Privacy Policy

1. Controller

The data controller is Qivo Innovation Ltd trading as epody, United Kingdom. Contact: info@eprim.co.uk.

2. What we collect

• Account data: name, email, company, role.
• Billing data: billing address, VAT ID and payment metadata (card details are handled by Stripe, not stored by us).
• Customer content: product data, images, copy and files you upload.
• Usage data: pages viewed, actions taken, device and browser information, IP address.
• Support data: messages you send us and any attachments.

3. Why we use it (lawful bases)

• Contract: to provide the Service, run AI assessments, track SKU allowances and deliver support.
• Legal obligation: to issue VAT-compliant invoices and keep required records.
• Legitimate interests: to secure the platform, prevent abuse and improve the product.
• Consent: where required, for optional communications; you can withdraw at any time.

4. Sharing and processors

We share personal data only with the processors we need to run the Service:

• Supabase — hosting, database and authentication.
• Stripe — payment processing, invoices and VAT calculation.
• Google (Gemini) and other AI providers — running content quality assessments on product data you submit. Providers do not train foundation models on your data.
• Email delivery providers — sending transactional and notification emails.

We do not sell personal data. Some processors may transfer data outside the UK/EEA; we rely on Standard Contractual Clauses or equivalent safeguards.

5. Retention

We keep account and customer content while your account is active and for a reasonable period afterwards. Billing records are kept for at least 6 years to meet UK tax law. You can request deletion at any time; some data may be retained where required by law.

6. Your rights

Under UK GDPR you have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• request deletion (subject to legal exceptions);
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time;
• complain to the UK ICO (ico.org.uk).

To exercise any of these rights, email info@eprim.co.uk.

7. Security

We use industry-standard measures including encryption in transit, row-level security on the database, principle-of-least-privilege access controls and regular security scans. No system is perfectly secure — we will notify affected users of any material breach as required by law.

8. Cookies

We use strictly-necessary cookies to keep you signed in and to remember minor UI preferences (for example, dismissed banners). We do not use advertising cookies or third-party tracking cookies on the portal.

9. Children

The Service is not intended for children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy from time to time. Material changes will be notified in-app or by email. Continued use after changes constitutes acceptance of the updated policy.

11. Contact

Privacy questions or data requests: info@eprim.co.uk.