Privacy Policy

epicSPOTLIGHT LLC. Effective April 20, 2026

epicSPOTLIGHT LLC ("epicSPOTLIGHT," "we," "us," or "our") is a Florida limited liability company operating an AI-powered visibility and voice platform. This Privacy Policy describes how we collect, use, and protect information when you use epicSPOTLIGHT services, including:

• epicspotlight.com and app.epicspotlight.com — AI Visibility platform, account management, and dashboards
• get.epicspotlight.com — epicSPOTLIGHT AI Voice Widgets for website integration
• go.epicspotlight.com — epicSPOTLIGHT AI Voice Calling for outbound and inbound voice automation

1. Information We Collect

1.1 Account Information

• Name, email address, phone number, company name, website URL, industry, and business details when you create an account, request a demo, or complete onboarding.
• Payment information processed securely through Stripe. We do not store credit card numbers on our servers.

1.2 AI Visibility Data

• Business name, industry, and website information used to query AI engines (ChatGPT, Google Gemini, Perplexity, Claude, Microsoft Copilot, Meta AI) on your behalf.
• AI engine responses, visibility scores, citation data, and competitive analysis results.
• Content campaign data, distribution records, and performance metrics.

1.3 Voice and Communication Data

• AI voice interaction recordings and transcripts when you or your customers interact with epicSPOTLIGHT voice agents (widgets or calling).
• Call metadata: phone numbers, timestamps, duration, and disposition.
• Widget interaction data from embedded voice and chat widgets on your websites.

1.4 SMS Data (When Applicable)

• SMS message content, sender/recipient phone numbers, and timestamps for any SMS features used through the platform.
• Message frequency varies based on service configuration. Message and data rates may apply.

1.5 Automatically Collected Data

• Browser type, operating system, IP address, pages visited, and usage patterns.
• Cookies for authentication, session management, and analytics (no advertising cookies).

2. How We Use Your Information

• To provide AI visibility monitoring, content production, and distribution services.
• To provide AI voice agent services and process voice interactions.
• To improve voice recognition, natural language understanding, and response quality.
• To send operational SMS messages (appointment confirmations, follow-ups) when configured by you.
• To process payments and manage subscriptions.
• To generate reports, audits, and personalized recommendations.
• To provide customer support and platform analytics.
• To comply with telecommunications regulations.

3. SMS Messaging Policy

Where epicSPOTLIGHT services include SMS functionality:

• Recipients must provide prior express consent before receiving automated SMS messages.
• Recipients may opt out at any time by replying STOP. Opt-out is processed immediately.
• Reply HELP for assistance or contact support@epicspotlight.com.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes at any time.
• Message frequency varies by service configuration. Standard message and data rates may apply.
• Supported carriers include all major US carriers. Carriers are not liable for delayed or undelivered messages.

4. Voice Recording Disclosure

AI voice interactions may be recorded for quality assurance and service improvement. Where required by applicable law, callers are notified that the interaction is with an AI agent and that the call may be recorded. You are responsible for configuring appropriate disclosures for your jurisdiction, including two-party consent states.

5. HIPAA and Protected Health Information (PHI)

epicSPOTLIGHT is not a HIPAA-covered entity and is not a Business Associate under HIPAA. The Service is not designed, intended, or authorized for the collection, storage, processing, or transmission of Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations.

Healthcare providers and other HIPAA-covered entities using our AI Voice Widget or AI Voice Calling services must:

• Configure their voice agents to explicitly instruct callers and website visitors not to share PHI, medical records, diagnoses, treatment details, prescription information, insurance details, or any other protected health information through chat, voice, or SMS interactions.
• Route any interactions requiring PHI collection to a HIPAA-compliant channel outside the epicSPOTLIGHT platform.
• Acknowledge that if PHI is inadvertently transmitted through the Service, epicSPOTLIGHT bears no responsibility for HIPAA compliance obligations related to that disclosure.

End users interacting with AI Voice Widgets or AI Voice Calling services operated by our customers should not share sensitive personal information, including Social Security numbers, credit card numbers, medical information, or other protected data through these interfaces.

epicSPOTLIGHT does not offer Business Associate Agreements (BAAs) at this time. If your use case requires HIPAA compliance, epicSPOTLIGHT is not the appropriate platform.

6. How We Share Your Information

We do not sell personal information. We share data only with:

• Service providers: AI model providers, telephony services (for voice and SMS delivery), payment processors (Stripe), hosting infrastructure (Vercel, Supabase), email delivery (Resend), and analytics (PostHog) — only as necessary to deliver the service.
• At your direction: When you configure epicSPOTLIGHT to interact with your customers, data flows to and from those interactions as you direct.
• Legal requirements: When required by law, court order, or regulatory request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.

7. Data Security and Retention

• Data encrypted in transit (TLS/HTTPS) and at rest.
• Voice recordings retained for 90 days by default, configurable by account.
• Account data retained for 30 days after cancellation, then deleted.
• SMS logs retained for 5 years per telecommunications compliance requirements.
• AI visibility data (scores, reports, campaign data) retained for the life of the account.
• Payment data processed and stored exclusively by Stripe.

8. Children's Privacy

epicSPOTLIGHT is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

9. International Users

epicSPOTLIGHT serves customers internationally. If you access our services from outside the United States, your data may be processed in the United States. We comply with applicable data protection laws in the jurisdictions where we operate, including GDPR for European users. European users may exercise rights under GDPR (access, rectification, erasure, portability, restriction, objection) by contacting us at the address below.

10. California Privacy Rights (CCPA)

California residents have the right to: know what personal information we collect and how it is used; request deletion of personal information; opt out of the sale of personal information (we do not sell personal information); and not be discriminated against for exercising privacy rights. To exercise these rights, contact privacy@epicspotlight.com.

11. Your Rights

You may request access to, correction of, or deletion of your personal information at any time. Opt out of SMS by replying STOP to any message. Contact us at privacy@epicspotlight.com for any data requests. We will respond within 30 days.

12. Changes

We may update this policy. Material changes will be communicated via email at least 30 days before taking effect. The effective date above reflects the current version.

13. Contact

epicSPOTLIGHT LLC
Email: privacy@epicspotlight.com
Website: epicspotlight.com