Security

Your spreadsheet stays yours.

What we receive, where it lives, what the AI sees, who reads it, and when it's deleted. If anything here stops being true, we'll change it here first.

Where your data lives

Three places, and nowhere else.

  • 1

    Amazon Web Services, Seoul

    Pilot applications, waitlist entries, contact messages, and visit counts.

    The database is encrypted at rest. The site is served over HTTPS only.

  • 2

    Our inbox, or your shared link

    Your spreadsheet, if you're in the pilot.

    Sent by email (Google Workspace) or as a link you control. One copy on the work computer of the person building your dashboard.

  • 3

    Anthropic's API

    Your column names and your goal, nothing else.

    Used to suggest metrics. The rows of your spreadsheet are never sent. Anthropic doesn't use API data to train its models.

The AI sees column names. Never your rows.

To suggest metrics, we send your column names, their types, and the goal you told us to Anthropic's API. Nothing else.

Every number on your dashboard is calculated by a database engine, not by the AI. Anthropic doesn't use API data to train its models.

How the dashboard is built

How long we keep it

Each kind of data, and when it’s deleted.

Pilot spreadsheets
We delete our copies 30 days after the pilot, unless you keep using Every Number.
Pilot applications
Deleted if you don't go ahead with a pilot.
Waitlist entries
Kept until we've told you about early access, then deleted.
Contact messages
Deleted 12 months after our last reply.
Server access logs
Kept for up to 14 days, for security and troubleshooting.
Database backups
Kept for 7 days. Anything we delete is gone from backups within 7 days.

This website

Small on purpose. No tracking you'd need to consent to.

  • No cookiesThe site doesn't set any.
  • No third-party scriptsNo analytics, ad, or chat scripts. Fonts are served from our own server.
  • HTTPS everywhereBrowsers are told to use HTTPS for a year (HSTS).
  • No framingOther sites can't embed our pages to trick clicks.
  • Visits counted without IPsWe count visits that stay 5 seconds, with no IP address or cookie.

Questions

The full details are in the privacy policy.

Do you have SOC 2 or ISO 27001?

No. We're a small studio at the pilot stage. If your company requires a certification, tell us before you send a file.

Can I send a copy with some columns removed?

Yes. Send only what the dashboard needs. On the call we can tell you which columns we'll use.

Can I ask you to delete my data early?

Yes. Email us or use the contact form, and we'll delete it and reply within one month.

Who can see my spreadsheet?

One person: the person building your dashboard.

Does the AI see my data?

It sees your column names and your goal, never the rows. Every number is calculated by a database engine.