Privacy

Last updated September 27, 2026.

What we collect

When you request a free scan or place an order: your organization's website address, your name, your work email, your organization's name, billing details you give us, and your internet address (used only to limit abuse of the free scan and the order form). When we test a website we store the test results and copies of public PDF documents we rebuild. When you email us: your email address and what you write.

How we use it

To run the tests you asked for, show you your results at a private link, prepare your invoice and the emails about your order, answer your questions, and keep the service working. Emails you send to hello@everyramp.com are delivered to our team's mailbox, and an AI assistant running on Cloudflare may read them to prepare a reply; any reply it writes says so. The plain-English rewrites, image descriptions and fix suggestions in your report and fix pack are written by AI models run by Cloudflare Workers AI (currently Meta Llama 4 Scout, Mistral Small 3.1, Meta Llama 3.3 and Qwen2.5-Coder); we have not confirmed HIPAA eligibility for those models, one reason we ask you not to send us real patient data (see "Health information" below). We do not sell or rent your information, and we do not use advertising trackers on this website.

Where it is kept

With our hosting provider, Cloudflare, in the United States. Results pages are private links that only people with the link can open.

Health information

EveryRamp is not a HIPAA business associate, and we do not knowingly collect protected health information (PHI). Our tests only reach the public, unauthenticated pages and documents you give us. Please do not send us, or link us to, a page or document containing real patient data; use a blank template if you want a patient-facing form tested. See our terms of service for the full clause.

How long

Free-scan results, emails you send us, and email drafts for 12 months. Test results and files for orders until you ask us to delete them; invoice records (number, amount, organization, dates) for as long as the law requires. Reports we prepare about public websites before contacting an organization for 24 months. Email us and we delete your information sooner, including the emails you sent us, except what the law requires us to keep and the record that you asked us not to email you. We also keep a weekly backup copy of our records in encrypted storage; each backup is deleted automatically after 90 days, so information deleted at your request is gone from every backup within 90 days.

If something goes wrong

If we discover a security incident that exposes your information, we will tell you by email within a few business days of confirming it, describing what happened and what we are doing about it. Because EveryRamp is not a HIPAA business associate (see "Health information" above), the HIPAA breach-notification rule does not apply to us; if that ever changes, we will follow it (45 CFR part 164, subpart D). Our internal incident-response steps are written down and followed the same way every time, whether or not any law requires it.

Contact

hello@everyramp.com · 2261 Market Street STE 93475, San Francisco, CA 94114