Privacy Policy

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Within Your Organization: Team members within your account can see shared case data, milestones, and related content as determined by your role and permissions.
• Service Providers: We use third-party services to operate the platform, including Supabase (database and authentication), Resend (email delivery), and Twilio (SMS delivery). These providers only process data on our behalf and are bound by contractual obligations to protect your information.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Row-level security policies at the database level
• Role-based access controls
• Regular security audits

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing activities
• Export your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at josh@epiphanyassociates.com.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Epiphany Associates
Email: josh@epiphanyassociates.com