PRIVACY & CONTROL

Your information. Your decisions.

Updated October 3, 2026. EveryFavor is operated by Chang Yang. For privacy questions or requests, contact cyangprojects@gmail.com.

Account access is limited to an invited private pilot. The public sample uses fictional information. It does not connect to your accounts, and you should not enter private receipts, financial information or credentials into it.

Information you choose to provide

For invited accounts, EveryFavor processes your email address and account profile, verification and session information, consent choices, uploaded receipts or documents, imported transactions, connected-source permissions, findings, feedback and reported recoveries. You decide which sources to add, when to start a scan, and whether to enable ongoing checks.

Documents may contain information about other people. Upload only information you are authorized to provide, and avoid unrelated sensitive information. EveryFavor does not need your bank password or payment-card security code.

Why we process it

We use this information to authenticate you, operate your private account, inspect and read authorized files, identify potential economic opportunities, explain the supporting evidence, record your decisions, provide exports and handle deletion. Limited security and operational records help detect abuse, diagnose failures and maintain the service.

Findings and potential value are estimates that may be wrong or incomplete. Receipt text and your corrections do not establish payment or eligibility. Money you report recovering is labeled separately from potential value. Live claim submission is not enabled in this release. The recovery workflow under development prepares a factual refund request, shows its recipient and contents, and requires your approval before contact. It does not authorize cancellations, settlements, transfers, or other account changes.

Connected email

Gmail connection is available to the invited private pilot and requires Google's consent screen and read-only permission. Manual imports are started by you and limited to matching messages from the previous 90 days, with at most 50 retrieval attempts per import. This version reads bounded plain text, skips attachments and remote images, and does not modify or delete mail. The separate approved-claims workflow will request Gmail sending permission only when you choose it. Each claim still needs its own message approval. It monitors that conversation for up to 30 days; one optional follow-up may be approved for seven days without a reply.

Daily Gmail checks are a separate, optional choice, off by default. Enabling them authorizes checks for a new 90-day period beginning when you opt in. The first check is due about 24 hours later. Each check makes at most 50 matching-message retrieval attempts and rechecks supported findings and deadlines using evidence you already reviewed. A small overlap helps avoid gaps; messages already retained are not retrieved again. Capped or incomplete imports stop automatic imports and show the unchecked gap. You can choose whether changed findings appear as notices inside the app. These checks do not send claims or share your messages with an AI provider.

You can pause daily checks in Connections at any time while keeping manual import access. Enabling again starts from that new consent time; the paused interval is not automatically imported. Consent expires after 90 days, and reconnecting Gmail or restoring account data does not restart it. We retain consent choices, import coverage and check history with your account for review, export and deletion.

Disconnecting stops future ingestion immediately. Provider revocation can take longer; the app shows when confirmation is pending. Records already imported may remain available for your review and export until you delete your account. We do not sell Gmail data or use it for advertising or model training.

Service providers and processing

EveryFavor uses Vercel to host the application, Neon for its database and managed authentication, Cloudflare for private document storage and background coordination, OVHcloud for isolated malware inspection and document reading, and Resend for account and operational email. Google processes authorization and mailbox requests if you choose to connect Gmail. These providers process information needed for their functions, including network and security metadata.

Private content is encrypted in transit and at rest, with additional application encryption for sensitive records and files. Authorized application processes decrypt information when needed. Files are decrypted temporarily for inspection and reading in isolated processes. Access is limited by account membership and permissions. Founder diagnostics require an explicit permission and are audited.

Refund requests can be assembled within EveryFavor from statements you have already reviewed. This template-based preparation does not send your evidence to an external AI provider or send a merchant message. Preparing a draft does not grant Gmail sending permission.

The current public sample is scripted and does not call an AI model. Live AI-assisted claim preparation remains disabled. Before that feature is enabled, its provider processing and budget checks must be completed. The planned feature sends only the relevant retained text you authorize for preparation through Vercel AI Gateway to an eligible model provider, with requests restricted to no-training and zero-data-retention routes. Provider security exceptions and service metadata are subject to the applicable terms. You will be asked before this processing; authorization to read Gmail alone does not authorize AI processing.

Measurements and logs

Account measurements count generated and displayed findings, your feedback, ingestion progress, processing failures and reported recovery. A displayed card does not prove you read it. These measurements stay linked to your retained account and are included in export and deletion. They are not anonymous historical tracking.

Application logs are designed to exclude raw email bodies, receipts, transaction descriptions, passwords and access tokens. Providers may retain their own service and security logs under their terms. No system can guarantee that every security risk or service interruption is prevented.

Export, retention and deletion

Claim drafts, approvals, submitted messages, retained replies and payment reports are included in account export and deletion. Deleting EveryFavor records cannot recall email already sent or delete copies held by a merchant or in your Gmail account. Stopping a claim prevents future contact; a message already admitted for sending may finish.

You can request a private export of retained structured records and original files that passed safety checks. Exports are split into numbered parts and expire after 24 hours. Access still requires your account; a download address alone is not permission. Your own downloaded copies remain under your control.

Deletion requests immediately stop account access and new ingestion. Cleanup removes live account records, original files and their recovery copies, and the managed sign-in identity. Pending provider revocation or an unresolved cleanup failure may delay completion. We do not label an unconfirmed provider deletion as complete.

Production database recovery history is configured for 24 hours. That period begins separately for each removed record and is not a promise that every provider copy disappears exactly 24 hours after your request. Cleanup records remain protected until recovery history and other retained copies have been checked. Minimal deletion and security markers remain to prevent deleted information from returning after recovery. Final retention procedures are still being verified before real customer data is accepted.

Security records and provider logs may have different retention requirements. Contact us if you need help with access, correction, export, disconnection or deletion, or if you believe your information was provided without permission. We may need to verify that a request concerns your account.

Changes and contact

We will update this notice when processing changes and request new consent where a feature requires it. This service is intended for adults. Questions can be sent to Chang Yang at cyangprojects@gmail.com.