Privacy Policy
Last updated: May 2026
1. Information We Collect
We collect information you provide directly: your name, email address, facility details (name, industry, state, employee count), and incident data you enter into the platform. We also collect usage data such as log files, IP addresses, and session activity to operate and improve the service.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Epostrix platform
- Process AI-assisted incident analysis and compliance recommendations
- Send transactional emails (account verification, password reset)
- Respond to support requests
- Comply with legal obligations
We do not sell your data to third parties. We do not use your facility or incident data to train AI models.
3. Data Storage and Security
Your data is stored on servers located in the United States. We use industry-standard encryption in transit (TLS) and at rest. Access to production data is restricted to authorized personnel only. Passwords are hashed using bcrypt and are never stored in plain text.
4. Third-Party Services
We use the following third-party services:
- Anthropic — AI analysis of incident narratives. Incident text is sent to Anthropic's API for processing.
- Stripe — Payment processing. We do not store credit card numbers.
- Resend — Transactional email delivery.
5. Data Retention
We retain your account data for as long as your account is active. If you close your account, we will delete your personal information within 30 days, except where we are required to retain it by law (e.g., billing records).
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at privacy@epostrix.com. We will respond within 30 days.
7. Cookies
We use session cookies for authentication. We do not use tracking or advertising cookies.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the platform. Continued use after changes constitutes acceptance.
9. Contact
Questions about this policy? Contact us at privacy@epostrix.com.