Privacy Policy
Version v1.0-2026-09 · Epic Connector · Singapore
This Privacy Policy explains how Epic Connector, Singapore ("we", "us") collects and processes personal data when you use the Platform (evol.epicconnector.ai).
1. Controller and Contact
Epic Connector, Singapore is the data controller. Contact for all privacy matters: incubator@epicconnector.ai.
2. Data We Collect
- Account data: email address, nickname/handle, password (hashed), profile picture, sign-in method (email code, password, or Google).
- Event participation data: application profiles (which may include date of birth, region, phone number, links, and answers to organiser questions), team and project submissions.
- Community content: newsroom posts, comments, votes, direct messages.
- Analytics data: first-party usage analytics (pages viewed, visit duration, interaction events) tied to a pseudonymous visitor identifier derived from a hash of IP address and user agent.
- Security logs: IP address, user agent and timestamps recorded for security and abuse prevention.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Operating your account, event applications, teams, projects and community features | Performance of a contract (GDPR Art. 6(1)(b)); consent under PDPA |
| First-party usage analytics | Your consent (opt-in), withdrawable at any time via the cookie banner |
| Security logs, rate limiting, abuse prevention | Legitimate interests (GDPR Art. 6(1)(f)) |
| Service announcements and weekly digest email | Legitimate interests / soft opt-in for account holders, with one-click unsubscribe in every digest |
We do not sell personal data and we run no third-party advertising trackers.
4. Cookies
We use only strictly necessary cookies (session sign-in, security) plus a cookie storing your analytics consent choice. First-party analytics runs only after you opt in via the consent banner, and you can change your choice at any time.
5. International Transfers
Your data is hosted on servers in Singapore (AWS Asia Pacific). For users in the EU/UK, transfers rely on the EU Standard Contractual Clauses incorporated into our hosting provider's Data Processing Agreement. For users in mainland China: your data is collected directly to our Singapore servers, we handle it under the standards described in this Policy, and you may reach us via the contact above to exercise your rights under China's Personal Information Protection Law.
6. Retention
- Account and participation data: kept while your account is active.
- Analytics data: up to 25 months.
- Security/audit logs: up to 12 months.
- Deletion archives: 90 days after account deletion, then irreversibly anonymised.
7. Your Rights
Subject to applicable law (GDPR for EU/UK, PDPA for Singapore, PIPL for mainland China), you may request access, rectification, erasure, restriction, objection, and portability of your data, and withdraw consent at any time. You may also lodge a complaint with your supervisory authority (e.g. a EU/UK data protection authority or Singapore's PDPC).
Exercising rights: use the in-Platform self-service tools where available (data export on request, account deletion on your profile page), or email incubator@epicconnector.ai. We respond within one month.
8. Account Deletion
When you delete your account, we first archive a copy of your data for a limited window (90 days, for legal-claim and recovery purposes, access restricted), then irreversibly anonymise your personal data. Community content you published remains visible but is attributed to an anonymised identity that can no longer be linked to you.
9. Security
We apply hashing for passwords and tokens, TLS in transit, role-based access control, rate limiting, audit logging, and least-privilege operational access.
10. Children
The Platform is not directed at children below the minimum age of consent in your jurisdiction. Event applications may collect guardian contact details where a participant is a minor, used solely to record guardian consent.
11. Changes
We may update this Policy. The version and date at the top change with every material update; where required by law, we will re-request your consent at your next login.
12. Contact and Complaints
incubator@epicconnector.ai · Epic Connector, Singapore. Complaints may also be lodged with Singapore's Personal Data Protection Commission (PDPC), your local EU/UK data protection authority, or (for mainland China) the Cyberspace Administration of China.