Skip to main content
Epistemic AI Sign in

Privacy Policy

Privacy Policy

Last updated: March 18, 2026

This Privacy Policy explains how Epistemic AI, Inc ("Epistemic AI," "we," "us," or "our") collects, uses, discloses, and protects your information when you visit our website at https://www.epistemic.ai (the "Website") or use our platform and services (collectively, the "Service"). Please read this policy carefully. By accessing the Service, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

Epistemic AI, Inc is a company registered in the State of Connecticut, United States, with offices at 500 Post Rd E, Ste 220, Westport, CT 06880. For privacy-related inquiries, contact us at policy@epistemic.ai.

Information We Collect

Information You Provide

When you register for an account, request access, or contact us, we may collect:

  • Email address

  • First and last name

  • Organization and role

  • Any other information you choose to provide in forms or correspondence

Information Collected Automatically

When you visit the Website, we automatically collect certain technical information, including:

  • IP address

  • Browser type and version

  • Operating system

  • Pages visited, time and date of visit, and time spent on pages

  • Referring URL

  • Device type and unique device identifiers

Cookies and Local Storage

When you first visit the Website, a consent banner asks whether you accept the use of cookies. Your response (accepted or declined) is stored in your browser's local storage so the banner does not reappear. This Website does not set first-party cookies. However, third-party services embedded on the Website (see below) may set their own cookies.

Local Storage

  • Cookie Consent Preference

    Storage: Browser local storage

    Purpose: Records whether you have accepted or declined cookies so the consent banner is not shown again.

Third-Party Cookies

HubSpot (see below) may set cookies when forms are loaded or submitted on the Website. These cookies are governed by HubSpot's privacy policy, not ours. You can control third-party cookies through your browser settings. Most browsers allow you to refuse all cookies or indicate when a cookie is being sent. You can also clear your browser's local storage to reset your consent preference.

Third-Party Service Providers

We use the following third-party services that may collect information through the Website:

  • HubSpot (HubSpot, Inc.) — We use HubSpot for form handling and customer relationship management. When you interact with a form on our Website (e.g., requesting access), HubSpot collects the information you provide and may set cookies for session management and analytics. HubSpot's privacy policy is available at https://legal.hubspot.com/privacy-policy.

We do not sell your personal information to third parties. We do not serve third-party advertising on this Website. While HubSpot may use cookies for its form and CRM functionality, we do not use any tools for cross-context behavioral advertising or user profiling.

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service

  • Process your registration and manage your account

  • Respond to your inquiries and support requests

  • Send you service-related communications (e.g., updates, security alerts)

  • Send you marketing communications about our products and services, where you have opted in or where permitted by law. You can opt out at any time (see "Your Rights" below)

  • Analyze usage trends to improve the Website and Service

  • Comply with legal obligations

When We Share Your Information

We may share your personal information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, form processing, email delivery), subject to contractual obligations to protect your data.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.
  • Legal Requirements: When required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • With Your Consent: In any other situation where we have your explicit consent.

Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

  • Account data is retained for the duration of your account and up to 12 months after account closure, unless a longer retention period is required by law.

  • Usage data is retained in aggregate form for up to 24 months for analytics purposes.

  • Marketing communications data is retained until you opt out, after which we will remove you from our marketing lists within 30 days.

When data is no longer needed, it is securely deleted or anonymized.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights, we will notify affected individuals and applicable regulatory authorities as required by law, and in no event later than required by applicable state or federal breach notification statutes.

International Data Transfers

Your information is processed in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. We take steps to ensure that your data receives adequate protection in accordance with this Privacy Policy.

Your Rights

All Users

Regardless of where you are located, you may:

  • Access the personal data we hold about you

  • Correct inaccurate personal data

  • Delete your personal data, subject to our legal obligations

  • Opt out of marketing communications by clicking the "unsubscribe" link in any marketing email, or by contacting us at policy@epistemic.ai

To exercise any of these rights, contact us at policy@epistemic.ai. We will respond within 30 days.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it.

  • Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.

  • Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request, email policy@epistemic.ai with the subject line "CCPA Request." We may need to verify your identity before fulfilling your request.

European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, the following applies:

  • Legal Basis: We process your personal data based on: (a) your consent (e.g., marketing communications), (b) performance of a contract (e.g., providing the Service), (c) our legitimate interests (e.g., improving the Service, security), or (d) legal obligations.

  • Additional Rights: In addition to the rights listed above, you may request restriction of processing, data portability, and object to processing based on legitimate interests. You also have the right to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

To exercise these rights, contact us at policy@epistemic.ai.

Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at policy@epistemic.ai.

Links to Other Websites

Our Website may contain links to third-party websites that are not operated by us. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you by email or by posting a prominent notice on the Website prior to the change taking effect.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Epistemic AI, Inc
500 Post Rd E, Ste 220
Westport, CT 06880
Email: policy@epistemic.ai