We don’t sellyour data.

Epafi does not sell personal information, and does not share it for cross-context behavioural advertising. Not in the ordinary sense of those words, and not in the broader statutory sense the CCPA and CPRA give them — which covers disclosure for monetary or other valuable consideration, not just cash.

There is therefore no opt-out to exercise, because there is no sale or share to opt out of. We have not sold or shared personal information in the preceding twelve months, and we do not knowingly sell or share the personal information of consumers under sixteen.

Personal information reaches a third party in exactly one shape: a service provider, processing on our documented instructions under a contract that forbids using it for its own purposes. Every one of them is named on the sub-processor page.

• +No advertising networks, no data brokers, no audience-matching platforms.
• +No advertising or analytics trackers on authenticated pages — or, currently, on the marketing site.
• +No training of shared or third-party models on your contact data.
• +No monetisation of contact records in any form. The product is paid for by subscriptions.

We honour the Global Privacy Control signal. Because we run no sale or share and set no advertising cookies, a GPC header arriving at epafi.app currently has nothing to suppress — but it is treated as a valid opt-out request rather than ignored, and it is recorded as such.

If we ever introduce processing that constitutes a sale or share, GPC is honoured automatically as a browser-level opt-out, without requiring you to find this page or fill in a form.

You may still want a written confirmation for your own records, or you may want to exercise one of the other CCPA/CPRA rights. Email privacy@epafi.app with the request and the email address on the account.

• +Right to know — what categories we collect, the sources, the purpose, and who receives them.
• +Right to access — a copy of the personal information we hold about you.
• +Right to delete — erasure of your personal information, subject to legal retention.
• +Right to correct — fix inaccurate personal information.
• +Right to limit use of sensitive personal information — we collect none, and say so rather than offering a toggle over an empty set.
• +Right to non-discrimination — exercising any of these never changes your price, your plan, or your service.

We confirm receipt within ten business days and respond substantively within forty-five days, extendable once by a further forty-five where the request is complex — we will tell you if that happens, and why.

An authorised agent may submit a request on your behalf. Send written proof of authorisation to privacy@epafi.app. We may contact you directly to confirm the agent’s authority and to verify your identity before acting — that verification protects your data, and is not a delay tactic.