Privacy Policy

1. Who we are

EPUfix is operated by Nicolae Cojuhari, Kurt-Tichy-Gasse 5/1/7, 1100 Vienna, Austria. We are the data controller for the personal data described below.

2. Information we collect

We collect the information you provide when you create an account and use the product: your email address, and whatever you enter into your workspace - business details, transactions, invoices, offers, contacts, and any files you upload. If you sign in with Google, we receive your name and email address from Google instead of a password.

When you subscribe to a paid plan, billing is handled by Stripe; we receive confirmation of your subscription status but never see or store your full card details.

3. How we use your information

We use it to operate the service: authenticate you, store and display your workspace data, process invoice payments you record, generate your reports and exports, and send account-related emails (e.g. trial or billing notices). We do not sell your personal data, and we do not use your financial data for advertising.

4. Data storage

Your account and workspace data is stored in a Postgres database hosted by Supabase. Files you upload (receipts, logos, attachments) are stored on Bunny.net's CDN. Each workspace is isolated from every other workspace, including other workspaces on your own account.

5. Authentication

Login and session management are handled by Supabase Auth using secure, HTTP-only cookies. We do not store your password in plain text. If you choose to sign in with Google, authentication is handled by Google and governed by Google's own privacy policy.

6. Payments

Billing for paid workspaces is processed by Stripe. We do not store your full payment card details - Stripe's own privacy policy applies to information you provide at checkout.

7. Cookies and analytics

We use one essential cookie set by Supabase Auth to keep you signed in. We do not use advertising cookies or third-party tracking cookies.

We use Ahrefs Web Analytics to see aggregate traffic to EPUfix - page views and general usage trends. It doesn't use cookies, doesn't collect personally identifiable information, and doesn't track you across other websites.

8. Third-party services

The product relies on the following processors:

• Supabase - database, authentication, and file storage for attachments processed through it
• Stripe - subscription billing and payment processing
• Bunny.net - CDN storage and delivery for uploaded files
• Ahrefs Web Analytics - cookieless website traffic analytics
• Google- optional sign-in identity provider, if you choose “Continue with Google”

Each of these operates under its own privacy policy.

9. Data retention and deletion

We keep your data for as long as your workspace is active. If a free trial ends without a subscription, the workspace becomes read-only, and - if it stays unpaid - is permanently deleted 14 days after the trial ends. If a paid subscription is cancelled or lapses, the workspace becomes read-only and is permanently deleted 30 daysafter the end of the paid period if not renewed. You can also delete a workspace or your entire account at any time from settings; deletion is immediate and permanent, except where we're required to retain billing records by law.

10. Your rights

You can access, correct, export, or delete your data directly from the app at any time. For anything you can't do yourself, contact [email protected].

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or a notice in the app.

12. Contact

Questions about this policy? Contact [email protected].