Privacy Policy

Last updated: March 25, 2026

YEpsilon (“we”, “our”, “us”) operates the YEpsilon platform at yepsilon.ai. This Privacy Policy explains how we collect, use, store, and protect your information when you use our autonomous AdOps AI agent platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile information through our authentication provider, Clerk. We do not store passwords directly — authentication is handled entirely by Clerk's secure infrastructure.

CRM Data

When you connect your CRM system (HubSpot, Salesforce, Pipedrive, Zoho, or LeadSquared), we access and process contact records, company data, deal/opportunity information, and activity history. This data is used to discover your highest-value customer personas and inform campaign targeting.

Analytics Data

When you connect analytics platforms (Google Analytics 4, Mixpanel, Amplitude, Segment, CleverTap, or MoEngage), we access user behavioral data, event streams, and engagement metrics. This data feeds into our persona intelligence pipeline.

Ad Platform Data

When you connect advertising platforms (Google Ads, LinkedIn Ads, Meta Ads), we access campaign performance data, ad metrics, keyword data, and audience information via OAuth 2.0. We use this to create, manage, and optimize campaigns on your behalf.

2. How We Use Your Data

• Persona Discovery: We analyze your CRM and analytics data through our 8-stage persona intelligence pipeline to identify your highest-value customer segments.
• Campaign Creation: We use persona insights and your input to generate campaign strategies, ad copy, keywords, and targeting configurations.
• Campaign Deployment: We deploy campaigns to your connected ad platforms using the OAuth credentials you provide.
• ROAS Optimization: We continuously monitor campaign performance and autonomously adjust bids, budgets, targeting, and creative to maximize your return on ad spend.
• AI/LLM Processing: We send anonymized and contextual data to large language models (Google Gemini, OpenAI GPT-4) to generate campaign strategies, ad copy, and optimization recommendations. We do not send raw personal identifiable information to LLM providers.

3. Google API Services User Data Policy

Specifically:

• We only request Google Ads API scopes necessary to create, manage, and optimize advertising campaigns on your behalf.
• We access Google Ads data solely to provide and improve the YEpsilon campaign management service you have authorized.
• We do not sell Google user data to third parties.
• We do not use Google user data for purposes unrelated to the YEpsilon platform.
• We do not use Google user data to serve advertising outside of the campaigns you explicitly create through YEpsilon.
• Human access to Google user data is limited to necessary operational purposes (debugging, support) and is governed by strict internal access controls.

4. Data Sharing and Third Parties

We share data only with the following categories of service providers, solely to operate the YEpsilon platform:

• AI/LLM Providers: Google (Gemini) and OpenAI (GPT-4) for generating campaign strategies and ad copy. Data sent is anonymized and contextual.
• Ad Platforms: Google Ads, LinkedIn Ads, and Meta Ads — only to execute campaigns you create and authorize.
• Infrastructure: MongoDB Atlas (database), Upstash Redis (caching/queues), Railway (backend hosting), Vercel (frontend hosting), Clerk (authentication).
• Payment Processing: Stripe for billing and subscription management.

We do not sell, rent, or trade your personal data to any third party for their marketing purposes.

5. Data Storage and Security

• All data is stored in MongoDB Atlas with encryption at rest.
• OAuth tokens for connected platforms are encrypted using AES-256-GCM before storage.
• All data in transit is encrypted via TLS/HTTPS.
• API access is authenticated via Bearer tokens and rate-limited.
• We use Clerk for authentication, which provides enterprise-grade security including multi-factor authentication support.

6. Data Retention and Deletion

We retain your data for as long as your account is active. When you disconnect a data source, we stop syncing new data from that source. You may request complete deletion of your account and all associated data by contacting us at the address below.

Upon account deletion, we will remove all your personal data, CRM data, analytics data, campaign data, and OAuth tokens within 30 days. Anonymized, aggregated data that cannot identify you may be retained for service improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@yepsilon.ai.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Analytics cookies may be used for understanding platform usage and are limited to first-party data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of YEpsilon after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@yepsilon.ai
Website: https://yepsilon.ai