Privacy Policy

Account information. Name, email address, sign-in credentials (for Google sign-in we receive your name, email, and profile image; we never receive your Google password), company or brand details you add (including white-label branding), and plan and role information. At signup we also record your IP address and the approximate location derived from it (city/region/country), used for fraud prevention and regional defaults.

Payment information. Payments are handled by our third-party payment processor. We receive transaction records and subscription state; we do not store full card numbers. To prevent repeat free trials and repeat promotional credits, we retain a non-reversible fingerprint of the payment card used at trial signup.

Content you upload. Photos and videos (including embedded metadata such as capture time, camera details, and GPS coordinates in EXIF data), boundary and parcel files, documents, project names, markups, labels, and anything else you add to a project. Aerial imagery and its location metadata are inherently location-revealing; treat project data accordingly when you publish it.

Generated content. Outputs the Service creates from your content, such as enhanced photos, orthomosaics, 3D models, terrain products, measurements, reports, and tour videos, together with processing logs and quality metrics for those jobs.

Client and team information. Email addresses and names you provide when inviting team members or delivering projects to clients, and those users' activity within the projects you shared.

Usage and diagnostic information. Standard server logs (IP address, browser and device type, pages requested, timestamps) and diagnostic and usage events tied to your account, such as feature usage, upload and processing telemetry, performance measurements, and error reports. We use these to operate, secure, debug, and improve the Service, and we analyze them in aggregate to measure feature usage.

Communications. Support messages and other correspondence with us.

The Service displays data obtained from third-party and public sources, including map imagery and parcel records. Parcel records may include property owner names and parcel attributes as published in county, state, and national public records, obtained through commercial and government data services for the regions we support. This information is about properties and their owners of record, may not be current or accurate, and is provided for reference within the Service. We do not enrich it with data about you beyond what those sources provide.

We use information to: provide and operate the Service, including storing, processing, enhancing, and rendering your content; process payments, manage subscriptions, credits, and entitlements; deliver share pages and client access you configure; provide support and respond to you; monitor, secure, and debug the Service, including investigating abuse and enforcing our Terms; improve the Service; and send transactional service emails (billing, security, account, and processing notices). If we send product news or other marketing email, each message will include an unsubscribe option and we will honor your choice.

Automated analysis and feature development. Automated systems analyze project content and metadata to operate the Service (for example, detecting skies, generating masks, aligning imagery, and measuring processing quality). We may also use project content and associated metadata to develop and improve automated site-analysis and processing features, such as teaching our systems to recognize terrain, vegetation, structures, and other site characteristics. We do not sell your content, do not use it for advertising, and do not share it with third parties for their own model training. You can opt out of use of your content for feature development at any time by emailing hello@epiloft.com from your account address; opting out does not affect your use of the Service.

We do not sell your personal information.

Service providers (processors). We share information with third-party providers who process it on our instructions to run the Service. These include: hosting, database, and file-storage infrastructure; photogrammetry and photo-enhancement processing providers (the photos you select are transmitted to them for processing; ground-designated photos have GPS location metadata removed before transmission); our payment processor; map, geocoding, terrain, parcel, and public-records data providers, including government data services for supported regions (which receive the coordinates or parcel identifiers you query); optional integrations you choose to connect (such as cloud photo import); analytics and advertising services (Section 8); and providers for email delivery, web fonts, and error monitoring. These providers are bound to use the data only to provide their services to us.

People you choose. Content you publish to share pages is available to anyone with the link. Team members and clients you invite can access the projects you give them access to, per the permissions you set. Your profile photo and branding logo are publicly viewable where they appear on your share pages.

Legal and safety. We may disclose information to comply with law or valid legal process, to protect the rights, safety, or property of users, the public, or Epiloft, or to investigate fraud, abuse, or security issues. Where lawful and practicable, we will notify you of legal demands for your data.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy's commitments.

We use advertising and analytics partners only as described in Section 8, and we do not use your project imagery in our marketing without your permission.

Authorized Epiloft personnel can access user accounts and project content when reasonably necessary to operate the Service. This includes: providing support you request; diagnosing and fixing problems (for example, investigating a failed upload or a poor reconstruction); evaluating output quality and, where appropriate, proactively identifying or suggesting corrections; investigating abuse, security incidents, or violations of our Terms; and meeting legal obligations.

We follow least-access principles: access is limited to personnel who need it, for the purposes above. Administrative access to individual customer content is logged in an internal audit trail (who accessed what, when, and why). We do not browse customer content out of curiosity, use it in marketing without your permission, or disclose it except as described in this Policy.

Your content and projects are retained while your account is active. If your subscription lapses or content becomes dormant, we retain it for 12 months so you can restore it by resubscribing, then may delete it after notice to your account email. When you delete a photo, a project, or your account, content is removed from active systems promptly, and backup copies cycle out on our hosting provider's backup schedule over a limited period thereafter. We retain billing records, audit logs, and records needed for legal compliance for as long as required, and we may retain support correspondence. Aggregate or de-identified data that does not identify you may be retained.

We use technical and organizational safeguards appropriate to the data we handle, including encryption in transit to our servers and to every processing provider, private storage with owner-scoped access controls, service-role-only access to original imagery and export caches, server-side enforcement of plan entitlements and publishing gates, processing-provider credentials that never reach the browser, and internal audit logging of administrative access to customer content. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and regulators as required by law.

We use cookies and browser storage to keep you signed in and remember interface preferences. We use analytics services, including Google Analytics, to measure page views and feature usage, and to support our advertising, such as measuring ad performance, building advertising audiences, and showing ads for Epiloft on other platforms. These services set their own cookies and similar identifiers. You can limit personalized advertising through your browser settings and through Google's ads settings. Your browser controls cookies; disabling essential ones may break sign-in.

You can access and correct your account information, export project outputs, and delete photos, projects, or your entire account from within the Service. For anything you cannot do in-product, or to exercise rights you have under applicable law (access, correction, export, deletion, or objection to certain processing), contact hello@epiloft.com from your account address; we verify and honor requests as applicable law requires and will not discriminate against you for exercising your rights. You can opt out of content use for feature development per Section 3.

Share pages you publish can be embedded elsewhere, and the Service links to third-party services (for example, map providers). Those third parties' practices are governed by their own policies. When you unpublish a share page, it stops being served promptly, but map tiles and page assets already fetched by viewers may persist briefly in their browsers and in content delivery caches.

The Service is for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Aerial imagery may incidentally capture people, vehicles, or neighboring properties, and parcel layers display property owner names from public records. Uploaders are responsible for lawful capture and use of their imagery (see Terms, Sections 4 and 7). If you believe content on a public share page improperly identifies you or your property, contact us at hello@epiloft.com and we will review and, where appropriate, work with the account holder or remove the content.

Epiloft is operated from the United States, our Service is offered from the United States, and your information is processed in the United States (and in the regions our providers use). When you look up property data for supported non-U.S. regions, your query coordinates are sent to that region's data provider. If you use the Service from outside the U.S., you understand your information will be processed in the U.S., where laws may differ from your jurisdiction's.

We may update this Policy. For material changes we will notify account holders by email or in-product notice before the changes take effect. The current version is always posted with its effective date.

Epilogic Intel LLC, doing business as Epiloft
hello@epiloft.com