Privacy Policy

When you submit a form on our website, we collect the information you provide. Depending on the form, this includes your name, job title, work email address, phone number, and company name. For a careers application, we instead collect your email address and the free-text answers you give (why you want to join us, and evidence of your ability). In every case we also record the time you gave consent.

We may also automatically collect limited technical data necessary to operate the website, such as IP address and browser type, through our hosting and infrastructure providers.

We rely on the consent you give through the checkbox on each form, and we record when you gave it. We do not use your data for automated decision-making or profiling, and we do not sell your data.

We use the following service providers (data processors) to operate our website and handle form submissions:

• Convex, Inc. — website backend and database where submissions are stored
• Resend (Resend, Inc.) — sending notification and confirmation emails
• Attio (Attio Ltd) — CRM for storing and managing contact requests
• Google Workspace (Google Ireland Ltd / Google LLC) — email and internal documents
• Vercel Inc. — website hosting and delivery

These providers process data only on our instructions under data processing agreements. We do not share your data with other third parties unless required by law.

Some of our providers are based in, or may process data in, the United States. Where data is transferred outside the EU/EEA, we rely on safeguards such as the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Form submissions (contact, benchmark, and careers) are kept for up to 24 months after submission, after which they are automatically deleted, unless a business relationship follows.

You can ask us to delete your data sooner at any time. We delete or anonymize data when it is no longer needed for these purposes.

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (“right to be forgotten”)
• Restrict or object to our processing
• Receive your data in a portable format
• Withdraw consent at any time (for processing based on consent), without affecting processing before withdrawal

To exercise any of these rights, email us at legal@epicube.com. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY, www.imy.se); you may also complain to the authority in your own EU country.

We use strictly necessary cookies to run the site (for example, security and remembering your privacy choices); these are always active. With your consent, we may also use analytics cookies (to understand how the site is used) and marketing cookies (to measure and tailor our campaigns). Analytics and marketing cookies are off unless you allow them.

You choose when you first visit, and you can change or withdraw your choice at any time via the “Manage cookies” link in the footer.

We use appropriate technical and organizational measures to protect your data, including access controls, encryption in transit, and reputable infrastructure providers.

We may update this policy from time to time. The current version is always available on this page, with the date of the last revision shown at the top.