Epta Sky Icon
EPTASKY
Data Protection & Governance

Privacy Policy

This Privacy Policy describes how Epta Sky and its software platforms (including EptaReach) collect, use, store, and safeguard your data when you visit our websites or utilize our applications.

Effective: October 5, 2026•Applies to eptasky.com and all sub-products

1.Introduction & Scope

Epta Sky ("we", "us", or "our") operates eptasky.com and associated software platforms, including our flagship outreach platform EptaReach. We are committed to protecting the privacy, confidentiality, and security of our users, clients, and website visitors.

By accessing our website, creating an account, purchasing service credits, or interacting with our applications, you acknowledge and agree to the practices outlined in this policy. If you do not agree with any terms, please discontinue using our services immediately.

2.Information We Collect

We collect information to provide, maintain, and optimize our engineering solutions and software products. The types of data we collect include:

A. Account & Identity Data

When you register for an account (including via our centralized auth portal accounts.eptasky.com), we collect your name, business email address, company name, encrypted credentials, and profile preferences.

B. Billing & Transaction Information

When purchasing credits or subscribing, our PCI-DSS compliant third-party payment gateways (such as Stripe) process your payment credentials. Epta Sky never stores complete credit card numbers or CVV codes on our servers. We store transaction records, wallet credit balances, and invoice receipts.

C. Software Platform & Integration Data (EptaReach)

To operate cold email and mailbox warmup automation, you may connect third-party mailboxes (Google Workspace, Microsoft 365, IMAP/SMTP). We process OAuth authentication tokens, recipient contact lists you upload, email sequence templates, and campaign telemetry (open, click, and bounce rates). We never sell your prospect lists or campaign data to third parties.

D. Technical & Usage Logs

We automatically log IP addresses, browser types, operating systems, referring URLs, device identifiers, and timestamped interaction telemetry for security auditing and performance diagnostics.

3.How We Use Your Information

  • To provision, authenticate, and manage your account and credit balances.
  • To execute cold email sequences, automated mailbox warmups, and deliverability checks as instructed by you.
  • To detect and prevent fraudulent account creation, spam threshold violations, and abuse of our network infrastructure.
  • To process transactions, generate tax invoices, and administer our Refund Policy.
  • To communicate critical system alerts, maintenance windows, and security updates.
  • To analyze edge telemetry and continuously improve the speed and deliverability of our platforms.

4.Legal Bases for Processing (GDPR & Global Compliance)

If you reside within the European Economic Area (EEA), the United Kingdom, or jurisdictions with comparable privacy regulations, we process your personal data under the following legal frameworks:

Contractual Necessity

Processing necessary to deliver the SaaS services and features you requested under our Terms of Service.

Legitimate Interests

Operating secure infrastructure, preventing malicious bots, and optimizing deliverability protocols.

Legal Obligation

Compliance with financial accounting laws, anti-spam statutes, and court subpoenas.

Consent

Where you provide explicit consent, such as opting in to marketing newsletters or beta testing.

5.Data Security & Encryption

We employ enterprise-grade security standards across all layers of our application stack:

All network communication is encrypted in transit using TLS 1.3 encryption protocols.
Sensitive authentication tokens and database records are encrypted at rest using AES-256 standard.
Role-based access control (RBAC) strictly limits internal staff access to production customer environments.
Automated real-time monitoring and daily encrypted backups safeguard against data loss.

6.Your Rights & Data Control

Depending on your jurisdiction, you possess specific legal rights regarding your personal information, including:

  • Right of Access: Request a complete copy of personal records held by Epta Sky.
  • Right to Rectification: Update inaccurate or outdated profile and contact details.
  • Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account, lead databases, and associated metadata.
  • Right to Data Portability: Export your campaign data and lead lists in structured CSV/JSON formats.
  • Right to Restrict or Object: Opt-out of non-essential analytical tracking at any time.

To exercise any of these statutory rights, please submit an official request to our privacy team at privacy@eptasky.com. We respond to all verified inquiries within 30 days.

7.Third-Party Sub-Processors

To maintain sub-second global edge response times and secure payment flows, Epta Sky partners with certified cloud infrastructure providers:

Vercel Inc.
Edge CDN & Serverless Hosting
Stripe, Inc.
PCI-DSS Level 1 Billing Gateway
Oracle Cloud Infrastructure
Encrypted Database & Dispatch Nodes

8.Cookies & Local Storage

We use strictly necessary cookies to keep you signed in across our domain mesh (.eptasky.com) and persist your session securely. We also utilize local storage for user interface state preferences. You may configure your browser to reject cookies, though certain interactive features of our dashboard may become inaccessible.

9.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our security protocols, please contact our Data Governance Officer:

Epta Sky Privacy & Legal Division