EverAfter is committed to protecting your privacy and ensuring that your personal data is handled securely and in accordance with applicable data protection laws. If you would like to exercise your rights as a data subject under the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) - all collectively shall be defined as “Data Protection Laws” - please fill out this Data Subject Rights Request Form and send it to our privacy team at: privacy@everafter.ai
Upon receipt of your completed request, we will process it and respond within the timelines required under applicable Data Protection Laws. If additional information is necessary, we will contact you using the contact information you provided in this form. Information provided in connection with this request will be processed only for the purpose of processing and responding to your request and will be deleted immediately thereafter. For more information, please review our Privacy Policy.
Please provide the following information:
We are committed to addressing your request promptly and in compliance with the relevant data protection laws. If you have any questions or concerns about this process or our privacy practices, please contact our privacy team at: privacy@everafter.ai.
Q: Where are EverAfter data centers located?
A: EverAfter hosts it’s systems in AWS US region, in multiple availability zones.
Q: Which Security and Privacy-related regulations, standards and certifications does EverAfter comply with?
A: EverAfter has a Service Organization Control 2 (SOC-2) Type II certificate and is compliant with The General Data Protection Regulation (EU) 2016/679 (GDPR).
Q: As it relates to the GDPR, is EverAfter considered a processor or a controller?
A. GDPR defines ‘Controller’ as the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Everafter lets you integrate to your organizational systems and fetch data from the systems — in order to create hubs to share with your clients. herefore, according to the GDPR definitions, EverAfter is considered as a processor.
Q: How long does EverAfter retain my data for? What happens to the data if I stop using the service?
A: EverAfter keeps customer data for and retains your data for as long as your workspace is active.As soon as you stop using EverAfter, your workspace along with all your data will be deleted from our databases.
Q: Who is EverAfter’s security personnel?
A: In EverAfter, we understand security is very important to our clients and their users. This is why we have our most reliable and educated people taking care of the security. For any question or concern regarding security, please feel free to contacts Tal Shemesh, our CTO at securty@everafter.ai
Last updated: March 3th, 2022