Privacy Policy

Epsolon Inc. (“Epsolon”, “we”, “us”) is a United States information technology company. We build and operate business software for our clients. This policy covers this website and the services we provide.

You can reach us about anything in this policy at info@epsolon.com.

We collect only what we need, and we keep the categories separate:

• Information you give us. When you contact us through this site we collect your name, email address, and any company name, phone number or message you choose to include.
• Client business data. When we build or operate software for a client, that software processes the client's own business data — orders, inventory, purchasing, supplier and marketplace records. This data belongs to the client. We process it on their instruction and for no other purpose.
• Basic technical information. Standard web request data such as IP address, browser type and pages requested, used to keep the site available and secure.

• We do not sell personal information, and we never have.
• We do not share client business data with other clients, under any circumstances.
• We do not use client business data to train machine-learning models for other customers.
• We do not add you to a marketing list because you sent us an enquiry.

• To reply to your enquiry and, if it goes further, to provide services to you.
• To operate, monitor, secure and support the software we run for clients.
• To meet legal, tax and accounting obligations.

Some of the software we build connects to third-party commerce platforms on a client's behalf, using credentials the client authorises. Where we access data through those platforms:

• We access only the data required to deliver the agreed functionality.
• We use it solely to provide that functionality to the client whose account it came from.
• We do not combine one client's platform data with another's.
• We retain it only as long as needed for the service, and delete it on request or at the end of the engagement.
• We comply with the data protection and acceptable use requirements of the platforms we integrate with.

We share information only with service providers who help us operate — hosting, database, email delivery and error monitoring — and only to the extent they need it to perform that function. They are bound to protect it and may not use it for their own purposes. We may also disclose information where legally required.

We encrypt data in transit and at rest, restrict access on a least-privilege basis, keep credentials out of source code, and log administrative access. Our security practices are described in more detail on our Security page.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify affected parties promptly and as required by law.

Enquiries are kept while we are in contact and for a reasonable period afterwards. Client business data is retained for the life of the engagement and deleted on request or within a reasonable period after it ends, except where we must keep records to meet a legal obligation.

You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to object to certain processing and to lodge a complaint with a regulator. Write to info@epsolon.com and we will respond.

Where we process data on behalf of a client, requests about that data should go to the client, who is the controller of it. We will support them in responding.

Our services are for businesses. We do not knowingly collect information from anyone under 16.

If we change this policy we will update the date at the top of this page. Material changes affecting existing clients will also be communicated directly.