Legal
Privacy policy
Last updated August 14, 2026
What Ephoryn processes
We process account and workspace details, subscription status, and the billing events you authorize Ephoryn to read from Stripe or Paddle. We do not request card numbers and cannot create charges, issue refunds, or modify your customers through a connected data source.
Website analytics
To understand basic interest in Ephoryn, our public pages record page views using a random browser identifier that is replaced each UTC day and a random session identifier. We store the public path and, when available, the hostname of the external referring site. We do not store visitor IP addresses, query strings, user agents, emails, or advertising profiles for this measurement, and the collector respects the browser's Do Not Track setting.
Why we use this data
Ephoryn uses observable billing signals to calculate a deterministic billing-risk score, order an attention queue, and provide an explanation and practical review step. An AI service may turn the underlying signals into readable language; it does not decide the score. Customer email, name, and provider identifier are excluded from the AI explanation prompt.
Service providers
We use infrastructure and operational providers for hosting, authentication, database storage, billing, email delivery, error monitoring, and AI-generated explanations. Paddle acts as merchant of record for Ephoryn subscriptions.
Security and retention
Provider credentials are encrypted at rest. Access and explanation caches are isolated by workspace, and sensitive administrator actions can require multi-factor authentication. We retain information only while it is needed to provide, secure, and account for the service, subject to legal obligations.
Your choices
You can disconnect a billing data source, cancel your Ephoryn subscription, enable Do Not Track in your browser, or ask about access, correction, or deletion by contacting ephoryn.seguridad@gmail.com. Some records may be retained where law requires it.