Privacy
LAST UPDATED 21 OCTOBER 2026 · APPLIES TO EVERYTHINGRELEVANT.IO, THE EVERYTHINGRELEVANT APP AND THE EVERYTHINGRELEVANT API
EverythingRelevant reads UK business news and tells you the handful of stories, grants and tax changes that touch your business. To do that we need to know a little about your business. This page says exactly what we hold, why, for how long, and how to get it removed.
Who is responsible
The data controller is [LEGAL ENTITY], trading as EverythingRelevant, Leicester, United Kingdom. Contact: privacy@everythingrelevant.co.uk. We are registered with the Information Commissioner's Office (ICO) [REGISTRATION NUMBER].
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Your business answers: business name, sector, council area, where you sell (Amazon, Etsy…), plans, what you sell | To choose which stories, grants and deadlines are relevant to you | Contract (providing the service); for the signed-out preview, legitimate interest |
| Account details: email address, sign-in method, password hash or provider token | To sign you in and keep your follows | Contract |
| Your follows and choices: companies, places and topics you follow, stories you marked “not for me”, muted sources | To build your daily brief and feed | Contract |
| Your daily briefs (the items shown to you each day and whether you saw them) | So the brief changes day to day and we do not repeat ourselves | Contract |
| Email, push or WhatsApp delivery details and consent, if you turn them on | To send you the morning brief the way you asked | Consent (you can withdraw it at any time in settings) |
| Usage counts for the API and AI features (per app key and per account, per day) | Fair-use limits, abuse prevention and billing | Legitimate interest |
| Technical logs at our hosting providers (IP address, request time, errors), kept briefly | Security and keeping the service running | Legitimate interest |
We do not use advertising trackers, analytics cookies or fingerprinting. We do not sell or share your data for marketing.
What we do not send to AI
We use an AI model (Anthropic Claude) to score public news stories and to write the one-line “what it means” for each story per sector (for example “UK small businesses in the Hospitality & food sector”). Those lines are shared by everyone in that sector. Your business name, email and other account details are never sent to the AI provider.
Storage in your browser
If you use the preview on the home page, your three answers are saved in your browser's local storage (not a cookie) so the brief is still there when you come back. Nothing else is stored in your browser except the sign-in session when you sign in. Clear your site data to remove it.
You sign in with a one-time link sent to your email address; there is no password. The sign-in session is kept in your browser's local storage until you sign out.
Pictures in the feed
Story pictures load straight from the publisher's website (for example a newspaper's image server). We ask your browser not to tell them which page you came from, but like any website they see your IP address when they send the picture. We do not share anything else with them.
Where your data lives and who processes it
- Supabase (database, sign-in, functions) — London, UK region (AWS eu-west-2).
- Cloudflare — serves the website.
- Anthropic — AI scoring of public news stories only, as above.
- Supabase Auth email (or the email provider set as its sender) — sends your sign-in links.
- News publishers — serve the pictures in your feed, as above.
- Google Fonts — the website loads fonts from Google, which sees your IP address when it serves them.
- If you turn on WhatsApp delivery: Meta (WhatsApp Business) receives your phone number and the messages we send you.
Where a provider processes data outside the UK, it is under the UK International Data Transfer Addendum or an adequacy decision.
How long we keep things
| Data | Kept for |
|---|---|
| Account, business answers, follows | Until you delete your account |
| Daily briefs | 90 days |
| News stories we read | 30 days |
| AI usage counts | 90 days |
| API usage counts (per app key, no personal data) | 13 months |
| WhatsApp messages and link codes | 90 days / 1 day |
| Unused delivery tokens | 12 months |
Deleting your account removes your account and everything linked to it (answers, follows, briefs, hidden stories, delivery settings) straight away.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and withdraw consent for emails, push or WhatsApp at any time. Email privacy@everythingrelevant.co.uk; we answer within one month. You can also complain to the ICO at ico.org.uk.
Apps built on the EverythingRelevant API
Other apps (for example TaxUnderstood) show EverythingRelevant content using our API. Each app has its own key, which only meters usage. When you sign in to such an app with your EverythingRelevant/TaxUnderstood account, the same account and the same rules above apply.
Changes
If this notice changes in a way that matters, we say so on the site and, if you have an account, by email.