Privacy
Last updated 23 October 2026 · Applies to everythingrelevant.co.uk, the EverythingRelevant app and the EverythingRelevant API
EverythingRelevant reads UK business news and tells you the handful of stories, grants and tax changes that touch your business. To do that we need to know a little about your business. This page says exactly what we hold, why, for how long, and how to get it removed.
Who is responsible
The data controller is Micreations Ltd (company number 16797696), trading as EverythingRelevant, 3rd Floor, 86–90 Paul Street, London EC2A 4NE, United Kingdom. Contact: privacy@everythingrelevant.co.uk. We are registered with the Information Commissioner's Office (ICO), registration number ZC280904.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Your business answers: business name, sector, council area, where you sell (Amazon, Etsy…), plans, what you sell | To choose which stories, grants and deadlines are relevant to you | Contract (providing the service); for the signed-out preview, legitimate interest |
| Account details: email address, sign-in method, password hash or provider token | To sign you in and keep your follows | Contract |
| Your follows and choices: companies, places and topics you follow, stories you marked “not for me”, muted sources | To build your daily brief and feed | Contract |
| Your daily briefs (the items shown to you each day and whether you saw them) | So the brief changes day to day and we do not repeat ourselves | Contract |
| Email, push or WhatsApp delivery details and consent, if you turn them on | To send you the morning brief the way you asked | Consent (you can withdraw it at any time in settings) |
| Usage counts for the API and AI features (per app key and per account, per day) | Fair-use limits, abuse prevention and billing | Legitimate interest |
| Technical logs at our hosting providers (IP address, request time, errors), kept briefly | Security and keeping the service running | Legitimate interest |
We do not use advertising trackers, analytics cookies or fingerprinting. We do not sell or share your data for marketing. We count visits with Cloudflare Web Analytics, which sets no cookies, stores nothing on your device and only gives us totals (pages viewed, country, browser type).
What we send to AI
We use an AI model (Anthropic's Claude) in three ways:
- Scoring the news. Public news stories are scored and given a one-line “why it matters” per sector (for example “UK small businesses in the Hospitality & food sector”). No personal data is involved, and those lines are shared by everyone in that sector.
- Checking stories against your business. When you are signed in, we send your business answers (business name, sector, town or postcode area, size details such as staff and turnover if you gave them, what you sell and your plans) and the companies, places and topics you follow, together with the stories, so the AI can say which ones touch your business.
- Ask about this story (Premium). We send your question, the story and your business answers, so the answer fits your business.
We never send your email address or sign-in details to the AI provider. Anthropic acts as our processor: it uses what we send only to give us the answer, does not use it to train its models, and processes it in the United States under the safeguards described below. If you would rather your answers were not used this way, leave the optional fields blank or ask us to delete them.
Storage in your browser
If you use the preview on the home page, your three answers are saved in your browser's local storage (not a cookie) so the brief is still there when you come back. Nothing else is stored in your browser except the sign-in session when you sign in. Clear your site data to remove it.
You sign in with a one-time link sent to your email address; there is no password. The sign-in session is kept in your browser's local storage until you sign out.
Pictures in the feed
Story pictures load straight from the publisher's website (for example a newspaper's image server). We ask your browser not to tell them which page you came from, but like any website they see your IP address when they send the picture. We do not share anything else with them.
Where your data lives and who processes it
- Supabase (database, sign-in, functions) — London, UK region (AWS eu-west-2).
- Cloudflare — serves the website, counts visits without cookies (Web Analytics) and forwards email sent to our addresses.
- Anthropic (United States) — AI that scores stories, checks them against signed-in businesses and answers Ask questions, as described in What we send to AI.
- Supabase Auth email (or the email provider set as its sender) — sends your sign-in links.
- News publishers — serve the pictures in your feed, as above.
- Resend — sends the morning brief email (only if you turn it on) and the emails about API key requests.
- If you turn on WhatsApp delivery: Meta (WhatsApp Business) receives your phone number and the messages we send you.
Where a provider processes data outside the UK, it is under the UK International Data Transfer Addendum or an adequacy decision.
How long we keep things
| Data | Kept for |
|---|---|
| Account, business answers, follows | Until you delete your account |
| Daily briefs | 90 days |
| News stories we read | 30 days |
| AI usage counts | 90 days |
| API usage counts (per app key, no personal data) | 13 months |
| WhatsApp messages and link codes | 90 days / 1 day |
| API key requests (name, email, organisation, website) | While the key is in use; declined or switched-off requests 180 days. The scrambled IP fingerprint: 30 days |
| Unused delivery tokens | 12 months |
You can delete your account at any time in Settings on the website or in You on the app. Deleting your account removes your account and everything linked to it (answers, follows, briefs, hidden stories, delivery settings) straight away.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and withdraw consent for emails, push or WhatsApp at any time. Email privacy@everythingrelevant.co.uk; we answer within one month. You can also complain to the ICO at ico.org.uk.
Apps and websites built on the EverythingRelevant API
Other apps (for example TaxUnderstood) show EverythingRelevant content using our API. Each app has its own key, which only meters usage. When you sign in to such an app with your EverythingRelevant/TaxUnderstood account, the same account and the same rules above apply.
Other websites can show the feed too, using our embed (everythingrelevant.co.uk/developers). The embed sets no cookies, stores nothing on the reader's device and doesn't track readers; it only sends us the sector, town and topics the website chose, and our servers see the reader's IP address as with any website. If you ask for a key, we keep your name, email address, organisation, website and what you said you'll use it for, to review the request, send you the key and contact you about it (legitimate interest). To stop spam we keep a scrambled fingerprint of the IP address the request came from for 30 days.
Sharing stories and the morning email
When you share a story, the link goes to a page on our site (everythingrelevant.co.uk/s/…) showing that story's headline, why it matters and a link to the publisher. We don't record who shared it or who opened it, and the page has no scripts or cookies.
The morning email carries a "stop these emails" link that works without signing in; it only switches the email off.
Changes
If this notice changes in a way that matters, we say so on the site and, if you have an account, by email.