Legal
Privacy policy
Last updated August 12, 2026
What Ephoryn processes
We process account and workspace details, subscription status, and the billing events you authorize Ephoryn to read from Stripe or Paddle. We do not request card numbers and cannot create charges, issue refunds, or modify your customers through a connected data source.
Why we use this data
Ephoryn uses observable billing signals to calculate a deterministic billing-risk score, order an attention queue, and provide an explanation and practical review step. An AI service may turn the underlying signals into readable language; it does not decide the score. Customer email, name, and provider identifier are excluded from the AI explanation prompt.
Service providers
We use infrastructure and operational providers for hosting, authentication, database storage, billing, email delivery, error monitoring, and AI-generated explanations. Paddle acts as merchant of record for Ephoryn subscriptions.
Security and retention
Provider credentials are encrypted at rest. Access and explanation caches are isolated by workspace, and sensitive administrator actions can require multi-factor authentication. We retain information only while it is needed to provide, secure, and account for the service, subject to legal obligations.
Your choices
You can disconnect a billing data source, cancel your Ephoryn subscription, or ask about access, correction, or deletion by contacting ephoryn.seguridad@gmail.com. Some records may be retained where law requires it.