Privacy Notice

1. Scope

This Privacy Notice describes how Everon Technologies LLC ("Everon", "we", "us") handles personal information about the people who use the Everon SFTP Portal (the "Portal"). It covers your account and your activity in the Portal. The contents of the files exchanged through the Portal are handled on behalf of Everon's vendors, partners, and clients under the agreements between those parties, not under this Notice.

2. Information We Collect

• Account data: your email address, a hashed password, whether you are an administrator, and when your address was approved and by whom.
• Activity data: sign-ins and sign-outs, the buckets and folders you list, and the files you upload, download, rename, or delete, each with a timestamp and the network (IP) address of the request.
• Technical data: browser type and a session cookie that keeps you signed in. Your light/dark theme preference is stored only in your browser.

We do not collect payment information, and the Portal has no advertising or analytics trackers.

3. How We Use It

• To authenticate you and keep you signed in;
• To limit access to the buckets your organization is approved for;
• To maintain a security and compliance audit trail of file activity;
• To detect and respond to abuse, misdirected files, and security incidents;
• To support you and your organization; and
• To meet our legal and contractual obligations.

4. Sharing

We do not sell personal information. We share it only:

• With the vendor or partner organization you represent, for example to confirm who accessed a file or to remove access when you leave;
• With service providers that host the Portal and store its data (Google Cloud Platform: Cloud Run, Cloud Storage, and Firestore) under agreements that restrict their use of the data;
• When required by law, regulation, subpoena, or court order, or to protect Everon, its users, or others; and
• In connection with a merger, acquisition, or sale of assets, subject to this Notice.

5. Cookies

The Portal sets one strictly necessary cookie that holds your signed session. It is not used for tracking and is removed when you sign out or when it expires. Disabling it prevents sign-in.

6. Retention

We keep account data while your access is active and for a limited period afterwards so that audit records remain attributable. Activity logs are retained for the period required by our security and compliance obligations and then deleted. Files in the buckets are retained according to the agreements between Everon and the organization that owns them.

7. Security

Passwords are stored hashed, sessions are signed, traffic is encrypted in transit, data is encrypted at rest, access to each bucket is scoped to its own service account, and sign-in attempts are rate-limited. No system is completely secure; if we learn of an incident affecting your personal information we will notify you and your organization as required by law.

8. Your Rights

Depending on where you live you may have the right to access, correct, or delete your personal information, or to receive a copy of it. To make a request, email legal@everon.tech from the address on your account. We may keep audit records where the law or our security obligations require it. We do not sell or share personal information for cross-context behavioral advertising.

9. Location of Processing

The Portal is hosted in the United States. If you access it from elsewhere, your information is transferred to and processed in the United States.

10. Changes and Contact

We may update this Notice by posting a revised version with a new effective date. Questions or requests may be sent to legal@everon.tech.