Privacy Policy

Who we are and what this covers

Web Everything is a marketing agency for medical practices, law firms and financial advisors. AEOptim is a Web Everything company. This policy covers webeverything.com and the work Web Everything does for clients. AEOptim's products are covered by the privacy policy at aeoptim.com.

We serve practices and firms in the United States, and this policy is written for U.S. privacy law.

Patient and client information

Web Everything is not a healthcare provider. When a client project involves protected health information, we act as that client's business associate, and we sign a Business Associate Agreement before we touch it.

Our website forms are not for medical details. Please don't put patient or client information in them. Describe the problem, not the person.

What we collect

When you send us a message. Our request form asks for your name, email, practice or firm, your field, what you need help with, and what's going on. Your phone number and website are up to you. The form posts to our own server, and your message is stored in our database, which runs on Cloudflare. We also record the page you sent it from.

Details about the request. With each message we record limited context from Cloudflare: the approximate country, region and city the request came from, the network it came through, the page and link that led you to us, any campaign tag in that link, and your browser type. We use this to see where interest comes from and to guard against spam. We don't store your IP address with your message. To stop floods of automated posts, we count recent posts from each connection using a scrambled, one-way code made from the IP address, not the address itself.

Bot checks. Our forms may use a bot check from our hosting provider.

When you email or call us. We keep what you tell us so we can answer and follow up.

When you hire us. We keep your billing contact details and the records of what you paid. Where you pay by card, Stripe processes the payment and we never see or store your full card number.

When you ask for a Listing Snapshot. We ask for the practice name and website, the provider's name and NPI, the office address and phone, and the email address to send the result to. We look up the NPI in the federal NPI Registry, read the practice's web page, and ask an AI service about the provider, and we check the results before showing them. Your office address is checked as you type it. NPI numbers are public identifiers for providers, not patient information. We keep Snapshot results for 180 days.

When you order Upstream. We keep your order (practice, offices, providers, the contact who ordered, the plan you chose and your AI plan type), the record you approve and your report. Stripe processes the payment. We keep these for as long as you're a client and up to 400 days after, unless the law requires longer.

When your Upstream agent connects to us. Your agent runs in your own Claude or ChatGPT account, under that provider's privacy terms, not ours. When it connects, it reads your approved record, your Listing Map and our guides, and it sends us a summary of each listing change (the site, the field, and the value before and after) so a person can check it. It sends only public listing facts, and our server refuses anything else.

When you search this site. What you type in Search or Ask is sent to our server to find matching pages. We don't keep it, and it isn't sent to Google Analytics.

When we visit your practice. We see only the listings and accounts you choose to show us. We don't record or keep patient information.

When you visit the site. Cloudflare, which hosts the site, records standard technical information such as your IP address, browser type, the pages you request and the time, so the site can run and stay secure. Our pages load their typeface from Google Fonts, so your browser also sends Google its IP address and browser details when it loads the fonts.

Analytics

The consent banner and Google Analytics 4 are the only analytics on our pages. Google Analytics loads only after you click Accept, and only on webeverything.com. If you click Decline, or your browser sends a Global Privacy Control signal before you've made a choice, it doesn't load at all.

We don't use advertising pixels. There is no Meta pixel, no Google Ads tag and no remarketing on our pages.

Before Google Analytics receives the address of a page, we remove private links and anything typed into the address, so search phrases and form entries never reach it. You can change your choice at any time from "Your Privacy Choices" at the bottom of every page, which opens our preference panel. Our Cookie Policy lists what each choice stores.

Older tools on this site

Reports bought from Web Everything before our one-time reports moved to AEOptim can still be viewed at their links. What those pages store is described in our Cookie Policy. The older free AI check has moved to AEOptim.

How we use your information

We use it to:

read and answer your message;
give you a written price and do the work you hire us for;
bill you and keep the records the law requires;
keep the site and forms secure and free of spam;
see which pages bring in requests, and, with your consent, how people use the site; and
meet our legal obligations and enforce our terms.

Sending our request form doesn't sign you up for a mailing list. We don't build advertising profiles, and we don't put your contact details into ad networks.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We share it only with the service providers that help us run the site and the work, and only as much as each one needs:

Cloudflare: hosting, our database, site search, security and bot checks, and email delivery.
Google: fonts, office address lookup, and Google Analytics 4 after you click Accept.
Stripe: payments and upkeep billing.
AI services: the question and the check in a Listing Snapshot. We send only the provider's name, the office's city and state, and the public sources we found.
Search-data and AI tools we use in our work: public information about your practice or firm, such as your website and listings. We don't put patient or client information into them.

Your Upstream agent runs in your own Claude (Anthropic) or ChatGPT (OpenAI) account. That's your account with that provider, not a service provider of ours.

We may also disclose information when the law requires it, or to protect our rights, safety and the security of the site. If Web Everything is ever part of a merger, acquisition or sale, information may transfer as part of it, and this policy's commitments go with it.

How long we keep it

We keep your messages while we're talking with you and while we work together, and after that only as long as we need them for our records or the law requires. Billing records are kept as long as tax and accounting law requires. Ask us to delete what you sent and we will, unless the law requires us to keep it.

Upstream orders, records and reports are kept up to 400 days after your last activity. Snapshot results are kept 180 days. Messages you send us, Listing Snapshot requests and change summaries are kept for 12 months and then deleted automatically.

Google Analytics cookies expire on the schedule in our Cookie Policy.

How we protect it

The whole site runs over HTTPS. Only the people who need your information can reach it, behind a sign-in. We rely on established providers, such as Cloudflare for hosting and Stripe for payments. No website is ever completely secure, so we can't promise that nothing will go wrong. If something serious does, we'll act on it and tell you where the law requires.

Your choices and rights

Depending on where you live in the United States, you may have the right to:

ask what personal information we hold about you;
ask us to correct it;
ask us to delete it;
opt out of the sale or sharing of your personal information, which we don't do; and
be treated the same whether or not you use these rights.

To use a right, email hello@webeverything.com. We'll confirm the request comes from you, usually by replying to the email address we have on file, and respond within the time the law allows. You may use an authorized agent where the law permits.

California residents. The California Consumer Privacy Act, as amended, gives you the rights above. The personal information we collect is described in "What we collect": identifiers such as your name, email and phone, commercial information about the work you hire us for, and internet activity such as server logs and, if you click Accept, Google Analytics cookie IDs. We collect it for the purposes in "How we use your information," and we disclose it only to the providers in "Who we share it with." We don't sell or share it, and we haven't in the past twelve months. We don't use sensitive personal information in ways that would give you a right to limit it.

Emails

Any marketing email we send includes an unsubscribe link and our postal address, and your opt-out takes effect right away. You can also email hello@webeverything.com to be removed. Messages about work you hired us for aren't marketing, so we still send those.

Children

Web Everything serves businesses. The site isn't meant for anyone under 18, and we don't knowingly collect information from children. If you think a child has sent us information, tell us and we'll delete it.

Links to other sites

Our pages link to sites we don't control, such as aeoptim.com and Google. This policy doesn't cover them, so please read their own policies.

Changes to this policy

We may update this policy as the site, our services or the law change. When we do, we'll change the date at the top of this page, and for important changes we'll take reasonable steps to let you know.

Governing law

This policy is governed by the laws of the State of Michigan, without regard to its conflict-of-laws rules.