to you for EverLoud, so that we can act on a removal or deletion request you make through Facebook;
• follower counts for each connected account, collected once a day;
• performance numbers for posts published through EverLoud, such as likes, comments, shares, saves, clicks, and views;
• comments left on posts published through EverLoud, including the commenter’s name, their ID on that platform, the comment text, and when it was posted.

EverLoud does not receive your Facebook or Instagram password.

Your plan and payments. When you buy a plan, we keep:

• your plan, its status and dates, the amount of the next charge, and the customer, subscription, and transaction numbers Paddle.com gives us, so we can match a payment to your account;
• a record of each notice Paddle.com sends us about a purchase, renewal, change, cancellation, refund, or chargeback, with its time and the result;
• one-way codes (hashes) made from a few facts about how you paid: the card type, its last four digits, its expiry date, and the cardholder name; the billing country and postal code; and the business ID, if you bought as a business. We keep only these codes, not the facts they were made from, and we use them only to spot self-referrals in our affiliate program.

We do not keep your name, address, or full payment details from a purchase.

Information collected automatically:

• Usage data: pages visited, features used, and interactions with the Site and Service.
• Device and log data: IP address, browser type, operating system, and error logs.
• Analytics: we use privacy-respecting analytics configured to operate without advertising cookies. We do not use third-party advertising trackers on the Site.
• The payment page: when you open the Billing section of your settings in EverLoud to pay, it loads the checkout of Paddle.com, which may set its own cookies and collect information about your device to complete the payment and prevent fraud. These are strictly necessary for the purchase. Only your settings page loads that checkout.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Site and the Service;
• Process conversations through our AI systems in order to generate responses, summaries, and routing on our customers’ behalf;
• Publish the posts you approve to your connected Facebook Pages and Instagram accounts, show you their performance, and help you answer comments and send the messages you set up, including drafting replies with our AI systems for you to review;
• Host the bio pages our customers publish, count their visits and clicks without cookies, and pass sign-ups and form answers to the tools our customers connect;
• Record the orders placed in our customers’ bio page shops, and send buyers the emails about their orders;
• Run our affiliate program: count referrals, work out commissions, spot self-referrals, and pay affiliates;
• Set up and manage accounts and plans, and send transactional messages;
• Provide customer support;
• Monitor for security, prevent fraud and abuse, and enforce our terms;
• Comply with legal obligations.

AI processing. The Service uses artificial intelligence models operated by our AI service providers to process conversation content. Under our agreements with these providers, conversation data submitted through their APIs is used to provide the Service and is not used by them to train their generally available models. We do not sell conversation data.

4. How we share information

We share personal information only with:

• Subprocessors and service providers that help us deliver the Service (hosting, databases, custom domain provisioning, AI model providers, payments, email delivery, analytics, error monitoring, and security). We will name them on request: email hello@everloud.app. Each is bound by contractual obligations to protect the information and use it only to provide services to us.
• Paddle.com, our reseller and Merchant of Record. It sells you the plan, so for your purchase it is an independent controller under its own privacy policy at https://www.paddle.com/legal/privacy, not a service provider acting for us. To open your checkout we give it your account’s email address and an internal reference for your account, and it tells us whether a payment, renewal, change, cancellation, refund, or chargeback happened.
• Our business customers, conversation data belongs to the customer whose channels it flows through, and is visible to them in their inbox.
• The owners of bio pages, and the tools they connect. Sign-ups, form answers, and stats from a bio page are visible to the customer who owns it and the people they let manage it. When an owner connects an email tool or a webhook, we send that page’s sign-ups and form answers to it, and ad pixels an owner adds collect information directly, as described under "Bio pages and their visitors".
• Stripe, for shop sales. Purchases from a bio page shop are paid on the seller’s own Stripe account, under Stripe’s terms and privacy policy, as described under "Buying from a bio page shop".
• Legal and safety recipients, where required by law, subpoena, or to protect rights, safety, or the integrity of the Service.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Facebook and Instagram data. We use information received from Facebook and Instagram only to provide the features you turned on for your own accounts. We do not sell it, use it for advertising, or share it with data brokers.

5. Bio pages and their visitors

EverLoud hosts the public bio pages ("link in bio" pages) our customers build, at everloud.link and on customers’ own domains. For information about the people who visit a bio page, the customer who owns the page is the controller, and we are its processor. If you visited a bio page, joined its email list, or sent a form on it, please send privacy requests to the page’s owner, and we will help them respond. This section describes what we handle for them.

• Visit and click stats, without cookies. We count views, link clicks, and QR code scans, the kind of site a visit came from (such as Instagram or a search engine), a campaign tag in the page address if there is one, and the visitor’s country as our hosting provider reports it. To count unique visitors, we combine the visitor’s network (IP) address and browser details with a random value that changes every day, and keep only a short one-way code. The day’s random value is deleted when the day ends, so the code can never be linked back to a person, and the codes are deleted after two days. We do not store the IP address or browser details, and the stats set no cookies.
• Email sign-ups. When a visitor joins a page’s email list, we store their email address, when they joined, and the consent words they agreed to. If the page’s owner connects an email tool (Mailchimp, Kit, or Klaviyo), we send the address to it. By default we ask the tool to treat the sign-up as unconfirmed, so it sends its own confirmation email where the list is set up for one (double opt-in). An owner can switch that off only by confirming that they collect consent in another way.
• Form answers. When a visitor sends a form on a page, we store their answers, any consent words the form shows, and when it was sent, and nothing else about the visitor. Only the page’s owners and managers can see the answers. The email we send them about new answers names the form and does not include the answers.
• Webhooks. If the page’s owner sets up a webhook, we send each new sign-up and form answer to the web address they choose.
• Ad pixels. A page’s owner may add their own Meta Pixel, TikTok Pixel, or Google Analytics 4 tags. These load only on everloud.link and on the owner’s own domain, and only after the visitor chooses Accept on the page’s cookie banner. Declining is as easy as accepting, and the choice is kept in the visitor’s own browser. Once a pixel loads, its company collects information under its own terms and the owner’s privacy policy, which the banner links to. An owner cannot turn pixels on without linking a privacy policy.
• Locks. A page or a link may ask the visitor to confirm their age, accept a content warning, or enter a code. We store a code only as a one-way code. Unlocking a page sets one cookie in that browser for 12 hours, and it holds no personal information.
• Files. A page may offer a file to download, sometimes only to visitors who join its email list. Download links are signed and expire.

To limit abuse, we use a visitor’s network address for a short time to cap how often one place can sign up, send a form, or try a code. It is not stored with a sign-up, a form answer, or the stats.

For the owner of a page. When you paste a link into your page, we fetch that web page to fill in its title, description, and preview image. When you import a page from another link in bio service, we fetch that public page to copy its links. Each Monday we email a page’s owners a short summary of the week before: views, top links and sources, and how many new sign-ups and form answers arrived. Every one of these emails has a one-click unsubscribe link, and you can also switch it off in your page’s stats.

6. Buying from a bio page shop

A customer may sell products from their bio page. The customer is the seller and the controller of their buyers’ information, and we act as their processor. Payment is taken by Stripe on the seller’s own Stripe account, on a payment page Stripe runs, under Stripe’s terms and privacy policy. We never receive card details.

When a purchase is completed, Stripe tells us, and we store it for the seller: the buyer’s email address and name and, where the checkout asks for them, phone number and shipping address, together with what was bought, the amounts paid, shipping, and whether the order was refunded or disputed. The seller sees these in their workspace and in its data export. We send the buyer the emails about the order, such as a download link for a digital product or a shipping notice, in the seller’s name. Buyer information is kept with the order while the seller’s workspace exists. To ask about your information as a buyer, contact the seller.

7. The affiliate program

If you are an affiliate, we keep your referral code, how many times your referral link was opened (a count only: we keep nothing about the people who open it), how many accounts signed up through it, the commissions they earned you and their status, and the payouts we made. To pay you, we keep the PayPal address you give us, which only your workspace’s owner can see.

If you signed up through a referral link, we record which affiliate referred you. The affiliate sees only how many accounts signed up and the commissions earned, never who you are or how you paid. To spot self-referrals, we compare one-way codes made from how you paid (described under "Your plan and payments") and from the device you signed up from with the same kinds of codes for the affiliate’s own account. The device code is made from your network (IP) address and browser details with a secret key, and we do not store the address itself.

8. EverLoud Studio

EverLoud Studio is our video and photo editor. It comes as an app for Mac and as a web app at https://studio.everloud.app. It has no account.

• Your videos and photos stay on your device. The Mac app keeps your projects, videos, photos, sound, voiceovers, captions, and finished videos in a folder on your Mac. The web app keeps them in your browser’s own storage on your device. We do not receive, upload, or store any of them.
• Editing, captions, and voice cleaning happen on your device. Previews, finished videos, photo edits, automatic captions, and voice cleaning are made by your own computer. Your videos, photos, and sound are never sent to us or to anyone else for this.
• What the web app loads. Cloudflare delivers the web app, and like any website host it receives technical information such as your network (IP) address and browser details to do so. The first time you use automatic captions or voice cleaning in the web app, your browser downloads those tools from jsDelivr and the caption model from Hugging Face. Those companies receive your network address and browser details under their own privacy policies. They do not receive your video or sound.
• AI tools you connect (Mac app). AI tools are off until you turn them on. If you turn them on, an AI app that you choose and run on your Mac, such as Claude Code or Codex, can work on your projects. It can read project details (clip times, caption text, file names, and looks), look at frames it asks to check, and add media files for you. Files outside your Movies, Pictures, Desktop, and Downloads folders are added only after you approve them. Your AI app may send this information to the company that provides it, under that company’s own terms and privacy policy. We do not receive it. You can turn AI tools off at any time.
• Microphone. If you record a voiceover, EverLoud Studio asks for permission to use your microphone. The recording stays on your device with your project.
• Removing your projects. In the Mac app, delete a project, or delete the app and its folder. In the web app, clear the site’s data in your browser settings. Because we never hold this data, we cannot recover it for you.

9. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Conversation data processed on behalf of our customers is retained according to the customer’s configuration and our agreement with them, and is deleted or returned upon verified request or account termination, subject to legal retention requirements and backup cycles.

Facebook and Instagram data. We keep the information listed under "Information from Facebook and Instagram" while the account stays connected. When you disconnect an account in Settings, then Channels, we delete its access token and stop collecting new data for it. If you remove EverLoud from the business integrations in your Facebook settings, Facebook tells us, and we delete the access tokens that connection created. If you send a data deletion request through Facebook, we also delete the comments, post performance numbers, and follower counts we collected through that connection, and give you a confirmation code and a page where you can check the status of your request at https://everloud.app/data-deletion. Posts you wrote in EverLoud stay in your workspace until you delete them.

Bio pages. Visit and click stats are kept as daily totals while the page exists. Form answers are kept until the page’s owner deletes them, and email sign-ups are kept until the owner asks us to remove them. Both are deleted when the page or the owner’s workspace is deleted. A visitor who wants their information removed should ask the page’s owner.

Plans and payments. We keep plan and payment records while your account is open, and after that only as long as we need them for tax, accounting, and legal purposes. Paddle.com keeps its own purchase records under its privacy policy.

10. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including encryption in transit, encrypted credential storage, access controls, and logging. An overview is available at https://everloud.app/help. No system is perfectly secure, and we cannot guarantee absolute security.

11. Your rights and choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Receive a portable copy of your information;
• Object to or restrict certain processing;
• Opt out of the sale or sharing of personal information (we do not sell or share as those terms are defined under applicable US state laws);
• Not be discriminated against for exercising these rights.

To exercise any of these rights, email hello@everloud.app. We will verify your request and respond within the timeframe required by applicable law. You may also authorize an agent to act on your behalf. If we deny your request, you may appeal by replying to our decision.

To delete information EverLoud received from Facebook or Instagram, follow the steps at https://everloud.app/data-deletion, or email hello@everloud.app.

If your information was processed because you communicated with a business that uses EverLoud, we will refer your request to that business and assist them in responding, as we act as their processor.

Residents of the EEA, UK, or Switzerland may also lodge a complaint with their local supervisory authority.

12. International transfers

We are based in the United States, and information is processed in the United States. Paddle.com processes the information it collects for a purchase in the United Kingdom, the United States, and other countries where it and its payment partners operate, under its own privacy policy and safeguards. Where we receive personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards recognized under applicable law, such as the EU Standard Contractual Clauses and, where applicable, participation by our subprocessors in the EU-U.S. Data Privacy Framework.

13. Children

The Site and the Service are intended for business use and are not directed to anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us at hello@everloud.app and we will delete it.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised "Last updated" date, and for material changes we will provide additional notice (such as email to account holders). Continued use of the Service after changes take effect constitutes acceptance.

15. Contact us

Femi Studio LC
Email: hello@everloud.app
Support: https://everloud.app/help
1190 Winterson Rd, Suite 200 PMB 1049, Linthicum Heights, MD 21090, United States