Privacy policy

Last updated: 9 July 2026. The full policy is bundled with the application installer; this page summarises the key points.

Who we are

EverGuard is provided by EverLabs Software Ltd, registered in England & Wales. Contact info@everguard.uk or dpo@everguard.uk.

What data we hold

• Account: your email address, hashed password, generated licence key, Stripe customer ID.
• Subscription state: Stripe subscription status + renewal date (synced via Stripe webhook).
• Device seat: a device identifier and friendly device name used to enforce your one-PC subscription.
• Usage counters: a per-month tally of classification calls (no email content stored).
• Support messages: anything you submit via the contact form.

How email classification data is handled

EverGuard sends subject, sender, recipient, link domains, attachment filenames, sender-authentication results and a limited body extract to our backend. The backend does not store those email fields: it relays up to 4,000 body characters to OpenAI for the primary classification and, only if the message is potentially dangerous, up to 8,000 characters to Anthropic for an independent review. Backend logs redact sender, subject and body. The detailed verdict remains in your local audit log on your PC.

OpenAI and Anthropic state that their commercial/API inputs and outputs are not used for training by default and are normally retained for up to 30 days, subject to their terms, security controls and legal obligations.

Lawful basis

Performance of contract for service delivery; legitimate interest for fraud prevention; consent for any marketing (we currently send none).

Your rights

You can access, correct or delete your account by emailing dpo@everguard.uk. ICO registration is pending.

Sub-processors

• OpenAI, L.L.C. — email classification (GPT-4o mini primary).
• Anthropic PBC — email classification (Claude Sonnet 4.6 escalation).
• Stripe, Inc. — payment processing.
• Fasthosts Internet Ltd — VPS hosting (UK).