Privacy Policy

Effective date: 15 September 2026

1. Information We Collect

EverDrive collects the following information to provide our services:

  • Account Information: Email address, display name, and authentication credentials
  • Authentication Data: Session tokens, OAuth tokens, and identity provider links (Google, Microsoft, GitHub)
  • Archived Content: Email messages, attachments, and metadata from connected mailboxes and other data sources
  • Usage Data: Search queries, export requests, and interaction logs for service improvement and security
  • Technical Data: IP addresses, browser type, device information, and access timestamps

2. How We Use Your Information

Your data is used solely to:

  • Provide the archive, search, export, and storage features of the application
  • Authenticate your account and secure your sessions
  • Process and index your archived content for search and retrieval
  • Generate export packages when you request data exports
  • Enforce retention policies and legal holds as configured by your organization
  • Monitor for security threats and prevent unauthorized access
  • Improve service performance and reliability

3. Third-Party Sign-In

When you sign in with Microsoft, Google, or GitHub:

  • We receive your email address, display name, and unique profile identifier from the identity provider
  • We store only the minimum information required to link your identity provider account to your EverDrive account
  • We do not receive or store your identity provider password
  • OAuth tokens are stored securely and used only to authenticate your access to connected services

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • All archived content is encrypted at rest using AES-256 encryption
  • Data in transit is protected using TLS 1.3 encryption
  • Access to your data requires authentication and authorization
  • Regular security audits and penetration testing are conducted
  • Data is stored in geographically distributed, redundant storage systems

5. Data Retention and Deletion

Your data retention is governed by:

  • Retention policies configured by you or your organization administrator
  • Legal holds that may extend retention beyond normal policy
  • Our Data Retention and Deletion Policy which details deletion procedures
  • You may request account deletion through your account settings page
  • Upon account deletion, archived content is permanently removed according to our deletion policy
  • Data stored with external providers (Google, Microsoft, GitHub) is not deleted by account closure

6. Your Rights

You have the right to:

  • Access your personal data through the application interface
  • Export your archived content at any time
  • Update your account information and display name
  • View and manage your active sessions
  • Request deletion of your account and associated data
  • Revoke access to connected data sources
  • Request a copy of your personal data (data portability)

7. Data Sharing

We do not sell, rent, or share your data with third parties for marketing purposes. We may share data only when:

  • Required by law or court order
  • Necessary to protect our rights, property, or safety
  • With your explicit consent
  • With subprocessors who provide infrastructure services under data processing agreements

8. International Data Transfers

Your data may be stored and processed in data centers located outside your country of residence. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through the application. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this privacy policy or your personal data, please contact:

  • Email: support@intercomdata.com
  • Address: [Company Address]
  • Data Protection Officer: dpo@intercomdata.com