Privacy Policy

Who we are

ARIFLOGS SERVICES LLC, trading as Every Sent, runs Every Sent from the United States. Questions and requests go to hello@everysent.com.

We’re the controller for our customers’ account, billing and support data. For the people who comment on or message a customer’s Instagram account or Facebook Page, the customer is the controller and we process that data on their behalf, under our DPA.

What we collect

• Account: name, email, sign-in codes (stored hashed and valid for 5 minutes), sessions with IP address and browser, workspace roles, and which version of our Terms and this policy you agreed to.
• Connected Instagram accounts: account ID, username, profile picture, follower and post counts, and access tokens, which we encrypt.
• Connected Facebook Pages: Page ID, name, picture and follower count, the Page access token, which we encrypt, and the ID Facebook gives our app for the person who connected it.
• Customer contact data: for people who interact with a connected account or Page, their Instagram-scoped or Page-scoped ID and the username, name and profile picture Meta shares, plus, on Instagram, their follower count, whether they’re verified and whether you and they follow each other; their comments, messages, story replies, button taps and the media they send; where a chat came from, like an ad or a link; details they share, like an email or phone number; and the tags, fields and notes the customer adds.
• Billing: plan, invoices and Stripe references. Card details go to Stripe and never reach us.
• Support: messages, attachments and technical details you send through support chat or email. On our site, the support chat also records the pages you view, time on page, where your visit came from (including campaign tags), your browser and device, and your rough location (country, region, city) from your IP address.
• Operations: logs of errors and system events, which Cloudflare keeps for a few days.

Why we use it

To provide Every Sent under our contract with you, to keep it secure and prevent abuse, which is our legitimate interest, and to meet legal duties such as tax records. We don’t sell personal data, show ads or use customer contact data to train AI models.

Instagram, Facebook and Meta

You connect Instagram through Meta’s Instagram Login, and a Facebook Page through Facebook Login for Business. Meta is the platform you connect, not our subprocessor. It sends us comments and messages for your account or Page and delivers the messages Every Sent sends. Meta’s Privacy Policy covers what Meta does with that data. We use data from Meta only to run Every Sent for the account or Page that connected it, as Meta’s Platform Terms and the Messenger Platform policies require.

Who processes it

We use Cloudflare for hosting and storage and Stripe for payments. Our support chat runs on Opskeet, our own product, also on Cloudflare, including its AI replies. See the subprocessor list. They may process data outside your country; where the law requires, we use Standard Contractual Clauses or another lawful safeguard.

Our staff may also access personal data from outside your country, only as needed to run and support the service, under the same safeguards.

How long we keep it

• Account and workspace data: while your account is open.
• Contact data: until the customer deletes it, disconnects the account or Page with a deletion request, or closes their account.
• Messages and comments as Instagram and Facebook send them to us: 7 days, kept only to avoid handling one twice.
• While you pick which Facebook Page to connect: your Facebook sign-in, encrypted, for up to 10 minutes.
• Contact exports: 7 days.
• Support chat visits and page views: 25 months.
• Sign-in codes: 5 minutes. Sessions: 7 days after last use.
• Billing records: as long as tax and accounting law requires.

Deleting data

Customers can delete a contact, with their messages and history, from Contacts. To delete an account and its data, email us from the address you sign in with.

You can also remove Every Sent in Instagram’s settings under Apps and websites, or in Facebook’s settings under Business integrations. Removing it disconnects the account or Page. If you also ask Meta to delete your data, we delete everything Every Sent holds for the accounts and Pages you connected, including earlier connections and the contacts reached only through them, with their messages, runs and stats. Meta then shows you a confirmation code.

If you messaged a business that uses Every Sent, ask that business first; it controls your data. You can also write to us and we’ll pass the request on and help them.

Cookies

We use a sign-in cookie to keep you signed in, and a short-lived cookie (up to a day) to remember a template or plan you picked before signing up. Our support chat keeps a token in your browser’s storage so your conversation is there when you come back. We don’t use advertising cookies.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your data, or object to or restrict how we use it. You can also complain to your data protection authority. Email hello@everysent.com; we may need to confirm it’s you.

Children

Every Sent is for businesses and isn’t meant for anyone under 18.

Changes

When we change this policy we update the date above. For significant changes we’ll tell customers in the app or by email.

ARIFLOGS SERVICES LLC, 32 Hubbard Hill Road, Rindge, New Hampshire 03461, United States. hello@everysent.com