# Privacy

This page covers the everruns.com website, including the documentation at
everruns.com/docs, the Everruns newsletter, and Everruns Managed Demo. Everruns is a
free, non-commercial hobby project by Mykhailo Chalyi. Use of Everruns Managed Demo is
also governed by the [Terms of Service](/terms/).

Last updated: November 2, 2026.

## Newsletter

When you subscribe with the form in the site footer, we store:

- your email address,
- the page you subscribed from,
- when you subscribed, and when we sent you the welcome email,
- your subscription to "Everruns updates" (the monthly roundup and notable posts).

The former demo signup form used a separate Cloud topic. Active subscribers
are consolidated into Everruns updates without reversing unsubscribes.

If you have an Everruns Managed Demo account, we add your verified account email to
the same list for Everruns updates, recorded as coming from your account. You can
turn this off when you create your organization, at any time under Profile,
"Email updates", or with the unsubscribe link in any email. If you have
unsubscribed before, creating or using an account does not subscribe you again.

We use it only to send you those emails. Subscribing sends one welcome email
right away; after that you get the newsletter, which is about once a month.

Every email has an unsubscribe link. It lets you leave one topic or stop all
newsletter email, and takes effect immediately. You can also reply to any
email, or write to [mykhailo@everruns.com](mailto:mykhailo@everruns.com), and we
will unsubscribe you or delete your data.

Once you unsubscribe, a later form submission with the same address does not
subscribe you again. We keep the address marked as unsubscribed so that this
holds.

Newsletter email is sent through [Resend](https://resend.com), which stores the
subscriber list for us. We do not track whether you open our emails or which
links you click. Links to everruns.com in the newsletter carry a
`utm_source=newsletter` parameter so we can count visits that came from it.

## Website

The site runs on [Cloudflare](https://www.cloudflare.com/privacypolicy/).
Cloudflare processes your IP address to serve pages, to limit how often one
address can submit the subscribe form, and to run
[Turnstile](https://www.cloudflare.com/turnstile-privacy-policy/), the check
that the subscribe form is used by a person. Turnstile loads only when you use
the form.

The site loads the Google tag to count clicks through to the demo instance, the
GitHub repositories, and the newsletter form, and which page each came from. Google processes
this under the [Google Privacy Policy](https://policies.google.com/privacy).

We do not sell personal data, and we do not share it with anyone other than
the services named on this page.

## Everruns Managed Demo

This section covers app.everruns.com, id.everruns.com, and the Everruns APIs.

### What we collect

- **Account details:** your name, email address, and how you signed in. We
  keep your profile, organizations, memberships, and invitations.
- **Your content:** agents, prompts, messages, files, session history, tool
  results, and model output that you or your agents create.
- **Credentials you give us:** provider API keys, connection tokens, and
  secrets for your agents. We store them encrypted and use them only to make
  the calls you configured.
- **Usage:** model usage and the remaining free allowance. Everruns Managed Demo does
  not take payments. If you add a card to verify your account, the card details
  go to Stripe; we never see or store your full card number, and the card is
  not charged.
- **Technical data:** IP addresses, request logs, and error reports, used to
  run, secure, and debug the Service.

### How we use it

To run the Service, keep it secure (including detecting abuse and
fraud), fix problems, send service emails (for example sign-in and
invitations), and, unless you turn it off, the newsletter described above. We
do not use your content to train models, and we do not sell personal data.

### Who processes it

We share data only with the services that run Everruns Managed Demo for us, and only
what each needs:

- **Amazon Web Services** (United States, us-east-1): application servers,
  database, and file storage.
- **Cloudflare:** network edge, DDoS protection, and the built-in model service
  gateway.
- **Model providers** (for example OpenAI, Anthropic, and OpenRouter): the
  prompts and context of requests made through the built-in model service.
  With your own key, requests go to the provider you chose, under your account
  with them.
- **Sandbox and tool providers** you or your agents use (for example E2B,
  Daytona, Modal, or Browserless): the commands and files involved.
- **Stripe:** card verification, if you choose to add a card.
- **Resend:** service and newsletter email.
- **Sentry:** error reports, with personal data filtered where we can.
- **Better Stack** and **AWS CloudWatch:** operational logs, with sensitive
  fields redacted.

Integrations you connect (GitHub, Slack, MCP servers, and others) receive what
your agents send them. We may disclose data when the law requires it, or to
protect the Service, our users, or the public.

### Where it is stored

In the United States. If you use the Service from elsewhere, your data is
transferred to and processed in the US.

### How long we keep it

We keep your account and content while your account and organizations exist.
Operational logs are kept for about 30 days. Usage records are kept to enforce
the free allowance.

When you delete your account, or ask us to, we delete or de-identify your
personal data within 30 days, except content in organizations that other
members still use.

### Your choices and rights

You can see and edit your profile in the app, and delete your account from
your profile. You can ask us to access, correct, export, or delete your
personal data by writing to
[mykhailo@everruns.com](mailto:mykhailo@everruns.com). Depending on where you
live (for example the EU, UK, or California), you may have further rights,
including objecting to processing and complaining to a data protection
authority. We will not treat you differently for using them.

### Security

We encrypt data in transit, encrypt stored secrets, restrict who can access
production systems, and keep an audit history of changes. No system is
perfectly secure; we will tell affected users about a breach as the law
requires.

### Children

Everruns Managed Demo is not for anyone under 18, and we do not knowingly collect
their data.

### Changes

We update the date at the top of this page when it changes, and email account
owners about material changes before they take effect.

## Contact

Everruns (Mykhailo Chalyi), 12119 Tanglebriar Trail, Austin, TX 78750, United States.
[mykhailo@everruns.com](mailto:mykhailo@everruns.com)

---

## Machine-readable entry points

- [/llms.txt](https://everruns.com/llms.txt): index of this site written for language models.
- [/llms-full.txt](https://everruns.com/llms-full.txt): every page on this site as one document.
- [/auth.md](https://everruns.com/auth.md): how an agent obtains Everruns API credentials.
- [/.well-known/ai-catalog.json](https://everruns.com/.well-known/ai-catalog.json): ARD capability manifest.
- [/.well-known/mcp/server-card.json](https://everruns.com/.well-known/mcp/server-card.json): MCP server card for Everruns Managed Demo.
- [/.well-known/agent-skills/index.json](https://everruns.com/.well-known/agent-skills/index.json): agent skills for working with Everruns.

Any page on this site serves Markdown to `Accept: text/markdown`.
