Data Protection & Governance

Privacy Policy

Last updated: March 1, 2026. At Eidoncore, your privacy matters. We maintain strict tenant isolation, zero third-party tracking, and GDPR-compliant data standards.

Our Core Privacy Commitment:Your workspace data belongs exclusively to you. Eidoncore will never sell your personal information or use your agency deliverables, client lists, or financial data for advertising.

1. Information We Collect

Account Information

When you register for Eidoncore, we collect your name, email address, agency name, and workspace credentials. When subscribing to paid tiers, credit card and payment information is securely processed directly via Stripe — zero cardholder details are ever stored on Eidoncore servers.

Agency Data

All records created within your tenant — including client profiles, project tasks, milestones, proposals, messages, files, and invoice items — remain strictly your confidential property. We process this data solely to provide and maintain the Eidoncore platform.

Usage Telemetry

We collect anonymized system telemetry and performance logs (such as page render latencies and error logs) to maintain high availability and prevent platform abuse. This data is aggregated and never linked to individual identity.

2. How We Use Your Information

  • To provide, operate, and scale the Eidoncore software suite.
  • To process subscription payments and reconcile billing transactions via Stripe Connect.
  • To dispatch transactional system alerts, security notifications, and client portal updates.
  • To detect and remediate infrastructure anomalies, security threats, and fraudulent access.

3. Data Security & Storage

All database records are stored in secure SOC 2-compliant data centers. We implement defense-in-depth protections:

  • AES-256 Encryption at Rest: All stored database tables and S3 file vaults are encrypted.
  • TLS 1.3 in Transit: All communication between browsers, API clients, and servers is cryptographically secured.
  • Strict Tenant Isolation: Multi-tenant database queries enforce workspace ownership boundaries.
  • Automated Backups: Point-in-time recovery snapshots taken daily.

4. Subprocessors & Third Parties

We only share data with essential infrastructure partners necessary to provide the service:

  • Stripe: Payment processing and subscription management.
  • Cloudflare: DNS routing, DDoS protection, and SSL termination.
  • AWS / Vercel: Cloud application hosting and global CDN edge routing.

5. Email Integrations (Gmail Add-on, Browser Extension and Capture Addresses)

What we access

When you use the Eidoncore add-on for Gmail or the Eidoncore browser extension, we read only the email that is open when you choose an Eidoncore action — its subject, sender, recipients, date, body and the attachments you select. We never scan, index or sync your mailbox. If you connect your Google account to send replies from Eidoncore, we use permission to send email on your behalf only when you press Send; we cannot read your mailbox with it. Email you forward, copy (BCC) or auto-forward to your personal Eidoncore address is received by us like any other email.

What we store

Only what you choose to save, in the privacy mode you choose: the full email, the content without names and addresses, a redacted version (with phone numbers, payment details, one-time codes, signatures and names removed), or no copy of the original at all. You also choose who in your workspace may see the original. Workspace administrators may set stricter minimums and retention periods. Stored email is deleted when its retention period ends, when you delete the record, or when your workspace is deleted.

How we use it

Solely to provide the features you use: creating and updating tasks, tickets, notes and client history, showing linked email to people allowed to see it, sending replies you write, and optional AI summaries and suggestions you request. We do not sell email data, use it for advertising, or let people read it except where you or your workspace share it, where needed for security or legal reasons, or with your consent for support.

AI features

Optional email AI features send the privacy-processed text (after redaction) to our AI provider only when you request them. Data received from Google APIs is never used to develop, improve or train generalized AI or machine-learning models.

Browser extension

The extension stores its sign-in tokens in your browser, reads the current page only when you use “Send to Eidoncore”, and sends data only to your Eidoncore workspace. It contains no analytics or tracking. Disconnecting revokes its access.

Google API Services User Data Policy

Eidoncore's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Your Legal Rights (GDPR & CCPA)

You hold the legal right to access, export, rectify, or permanently delete all personal data associated with your Eidoncore account at any time. To request a complete data archive or account deletion, contact our privacy team at privacy@eidoncore.com.

FAQ

Frequently Asked Questions

Yes! Eidoncore offers a permanent Free plan with up to 2 team members, 3 clients, 5 projects, and core agency features. No credit card required.

The agency playbook, monthly.

New workflows, fresh integrations, and what we shipped — one email, no fluff.

No spam. Unsubscribe anytime.
14-day free PRO trial

Ready to Streamline Your Agency?

Join 500+ agencies running their entire client workflow from a single platform. Start your 14-day free PRO trial — no credit card required.

No credit card requiredCancel anytimeSOC 2-ready security