Privacy & control

1. Who we are and what this covers

Epoch AI is a Virtual Internet product. In this policy, “Epoch AI,” “we,” and “us” refer to the team operating the Epoch AI website and applications. This policy covers the public website, the browser-based checking workspace, and the Epoch AI Android app.

The analysis features connect to a remote Epoch AI analysis service. Some technical details of that service, including its legal operator and retention settings, are not available in this app’s published code. We identify those limits below rather than imply that local app controls also delete server-side data.

2. Information we process

• Contact enquiries: name, work email address, company, and the message you provide in the website contact form.
• Content you ask us to check: text, links, news article URLs, chat messages, and files or folders you select for scanning in the Android app, plus resulting assessments, explanations, and chat responses.
• Optional Android protections: if you enable notification monitoring, the app can read supported notification content to find links for checking. If you enable SMS protection, Android grants SMS access; the app reads incoming messages to detect links and, as the in-app disclosure states, sends detected links for analysis rather than submitting messages without links. You can disable these protections and revoke their permissions in Android settings.
• Optional voice input: when you choose voice input, Android’s speech-recognition service receives microphone audio and returns a transcript. The Android speech-recognition provider may process that audio under its own terms. Epoch AI receives the resulting text when recognition finishes; the app’s voice flow does not upload an audio recording to the Epoch AI analysis service.
• Technical and session information: the browser or device, network, hosting provider, and analysis service may process ordinary connection information such as IP address, request time, and browser or device details when a request is made. The live web workspace also establishes an anonymous service session using a cookie; the analysis service controls its expiry.

3. How we use information

We use submitted content to run the check you request, return a verdict and supporting signals, maintain the history you choose to keep on your device, operate optional protections, respond to enquiries, and protect the service from abuse or technical failures. We do not use contact-form details to run content checks.

We do not make a promise here that analysis providers do not use or retain submitted material for their own purposes: the provider’s applicable terms and configuration must be confirmed by the service operator. Avoid submitting sensitive information unless you are comfortable sending it to the analysis service for review.

4. What happens to submitted content

When you start a check, the selected text or link is sent to the analysis service so it can assess the content and return a result. Android background protection sends detected links for analysis when the relevant feature is enabled. Chat prompts, transcripts, and selected files or folder contents are sent to the relevant chat or scanning service when you use those features. The service may need to receive the submitted content and associated request metadata to perform the check.

Results and check history are saved locally in your browser or on your Android device. The browser workspace uses IndexedDB; the Android app uses its local app database. Local history can include the submitted content, a preview, the assessment, and its date. Clearing history or deleting a record in the app removes the corresponding local record. These actions do not establish deletion from the remote analysis service or its logs.

5. Storage and retention

Web check history remains in the browser until you clear it in the workspace or remove the browser’s site data. Android check and alert history remains on the device until you delete records or clear history using the app. Android settings and uninstalling the app may also remove app data according to the device’s behavior.

The website contact form sends the enquiry to our email-delivery provider, Resend, for delivery to the Epoch AI team. Enquiries may remain in the recipient’s mailbox and provider systems according to their retention practices. We have not verified a fixed deletion period for enquiries, server-side analysis requests, anonymous session records, or service logs. Contact us to ask about a specific request; server-side deletion depends on the analysis service operator’s capabilities and retention rules.

6. Service providers and sharing

Information is sent to providers involved in delivering the feature you use: the analysis service processes check submissions; Resend delivers website contact enquiries; and hosting, network, browser, or Android platform providers handle service delivery and device functions. Android analysis is initiated through the integrated Epoch AI fraud-detection SDK. We do not sell personal information or share it for third-party advertising through functionality identified in this app’s source code.

The source code does not identify every analysis-service subprocessor, its processing location, or whether submitted content is used to improve models. Those details must be confirmed by the service operator. We will update this policy when verified information is available.

7. Cookies and similar technologies

The live web workspace uses a cookie-backed anonymous session so the analysis service can associate related requests with a session. The website code reviewed for this policy does not include advertising cookies or an analytics tracking script. Your browser and hosting provider may still use or retain technical data needed to deliver and secure the site. You can manage cookies in your browser; blocking them may prevent live checks from working.

8. Your controls and privacy rights

You can choose whether to submit content, enable Android monitoring, or provide a contact enquiry. You can clear browser history, delete individual Android records, clear app history, turn off protections, and revoke Android permissions. Depending on where you live, you may also have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing.

To make a privacy request, email contact@epoch.ai with “Privacy request” in the subject and describe the request and the service involved. We may need to verify your identity. We will explain if information is held by a separate provider and what action is available. Requests about server-side analysis data may require that provider’s involvement.

9. Security

We use measures in the application and website intended to protect information, including platform permission controls, input validation, and request safeguards on the contact form. Information sent for analysis leaves your device or browser and is handled by the remote service. The repository does not establish the remote service’s encryption, access-control, backup, or incident-response practices, so we do not make specific claims about those controls here. No internet transmission or storage method can be guaranteed completely secure.

10. Changes to this policy

We may update this policy as the product or its data practices change. Material changes will be reflected on this page.

11. Contact

For privacy questions or requests, contact Epoch AI at contact@epoch.ai.