Privacy Policy

This Privacy Policy describes how EpiphanyMade ("EpiphanyMade," "we," "us") collects, uses, and discloses information in connection with agent-cold-email (the "Service"), including this waitlist and marketing site and, once live, the platform API/MCP/CLI surface.

1. Who this covers

This policy covers (a) visitors to this site, including waitlist signups, and (b) customers and their end users once the Service is live. It does not cover the third parties your own cold-email recipients interact with independently.

2. What we collect

• Waitlist / early-access signup: the email address you submit, and the timestamp/source of submission.
• Account signup (once live): brand name, contact email, and — for paid tiers — billing information processed by Stripe (we do not store full payment card numbers ourselves).
• Tenant configuration: the physical postal address and sender identity you provide for use in your own outbound email footers (required for CAN-SPAM compliance), your persona/offer text, and your lead lists, to the extent you provide them to the Service to run campaigns.
• Operational data: API usage, tool calls, and platform logs needed to operate, secure, meter, and bill the Service.
• Site analytics: we do not load third-party analytics or ad trackers on this site as of this writing; if that changes, this policy will be updated first.

3. How we use it

• To operate the Service: provisioning, sequencing, reply handling, billing, and support.
• To send you early-access and product emails if you join the waitlist or become a customer — always CAN-SPAM compliant, always with a working unsubscribe.
• To monitor for abuse and enforce the Acceptable Use Policy — see "Monitoring" below.
• We do not sell your personal information.

4. Your data as a customer — you are the sender

If you are a customer, you (not EpiphanyMade) are the sender of record for outreach you run through the Service — see the customer-is-sender designation in the Terms of Service. Lead lists and recipient data you provide are processed by the Service on your behalf to deliver the outreach you configure; we do not use your lead data for our own marketing purposes and do not sell it.

5. Monitoring consent

By using the Service, you consent to automated monitoring of send volume, bounce rate, spam-complaint rate, and warmup/placement signals for the purposes of guardrail enforcement (suppression, per-mailbox caps, auto-pause on complaint thresholds) and abuse prevention protecting the shared vendor infrastructure underlying the Service. This monitoring is operational and automated, not manual review of your message content except where necessary to investigate a specific abuse report or legal obligation.

6. Data sharing

We share data with the vendors and processors necessary to run the Service: Stripe (billing), our domain registrar and mailbox/warmup vendor(s) (to provision and operate your infrastructure), and Cloudflare (hosting/infrastructure). We do not sell personal information to third parties, and we do not share your lead lists or recipient data outside of what's required to deliver the Service you configured.

7. Data retention

We retain account and operational data for as long as your account is active plus a reasonable period for legal, tax, and dispute-handling purposes. Waitlist emails are retained until you unsubscribe or the Service reaches general availability and you're converted or removed. You may request deletion — see Contact below.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information, and to opt out of certain processing. EU/UK/GDPR-scoped processing is currently out of scope for this Service (US-first at this stage — see the Terms); this section will be expanded with a full CCPA/CPRA and, if applicable, DPA-backed rights process before general availability.

9. Security

We use industry-standard safeguards for data in transit and at rest. No system is perfectly secure; see SECURITY.md in the repository for how to report a vulnerability.

10. Children

The Service is a business tool not directed at children, and we do not knowingly collect personal information from anyone under 16.

11. Changes to this policy

We'll update the "Last updated" date above and, for material changes affecting waitlist or customer emails, notify affected users by email before the change takes effect.

12. Contact

Questions or requests: privacy@epiphanymade.com. EpiphanyMade is the operating entity for this Service; a full physical business address will be published here prior to general availability.