This Privacy Policy explains what information Web Everything collects, why we collect it, how we use and share it, and the choices you have. We’ve tried to write it in plain language. Where something is genuinely a legal term, we’ve kept it precise, but the goal is that you finish this page actually knowing where you stand.
Who we are and what this covers
Web Everything provides marketing intelligence for independent US medical practices. Our core product is the Practice Workup: a one-time marketing diagnostic delivered as a private web report and a matching email. This policy is operated by Web Everything, LLC, a Michigan limited liability company (“Web Everything,” “we,” “us,” or “our”).
This policy applies to our website and to the Practice Workup product. We serve customers and practices located in the United States, and this policy is written for US privacy law. We do not target or knowingly market to people in the European Union, the United Kingdom, or other regions with their own privacy frameworks. If you reach us from outside the United States, please understand the service is not directed to you.
The information we handle is almost entirely business information about a medical practice and the person ordering on its behalf: not patient health records. We are not a covered entity or business associate under HIPAA, and the Practice Workup is not designed to receive protected health information. Please do not send us patient health information.
Information we collect
Information you provide on the order form
When you order a Practice Workup, you give us the following directly. Required fields are marked; the rest are optional and there only to sharpen the report:
- Practice website URL (required): the site we analyze
- Practice name
- Primary city and state of the practice
- Specialty (e.g., ENT, dermatology)
- Additional location details, if you order a multi-location workup (up to five locations)
- Context notes: anything you choose to tell us about your concerns, competitors, or goals
- Your name (required)
- Your role (e.g., owner, practice manager)
- Your email address (required): where we send the report
- Your phone number (optional)
- An optional flag indicating you’d like an execution brief included with your report
Payment information
Payments are processed by Stripe through an embedded checkout on our order page. You enter your card details directly into Stripe’s secure fields. We never see or store your full card number. What we receive from Stripe is a confirmation and limited metadata, for example, that a payment succeeded, the amount, and a transaction reference, which we use to fulfill and record your order.
Email sign-ups and other forms
If you submit one of our other forms, we collect what you put into it:
- Product-updates sign-up: your email address, submitted through our footer or menu form.
- Contact form: your name, email, message, and any other details you include.
- Affiliate / referral-partner application: your name, email, company, and the information requested on the application.
These forms are processed for us by Web3Forms, which delivers the submission to our inbox.
Free AI Visibility Check
Our free AI Visibility Check asks for your practice name, website, city, your name, your email, and an optional phone number. When you submit it, we run a single live query against one AI search engine to see whether it names your practice for a patient-style search in your city, and we return the result on the page and by email. We use the details you provide to run that check, send your result, and follow up about it. The check is free, and you can ask us to delete your submission at any time.
Form-submission details
When you submit any form on our site, we also record limited first-party context about that submission, the approximate country, region, and city of the request, the network or organization it came from, the page and referrer that led you to us, and any campaign tag in the link, so we can understand where interest is coming from and guard against spam and abuse. We do not store your raw IP address with these form records.
Information collected automatically
When you visit our website, our hosting and edge provider (Cloudflare) automatically records standard technical information so the site can function and stay secure. This includes your IP address and approximate location derived from it, your device and browser type, the pages you request, and the date and time. This is ordinary server-log information common to nearly every website.
We use Google Analytics 4 to understand how the site is used, pages viewed, broad trends, and which links and buttons people use, and Google Ads to measure our advertising and to show our ads to people who have visited the site (remarketing). We load and manage both through Cloudflare Zaraz, a consent-aware tag manager that runs them from Cloudflare’s edge rather than directly in your browser, and only after you allow them. Analytics is configured with your IP address hidden from Google. These tools set the analytics and advertising cookies listed in our Cookie Policy. You control all of them through the consent banner, the “Your Privacy Choices” link in our footer, or a Global Privacy Control signal, any of which keeps them turned off. We honor Global Privacy Control automatically, and we never run analytics or advertising tags on the checkout, the order confirmation, or the report viewer. See our Cookie Policy for the full list.
Functional storage in your browser
To carry your order from the order page to the confirmation page, we use a single, temporary entry in your browser’s session storage. It stays on your own device, is used only to hand off your order within the same visit, and is cleared after use. It is strictly functional, not tracking.
The report and the data we assemble to produce it
To produce your Practice Workup, we gather and analyze publicly available information about your practice and its local market: for example, your website’s content, search and keyword data, map and listing data, review signals, and how AI search engines describe your practice. We combine that market data with the details you provided to generate your report. The finished report, and the working data assembled to produce it, are stored privately and tied to your order.
How we use your information
We use the information above to:
- Run and deliver your Practice Workup: generate the report and email it to you, typically within an hour of your order;
- Protect your report: the report is private and gated, so the delivery email includes both a link and a six-digit access code to open it;
- Provide customer support and respond to your questions or requests;
- Process payments and keep billing records required for tax and accounting;
- Send product updates only if you opted in, never as a condition of buying;
- Operate, secure, and improve our website and the workup; and
- Comply with the law and enforce our terms.
With your consent, Google Ads sets advertising cookies and we share online identifiers from your visit with Google for remarketing, showing you our ads elsewhere. Today we do not upload your name, email, or phone number into ad networks; if that ever changes we will update this policy and ask for your consent again. You can opt out any time via “Your Privacy Choices,” Global Privacy Control, or by declining the consent banner.
How we share information
We do not sell or rent your personal information for money. When you consent to advertising cookies, we do share online identifiers from your visit with Google for cross-context behavioral advertising (remarketing); you can withdraw consent any time via “Your Privacy Choices,” a Global Privacy Control signal, or by declining the consent banner. We share information only with the service providers that help us run the product (our “sub-processors”), and only as needed for them to perform their function. Naming them is the honest thing to do, so here they are:
- Cloudflare: hosting, edge compute, and storage (where the website runs and where reports and order data are stored).
- Stripe: payment processing.
- Resend: sending your report and other transactional email.
- Web3Forms: intake for our contact, affiliate, and sign-up forms.
- Calendly: scheduling. Some pages offer a “Schedule a call” option; its booking widget loads only if you open it, and only then does Calendly set its own cookies and receive the name, email, and time you enter to book.
- Workup data-processing engines: the analysis services we use to produce your report: Anthropic, OpenAI, Google (Gemini AI, Maps geocoding, and Ads keyword data), Perplexity, and DataForSEO. These process the practice URL and market data needed to generate your diagnostic.
- Analytics & advertising: Cloudflare Zaraz (loads and consent-gates our tags at the edge), Google Analytics 4 (site-usage measurement, with your IP hidden from Google), and Google Ads (advertising measurement and remarketing). Active only if you allow these cookies.
We may also disclose information when required by law, for example, to respond to a valid legal request, or to protect our rights, safety, and the integrity of our service. If we’re ever part of a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we’d note it here and honor this policy’s commitments.
Cookies and tracking
We keep this honest: we run analytics (Google Analytics 4) and advertising (Google Ads), and only after you consent. Decline, send a Global Privacy Control signal, or use “Your Privacy Choices,” and none of it runs, and it never runs on the checkout flow or the report viewer.The browser storage in play includes the essential cookie Stripe sets to process payments and prevent fraud on the order page, the functional session-storage entry described above, a first-party cookie that remembers the access code for a report you purchased so you don’t have to re-enter it, and, on any page that offers it, the third-party cookies Calendly sets if you open the “Schedule a call” scheduler. Our fonts are self-hosted, so opening the site sends nothing to an outside font service. Because we set analytics and advertising cookies (Google Analytics and Google Ads, on marketing pages only), we show a consent banner (loaded through Cloudflare Zaraz) so you can accept or decline them, essential cookies always stay on, and you can change your choice any time from “Your Privacy Choices” in the footer. The full breakdown lives in our Cookie Policy.
How long we keep information
- Reports and the practice/market data used to build them: retained for 12 months, then deleted, or sooner if you ask us to delete them.
- Billing and transaction records: retained for 7 years to meet tax and legal requirements.
- Product-update sign-up emails: kept until you unsubscribe.
- Server logs: retained for a limited period by our hosting provider for security and operations.
- Analytics and advertising data: the underlying cookies expire on the schedule in our Cookie Policy (up to ~2 years); the related measurement and remarketing data is held by Google under its own retention controls, which we set to the shortest practical window.
How we protect information
We encrypt data in transit (HTTPS across the site), restrict access to the people and systems that need it, and rely on established providers, like Stripe for payments and Cloudflare for hosting, whose security practices exceed what a small company could build alone. Your report is gated behind a private link and a six-digit access code so it isn’t openly browsable.
We’ll be straight with you: no website or method of transmission is ever 100% secure. We work hard to protect your information, but we can’t guarantee absolute security. If something material ever goes wrong, we’ll act on it and notify you where the law requires.
Refunds and getting it right
The Practice Workup is a custom report generated on demand for your practice, so our refund approach reflects that, and our intent is simply to be fair.
- If the workup fails to run or we can’t deliver it, you get a full refund. You shouldn’t pay for something you didn’t receive.
- Once a report is delivered, because it’s a custom report built on demand, sales are final, with an honest exception: if a delivered report has a material error, or you didn’t actually receive it, reach out within 7 days. We’ll re-run it or correct it, and if we genuinely can’t make it right, we’ll refund you.
In short: if something’s wrong, contact us and we’ll make it right.
Your privacy rights
Depending on where you live in the United States, you may have rights over your personal information, including the right to:
- Access: ask what personal information we hold about you;
- Delete: ask us to delete your personal information;
- Correct: ask us to fix inaccurate personal information;
- Opt out of “sale” or “sharing” for targeted advertising, when you consent to advertising cookies we share online identifiers with Google for cross-context behavioral advertising (remarketing), and you can opt out any time via “Your Privacy Choices,” Global Privacy Control, or by declining the consent banner. We do not sell your personal information for money; and
- Non-discrimination: we won’t treat you differently for exercising any of these rights.
- Minors: we do not knowingly sell or share the personal information of consumers under 16 years of age.
To exercise a right, email us at legal@webeverything.com. We’ll verify your request (usually by confirming control of the email tied to your order) and respond within the time the law allows. You may use an authorized agent where the law permits.
For California residents
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the rights described above. To put it concretely for our service:
- The categories of personal information we collect are described in “Information we collect” above, identifiers (name, email, phone), commercial information (your order), and internet/network activity (server-log data and, if you consent to cookies, online identifiers such as cookie and device IDs set by Google Analytics and Google Ads).
- We collect it for the business purposes described in “How we use your information.”
- We disclose information to the service providers listed in “How we share information” so they can perform services for us.
- We do not sell your personal information for money. When you consent to advertising cookies, we share online identifiers for cross-context behavioral advertising (Google Ads remarketing); you can opt out any time via “Your Privacy Choices,” Global Privacy Control, or by declining the consent banner.
- We don’t use or disclose sensitive personal information for purposes that would trigger a right to limit it.
You won’t be discriminated against for exercising your California rights. To make a request, email legal@webeverything.com.
Marketing emails and unsubscribing
We only send product-update emails to people who opted in, and free AI check result emails to people who requested a check. Every such email includes an unsubscribe link and our postal address. The link takes you to a one-tap unsubscribe page, no login and no fee, and your opt-out takes effect immediately: we keep a do-not-send list and check it before every send. Our emails also support one-click unsubscribe directly in mail apps that offer it. You can also opt out by emailing legal@webeverything.com and we’ll remove you. Note that transactional messages tied to an order you placed, like delivering your report or a billing receipt, aren’t marketing and are always sent so we can complete your purchase; opting out never affects delivery of a report you bought.
Not directed to children
Web Everything is a business-to-business service intended for medical-practice owners and operators. It is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a minor has provided us information, contact us and we’ll delete it.
Third-party links
Our site and reports may link to third-party websites we don’t control. This policy doesn’t cover those sites, and we’re not responsible for their privacy practices. We encourage you to read the privacy policy of any site you visit from ours.
Changes to this policy
We may update this policy as our service or the law changes. When we do, we’ll revise the effective date at the top of this page, and for material changes we’ll take reasonable steps to let you know. Your continued use of the service after an update means you accept the revised policy.
Governing law
This policy and any dispute relating to it are governed by the laws of the State of Michigan, without regard to its conflict-of-laws rules.
Contact us
If you have questions about this policy or how we handle your information, reach us at:
- Email: legal@webeverything.com
- Phone: 646-388-2960
- Mail: 675 Purdy St., Birmingham, MI 48009