Overview & Corporate Identity
Welcome to Epoq Connect, a customizable CRM and lead management software platform developed, hosted, and operated by Epoq Zero LLP ("Epoq Zero", "we", "us", or "our"), a limited liability partnership registered in Kerala, India (LLPIN / Registration details maintained under the Ministry of Corporate Affairs, India).
Epoq Connect empowers modern businesses, sales teams, educational institutions, healthcare networks, and customer support organizations to organize inquiries, manage customer relationships, and coordinate team workflows within a structured workspace.
We hold customer privacy, confidentiality, and institutional data sovereignty as fundamental pillars of our platform. This Privacy Policy details the exact nature of data handled when you visit our web properties, register for an Epoq Connect tenant, or interact with our software interfaces.
🔒 Our Core Privacy Pledge
Epoq Zero LLP does NOT sell, rent, broker, or monetize your contact lists, CRM records, or inquiry information to third-party advertising networks or data aggregators. Your data remains exclusively yours.
Data Controller vs. Data Processor Roles
Under global data protection standards (including the Indian Digital Personal Data Protection Act, 2023 [DPDP], and the EU General Data Protection Regulation [GDPR]), rights and obligations depend on whether an entity is a Data Controller (or Data Fiduciary) or a Data Processor:
| Context | Role of Epoq Zero | Role of Client Organization (You) | Description of Responsibility |
|---|---|---|---|
| Account Registration & Inquiries | Data Controller / Fiduciary | Data Principal / Contact Person | We determine the means of processing your full name, organization name, work email address, and phone number to provision access and answer inquiries. |
| CRM Workspace & Lead Records | Data Processor | Data Controller / Fiduciary | Your organization decides which prospective leads, contacts, and notes to enter. We process this data strictly on your documented instructions. |
Information We Collect
We follow strict data minimization principles. Epoq Connect collects only four essential contact and organizational fields required to establish your account, coordinate demonstrations, and facilitate platform usage:
| Data Field | Category | Purpose of Collection |
|---|---|---|
| Full Name | Identity Information | To identify authorized users, account administrators, and team members. |
| Organization Name | Business Information | To identify your company or institution and configure your dedicated CRM tenant workspace. |
| Email Address | Contact Information | To send account verification credentials, critical system notifications, and direct support communications. |
| Phone Number | Contact Information | To verify user identity, coordinate product walkthroughs, and provide direct technical assistance. |
Purpose & Legal Basis for Processing
We process personal data only when substantiated by valid legal grounds under applicable law:
| Processing Purpose | Data Types Involved | Legal Basis (DPDP / GDPR) |
|---|---|---|
| Provisioning CRM tenant accounts & configuring workspace settings | Name, organization name, email, phone number | Performance of Contract (fulfilling user requests to use the platform) |
| Direct customer support, walkthrough scheduling, and technical inquiries | Name, email, phone number | Legitimate Interests & Consent (providing requested assistance) |
| Preventing unauthorized access and maintaining infrastructure security | IP addresses, login audit logs | Legitimate Interests (protecting infrastructure and tenant confidentiality) |
| Dispatching critical service updates, downtime notices, or security alerts | Admin email address and phone number | Contractual Necessity & Safety |
Data Isolation & Technical Security Safeguards
We enforce rigorous, multi-layered security protocols to safeguard all tenant information from accidental loss, unauthorized interception, or destructive cyber attacks.
1. Tenant Data Isolation
Epoq Connect enforces strict logical tenant segregation across all database schemas. Every query executed is scoped by unique tenant identification keys, preventing cross-organization data leakage.
2. Cryptographic Controls
- In-Transit Encryption: All HTTP traffic to Epoq Connect endpoints is forced over modern TLS 1.3 with strict HTTP Strict Transport Security (HSTS).
- At-Rest Encryption: CRM databases and backup archives are encrypted using industry-standard AES-256 encryption.
- Credential Protection: User passwords are encrypted using salted cryptographic hashing algorithms (such as Argon2id or bcrypt).
3. Access Management
CRM accounts support role-based permissions (RBAC) ensuring only authorized members within your organization can access, view, or manage your organization's records.
Data Retention & Deletion Schedules
We preserve data only for as long as necessary to fulfill the purposes set out in this Privacy Policy:
- Active Account Period: Your organization name, user names, email addresses, and phone numbers remain retained while your organization actively maintains an account with Epoq Connect.
- Account Inactivity / Termination: Following account closure or formal cancellation, your account data enters a dormant grace period of 30 calendar days, during which your team may request a final export.
- Permanent Deletion: After 30 days, your account records and tenant data are permanently deleted from live production databases. Backup archives are overwritten on a rolling cycle within a maximum of 90 days.
Customer & User Rights (DPDP & GDPR Aligned)
In accordance with the Digital Personal Data Protection Act, 2023 (DPDP) and global data protection standards, you hold clear rights regarding your personal information:
- Right to Access: You can request a summary of the personal data (name, organization name, email, phone number) associated with your account.
- Right to Rectification: You can update or correct any inaccuracies in your contact details by contacting us at info@epoqzero.com.
- Right to Erasure: You may request full deletion of your contact records and tenant workspace.
- Right to Grievance Redressal: You have the right to register concerns or complaints directly with our designated Grievance Officer.
Cookies & Session Audits
Epoq Connect utilizes functional session cookies strictly necessary for application operation:
- Authentication & Session Cookies: Encrypted, HTTP-only session tokens used to maintain your logged-in state across browser sessions securely.
- Security Tokens: Unique cryptographic tokens that prevent Cross-Site Request Forgery (CSRF).
- Preferences Cookies: Retaining basic user interface preferences, such as theme settings.
We do not install cross-site advertising tracking cookies or ad retargeting pixels within logged-in CRM agent interfaces.
Children's Privacy Protection
Epoq Connect is a B2B enterprise software application designed for professional organizations and commercial enterprises. It is not intended for use by individuals under the age of 18 ("Minors"). We do not knowingly collect personal information directly from children.
Amendments to this Privacy Policy
We may periodically revise this Privacy Policy to reflect enhancements in Epoq Connect capabilities or updates to statutory data protection requirements. When significant revisions occur, we will notify registered users via email or post an update notice on this page with an updated effective date.
Grievance Redressal & Contact Information
In compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the name and contact details of the official Grievance Officer and Data Protection Contact are provided below:
Epoq Zero LLP — Data Protection & Grievance Cell
For privacy inquiries, DPA requests, deletion notices, or grievance escalation, please reach out to:
We acknowledge all written privacy inquiries within 48 business hours and endeavor to resolve all documented concerns within thirty (30) calendar days from the date of receipt.