This policy explains how Cognivo FZ LLC ("we") handles personal data in Epicurus Pro and on epicurus.pro. For data our business customers put into the Service, the customer is usually the controller and we act as their processor under our Data processing terms.
1. What we collect
- Account data: name, work email, phone number, job title, organisation, sign-in and security information.
- Connected data: emails, calendar events, contacts and Teams messages from accounts you connect, so the agent can find and act on them.
- Conversations and memory: chats, voice sessions, voice notes and facts the agent remembers for you.
- Calls and messages: call recordings, transcripts, summaries, SMS and WhatsApp content and logs when you use phone features.
- Billing data: plan, invoices and payment status. Card details are held by Stripe, not us.
- Usage data: logs, device and browser information, IP address and audit events.
2. How we use it
To provide and secure the Service, carry out your instructions, sync your connected accounts, remember information you ask it to, process payments, provide support and improve reliability. We do not sell personal data and we do not use your content to train AI models.
3. Legal bases
Performance of our contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations, and consent where required (for example optional cookies).
4. Who we share it with
Trusted sub-processors that help us run the Service, including hosting (DigitalOcean, London), AI processing (OpenAI), telephony and messaging (Twilio), payments (Stripe), email delivery (Brevo), network security (Cloudflare) and app integrations you choose to connect. Microsoft and Google receive requests only for accounts you connect. We may disclose data where the law requires.
5. International transfers
Our main hosting is in the UK. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.
6. How long we keep it
For as long as your account is active and as needed to provide the Service. After an account closes, we delete or anonymise its data within 90 days, unless we need to keep some records longer for legal, tax or security reasons.
7. Your rights
You can ask to access, correct, delete, restrict or port your personal data, or object to processing. If your organisation manages your account, we may refer your request to them. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
8. Security
We use encryption in transit, access controls, two-factor authentication, audit logging and hashed credentials. See Security & trust.
9. Contact
Questions or requests: hello@epicurus.pro.