Privacy Policy

• Account information — email address, username, and a hashed password when you register with email. If you sign in with Google or GitHub, we receive your email and profile identifier from that provider.
• Workspace content — spaces, blocks, text, and layout data you create in the app.
• Images and files — files you upload (for example, images attached to blocks), stored on our cloud storage provider.
• Session data — authentication cookies and session identifiers that keep you signed in.
• Analytics data — page views, navigation paths, device/browser type, and similar usage events collected through our analytics tools (see below).
• Error and performance data — technical logs and crash reports to help us fix bugs (via Sentry).

• To create and manage your account and authenticate you.
• To store, sync, and display your workspaces and uploads.
• To send transactional emails (welcome, password reset).
• To understand how the product is used and improve features.
• To monitor reliability, security, and fix errors.
• To comply with legal obligations where applicable.

We use cookies and similar technologies for essential purposes:

• Authentication — session cookies so you stay logged in across visits.
• Preferences — for example, your theme choice (light/dark) stored in a cookie.

Optional analytics cookies (PostHog) are only enabled if you click "Accept" in our cookie banner. You can decline analytics and still use Epsilon. You can clear cookies in your browser settings; signing out removes your session cookie.

We use PostHog for product analytics when enabled and when you have given consent (for example, page views and how you move through the app). PostHog may process IP address, browser metadata, and event timestamps. We do not sell your personal data.

We also use Sentry for error monitoring, which may include stack traces and request context when something fails.

We rely on trusted processors to run Epsilon, including:

• Cloud hosting and file storage (e.g. AWS S3)
• Email delivery (Resend)
• Google and GitHub (OAuth sign-in)
• PostHog (analytics) and Sentry (errors)
• Supademo (embedded product demo on the landing page)

Each provider has its own privacy policy governing how they handle data on our behalf.

We keep your account and workspace data for as long as your account is active. Session records expire automatically. Analytics and error data are retained according to our providers' settings and our operational needs, typically on the order of months unless a longer period is required for security or legal reasons.

You may request deletion of your account and associated personal data at any time by emailing us at hello@epsilonapp.site from the email address linked to your account. Please include your username so we can verify ownership.

After we confirm your request, we will delete or anonymize your account, workspaces, and uploads within a reasonable period (typically within 30 days), except where we must retain limited information for legal, security, or backup compliance. Backups may take additional time to cycle out.

You can also sign out and stop using the service at any time; that does not automatically delete stored data until you request deletion.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at the email below and we will respond within a reasonable time.

Epsilon is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

We may update this page from time to time. The "Last updated" date at the top will change when we do. Continued use of Epsilon after changes means you accept the revised policy.

Questions about privacy or data requests: hello@epsilonapp.site