Privacy Policy

1. Introduction

Namuh, Inc. ("Company," "we," "us," or "our") operates the Ever browser extension, website, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in using Google OAuth, we receive your name, email address, and profile picture from Google.
• Payment Information: If you subscribe to a paid plan, payment processing is handled by our third-party payment processor. We do not store your credit card details.
• Support Communications: Any information you provide when contacting us for support.

2.2 Information Collected Automatically

• Usage Data: We collect information about how you use the Service, including task execution logs, token usage, and feature interactions.
• Device and Browser Information: Browser type and version, operating system, and device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URLs.

2.3 Browser Extension Data

The Ever browser extension interacts with web pages to execute automated tasks on your behalf. During task execution, the extension may process page content (such as DOM elements, text, and page structure) to understand and interact with websites. This data is processed locally in your browser and transmitted to our servers only as needed to fulfill your requested tasks. We do not collect or store passwords, form inputs, or sensitive personal data from the web pages you visit outside of active task execution.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Execute and manage automated web tasks on your behalf
• Process transactions and manage your subscription
• Send administrative communications (account updates, security alerts)
• Analyze usage patterns to improve our AI models and Service quality
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, analytics). These providers are contractually obligated to protect your information.
• AI Model Providers: Task instructions and page context may be sent to third-party AI providers (such as Google and OpenAI) to generate automation plans and actions. These providers process data according to their own privacy policies and our data processing agreements.
• Legal Requirements: When required by law, subpoena, or legal process, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Task execution data (including screenshots and logs) is retained for a limited period to enable debugging and analytics. You may request deletion of your account and associated data at any time by contacting us.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a portable copy of your data in a structured format.
• Opt-Out: Opt out of certain data processing activities, such as analytics.

To exercise any of these rights, please contact us at founders@namuh.co.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it is collected, the business purpose for collecting it, and the categories of third parties with whom we share it. You also have the right to request deletion of your personal information and to opt out of the sale of your personal information. We do not sell personal information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

10. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

12. Google User Data

This section specifically describes how we handle data received from Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

12.1 Data Accessed

If you sign in with Google, we request access to the following data only:

• Email address — used to identify your account
• Display name — used to personalize your experience within the app
• Profile picture — used to display your avatar in the dashboard

We do not request access to any other Google data such as contacts, calendar, drive files, or any other Google services.

12.2 Data Usage

Your Google email address, display name, and profile picture are used solely for the purpose of:

• Creating and authenticating your Ever account
• Displaying your name and avatar within the app interface
• Associating your account with your subscription status, if applicable

We do not use Google user data for advertising, marketing, or any purpose unrelated to providing and improving the Ever Service.

12.3 Data Sharing

We do not sell, rent, or trade Google user data to any third party. Google user data is shared only with the following service provider, solely as necessary to operate the Service:

• Our authentication provider — which stores your email address, display name, and profile picture to manage your account session and identity.

We do not transfer Google user data to any other third parties except as required by applicable law.

12.4 Data Storage & Protection

Google user data (email address, display name, and profile picture) is stored as follows:

• Server-side: Your account record is stored in our database with encryption at rest and TLS encryption for all data in transit.
• In your browser: Your authentication session token is stored as an HTTP-only secure cookie, which is not accessible to client-side JavaScript.

Access to your account data on our servers requires a valid, signed authentication token. We do not store Google OAuth tokens beyond what is necessary for session management.

12.5 Data Retention & Deletion

We retain your Google user data (email, display name, and profile picture) for as long as your account is active. You may request deletion of your account and all associated Google user data at any time by contacting us at founders@namuh.co. Upon receiving your request:

• Your account record and all associated personal data will be removed from our servers within 30 days.
• Your local authentication session will be cleared when you sign out of the extension or clear your browser data.

You may also revoke Ever's access to your Google account at any time through your Google Account permissions page.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date at the top of this policy and, where appropriate, providing additional notice. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: