Privacy Notice

Effective 4 June 2026  ·  Version 1.1 – Pre-Beta

We collect

Your email & chosen relationships

Do we sell data?

No. Never

Where data lives

US-based servers

Why we contact you

Beta access & updates only

Who we are

Everybranch Inc. is the data controller for your personal data during the waitlist phase. We operate the Everybranch website at everybranch.co and are responsible for how your information is collected and used.

This notice applies to the pre-beta waitlist only. When the product launches, a full Privacy Policy covering all product features will be published and you will be notified. For privacy inquiries: privacy@everybranch.co.

Data we collect

During the waitlist phase, we collect only what is necessary:

DataHow collectedRequired
Email addressYou enter it on our formYes — to contact you
Family membersYou pick from a fixed list of relationshipsYes — to tailor your access
Submission timestampAutomatically recordedQueue management
Basic analyticsAggregated page visit dataTo understand reach

The family members you select are relationship labels chosen from a fixed list (for example, “Grandmother” or “Mentor”) — not names, contact details, or any identifying information about real people. We do not collect your name, phone number, date of birth, or location at this stage.

How we use your data

We use the information you give us for these purposes only:

  • To confirm your place on the waitlist
  • To notify you about Everybranch — milestones, updates, and your beta invitation
  • To shape early access around the relationships you told us you want to preserve
  • To understand our early community through aggregate, anonymised data

We do not use your data for advertising, profiling, or automated decision-making. Everybranch products are, and will remain, ad-free.

Our legal basis

We collect and use your email address with your explicit consent. By submitting the waitlist form, you agree to receive the communications described in this notice. You may withdraw this consent at any time by unsubscribing.

Everybranch Inc. is a US company and is not legally required to comply with GDPR. We choose to do so anyway — for all users, regardless of where they live — because we believe it represents the right standard of care for a product built on family trust.

If you are a California resident, the CCPA and CPRA grant you additional rights described below. Residents of Texas, Virginia, Colorado, Connecticut, and other states with privacy laws may also have additional rights under their respective state laws.

Who sees your data

Your email is shared only with:

  • Email delivery provider — to send you confirmation and update emails. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.
  • Internal team — limited to core Everybranch team members involved in product and communications.

We do not sell your data. We do not share it with third-party marketers, data brokers, or any other party.

International transfers

Our infrastructure is based in the United States. If you access Everybranch from outside the US — including the UK, EU, Nigeria, or Canada — your data will be transferred to and processed in the United States.

We take reasonable technical and organisational measures to protect your data in transit and at rest. While we are not formally bound by UK or EU GDPR, we voluntarily apply equivalent protections to all users globally.

Given the diaspora families we serve — spanning Nigeria, the UK, the US, Canada, and beyond — we understand the weight of cross-border data handling. Your data will always be treated with the same care regardless of where it travels.

How long we keep your data

We retain your email for as long as you remain on the waitlist, or until you become an active user, or until you request deletion. If the beta programme is delayed beyond 24 months from your sign-up date, we will email you to confirm you still want to hear from us. If we don't hear back within 30 days, we will remove you from the list.

Your rights

We honour the following rights for all users, regardless of location — consistent with the GDPR principles we have voluntarily adopted:

Access

Request a copy of the data we hold about you.

Correction

Ask us to fix inaccurate or incomplete information.

Erasure

Request deletion of your data. We'll remove it promptly.

Objection

Object to any processing you did not consent to.

Portability

Receive your data in a structured, machine-readable format.

Withdraw consent

Unsubscribe any time. One click, no consequences.

To exercise any right, email privacy@everybranch.co. We will respond within 45 days. If you are unsatisfied, US residents may contact the Federal Trade Commission or their state's Attorney General. California residents may also contact the California Privacy Protection Agency.

Cookies

The waitlist page uses only:

  • Essential cookies — required for the form to function. Cannot be disabled without breaking the page.
  • Analytics cookies — aggregated, anonymised page-visit data with no personal identifiers. You may decline these via our cookie banner.

No advertising cookies, behavioural tracking, or third-party retargeting at any point.

Children's privacy

The waitlist is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. Everybranch is designed to preserve family history for children and future generations — but access to the platform requires an adult account holder.

If you believe we have inadvertently collected data from a child under 18, please contact privacy@everybranch.co immediately and we will delete it without delay.

Changes to this notice

This Privacy Notice covers the waitlist phase only. When Everybranch enters beta, a comprehensive Privacy Policy will replace this document. If we make any changes before then, we will notify you by email. We will never make a change that reduces your rights without telling you first.

How to reach us

For any privacy question, data request, or concern:

We aim to acknowledge all privacy requests within 5 business days and resolve them within 45 days.