1. Overview
At Epsi Prime, we are committed to protecting your privacy and ensuring that your personal data is handled responsibly and transparently. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our services through various platforms (Website, Marketplace, Developer Program, Partner Program, Services API, or other products/services — collectively, the “Services”).
By accessing or using our Services, you acknowledge that you have read, understood, and agreed to this Policy.
2. Information We Collect
When you engage with our Services, we may collect and process various categories of data to ensure functionality and improve user experience. We may collect:
Personal information: name, email, phone number, company information.
Payment information: credit card details or payment method (although such data is never stored directly on our systems but instead handled by certified third-party providers.).
Usage data: access logs, IP address, browser types, device identifiers, and cookie information.
If you or your organization use our CRM platforms, we may process customer-related data entered into the system, such as customer records, contacts, communications, and transactions.
3. How We Use Your Information
We process your personal data for specific and legitimate purposes. Primarily, we use it to provide, maintain, operate, and improve our Services, the information may be used to provide account access, authenticate users, provide security, process payments, and provide customer support, respond to requests or inquiries; and to analyze system performance and optimize user experience.
We also use personal data to contact you about product updates, security alerts, or offers where permitted by law. In certain cases, anonymized and aggregated data may be used for research, analytics, or to enhance the user experience on the Epsi Prime platform. We will never use customer CRM data for our own marketing purposes, nor will we sell your personal information to third parties.
4. White-Label Privacy Notice
When our Services are provided on a white-label basis, Epsi Prime acts as a data processor, and the customer organization acts as the data controller. This means the organization is responsible for how end-user data is collected and used, while Epsi Prime processes such data strictly under their instructions. End-users of white-label platforms should consult the privacy policy of the rebranding organization.
5. Legal Basis for Processing
For users in other regions with data protection laws, Epsi Prime processes personal data based on:
Performance of contractual obligations;
Compliance with legal and regulatory requirements;
Legitimate interests such as improving security and user experience;
Your consent (where required).
6. Data Sharing and Disclosure
Epsi Prime does not sell, rent, or trade your personal information. We may, however, share your data under limited and controlled circumstances. This includes sharing with trusted third-party service providers—such as cloud hosting providers, payment processors, and analytics services—strictly for the purpose of delivering and improving our Services. All of these providers are contractually obligated to protect your data and use it only for the purposes determined by Epsi Prime.
We may also disclose personal data when required by law, court order, or regulatory authorities, or in connection with business transactions such as mergers or acquisitions. In all cases, we ensure that appropriate confidentiality and security measures are in place.
7. Data Retention
We retain personal data only for as long as it is necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Once the purpose of processing has been fulfilled, the information will be securely deleted or anonymized in accordance with our internal retention procedures and applicable laws. We will delete data upon request unless the data is necessary for processing purposes or due to technical problems. The standard period is 30 days.
8. Data Security
Protecting your data is our highest priority. Epsi Prime uses industry-leading technical and organizational measures to protect your data, including AES-256 encryption for stored data and TLS 1.3 encryption for data transmitted over our networks. We also offer Multi-Factor Authentication (MFA) for user accounts, implement strict role-based access controls (RBAC), and conduct regular security reviews and audits.
Financial transactions are processed in compliance with PCI DSS standards. We further perform penetration testing and system monitoring to proactively detect and mitigate risks. Despite these measures, no method of storage or transmission is entirely secure, and we cannot guarantee absolute security. However, we are committed to continuously updating and strengthening our defenses.
9. Your Rights
Depending on your jurisdiction, you may have certain rights under applicable data protection laws such as the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). These rights may include the ability to request access to the personal information we hold about you, to request corrections or deletions, to object to specific processing activities, and to request the export of your data in a machine-readable format.
You also have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal. To exercise these rights, please contact us at privacy@epsilabs.com.
10. Cookies and Tracking
We use cookies and similar tracking technologies to improve the performance and functionality of our Services. Cookies may be used to authenticate users, remember preferences, analyze behavior, and optimize performance. You may configure your browser to reject or manage cookies, but please note that disabling cookies may affect certain features or functionalities of our platforms.
11. International Data Transfers
As Epsi Prime operates globally, your data may be transferred to and processed in countries outside of your country of residence. In such cases, we ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses and compliance with GDPR, CCPA, PCI DSS, and other applicable laws and regulations.
12. Updates to Privacy Policy
We may update this Privacy Policy from time to time in order to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If significant changes are made, we will notify users via email or through our Services. Your continued use of the Services following such updates constitutes acceptance of the revised Policy.
13. Contact Us
If you have any questions about the Privacy Policy, please contact privacy@epsilabs.com.