This policy describes how Epiglobe handles information when you browse the network, create an account, or use its business profiles, feed, pitches, workspaces, and messaging features. For support or privacy requests, contact support@epiglobe.org.
1. Information we handle
- Account information: your name, email address, authentication identifiers, and account verification status. If you use email and password, Supabase handles the password authentication record.
- Information you contribute: business profiles, contact details you choose to publish, offerings, posts, documents and images, pitches, messages, invitations, interests, saved items, and business relationships.
- Service and security information: request and error logs, timestamps, email delivery information, and network information such as IP addresses. Epiglobe uses hashed email and IP-based counters to limit repeated authentication attempts.
2. Google sign-in
When you choose Google sign-in, Google provides basic identity information to Epiglobe through Supabase: your Google account identifier, name, email address and its verification status, and profile picture when available. We use this information to authenticate you, create or find your Epiglobe account, and identify you within the service.
Supabase stores the authentication identity and profile metadata. Epiglobe stores your name, email address, and the mapping between your authentication identity and your Epiglobe account. The current app uses initials for personal account avatars; it does not display your Google profile picture.
Google sign-in does not authorize Epiglobe to read your Gmail, Google Drive files, calendar, or contacts. Epiglobe does not sell Google account information or use it for advertising. Information received from Google is used for the account and service purposes described here, subject to the Google API Services User Data Policy.
3. How information is used
We use information to operate your account; show the content you publish; deliver messages and shared pitches; manage workspace membership, relationships, and saved content; send verification and password recovery emails; respond to support requests; investigate reports; and protect the service from misuse.
Your name identifies you in relevant account and conversation views. Your email is used for sign-in, verification, recovery, invitations, and recipient checks for restricted pitches. It is not automatically added to a public business profile; any contact details you publish in a profile are public.
4. Who can see your content
- Public content: published business profiles, offerings, public materials, posts, and their images can be viewed without signing in. Public pitch links can be opened by anyone who has the link.
- Restricted pitches: access is checked against the invited recipient’s verified email or membership of the sending business.
- Workspaces and conversations: business workspace records are available to authorized business members. Conversations and their attachments are available to the participating personal accounts or members of participating businesses.
- Reports and administration: reports and the information included in them are available to authorized administrators for review.
Publish and share only information you intend the relevant audience to receive. Recipients can retain copies, and public material may be indexed or copied outside Epiglobe. Access controls do not provide end-to-end encryption.
5. Service providers
Epiglobe relies on providers that process information to run the service:
- Supabase: account authentication, Google identity metadata, verification, password recovery, and authentication sessions.
- ChatGPT Sites and Cloudflare: application hosting, request handling, operational logs, database records, and uploaded file storage.
- Resend: delivery of verification and recovery emails, including the recipient address, message contents, and delivery status.
- Zoho Mail: hosting the support inbox, including the email address, message contents, and attachments you send us, and our replies.
- Google: Google sign-in and the consent you give through your Google account.
Epiglobe operators and these providers may access relevant information to operate, support, and protect the service. Information may be processed in countries other than your own. Links you choose to open outside Epiglobe are governed by those services’ own privacy practices.
7. Retention and deletion
Account, business, and communication records remain stored to support the service until they are removed through an available feature or a reviewed deletion request. There is currently no automatic account deletion after a period of inactivity.
Changing visibility, archiving a material, removing a post from view, or revoking a pitch does not necessarily erase its underlying records or uploaded files. Pitches retain the material version originally shared, so an archived or updated material can remain available through an existing pitch until that pitch is revoked.
Contact support to request deletion of your account or associated information. We will review the request, verify your authority, and explain any shared business records or information that cannot be removed, including information needed to resolve an active dispute, prevent abuse, or meet an applicable legal obligation. Copies held by recipients or independent services are outside Epiglobe’s deletion controls.
8. Your choices and requests
You can edit business information you are authorized to manage, choose material visibility and pitch access, revoke pitches, manage saved items and follows, and sign out of your current session.
You can remove Epiglobe’s Google connection from your Google account connections. Disconnecting Google does not delete your Epiglobe account or information already stored in the service. If Google is your only sign-in method, arrange another sign-in method before disconnecting it.
To request access, correction, or deletion, or to raise a privacy concern, email support@epiglobe.org from the email associated with your account. Describe the request and any relevant business workspace. We may ask for information needed to verify your identity or authority; do not send passwords or verification codes.
9. Policy updates
We may update this policy when the service or its data practices change. The date at the top identifies the current version. Review this page before sharing information if you want to check the latest practices.