Privacy, in plain language.
What the service processes
Zeepoch processes account details, business preferences and the client, project, invoice, payment and expense records you enter. Your business determines what client information to collect and must have an appropriate basis for using it.
How information is used
Records are used to provide your workspace, authenticate access, enforce licenses, produce documents and support recovery. The implementation does not include advertising trackers. Essential session and preference cookies are used.
Service providers
Zeepoch uses Vercel for hosting and Neon for database storage. Google supports optional sign-in, Resend provides account emails, and OpenRouter/model providers support optional AI. Paddle is planned for software licensing; paid checkout is currently disabled. Provider contracts, processing locations and international-transfer arrangements are part of the operator’s privacy review.
Optional AI
AI starts disabled. An owner can enable it with an explicit notice. Typed context and, when requested by a permitted user, aggregate finance summaries are sent to OpenRouter and its model provider. Client names, tax IDs and bank details are not included automatically. Avoid putting unnecessary sensitive information in prompts.
Access, correction and deletion
Users can edit account and business records where permitted and export business data. Contact info@zeepoch.com for access, correction or deletion requests. We may ask you to verify your identity and business authority. Deletion requests must take applicable record-keeping obligations and backup retention into account; the app does not perform automatic account erasure.
Retention and security
The code separates business access and uses signed sessions, role checks, password hashing and verified billing events. Hosting encryption, backups, monitoring, incident handling, retention periods and deletion of backup copies require operational configuration. No security certification is claimed.