Privacy Policy

1. Who we are

E1pi is a product of Global Power Source Pte Ltd, a company incorporated in Singapore ("E1pi", "we", "us"). We are the data controller for the personal data described in this policy and we comply with the Singapore Personal Data Protection Act 2012 (PDPA). Contact: sales@e1pi.com.

2. What E1pi is

E1pi is an AI platform for the back office that a company installs on its own Mac or Windows computer and connects to the accounting or ERP software it already runs (for example Tally Prime, SAP, QuickBooks). Because E1pi is self-hosted, the company's books, documents, conversations and tool-call history stay on the company's own premises. They are not stored on E1pi's servers.

3. Personal data we collect on e1pi.com

• Registration: when you register for a demo or trial you sign in with your Microsoft work account. We receive your name, work email address and organisation name from Microsoft and store them with the date of registration.
• Correspondence: emails you send to our addresses and messages you send through Microsoft Teams or WhatsApp to our business numbers.
• Technical data: standard web server logs (IP address, browser type, pages requested, time) kept for security and capacity planning.
• Site analytics: e1pi.com uses Google Analytics 4 to count visits, pages viewed, registrations and downloads. IP addresses are anonymised, Google Signals and advertising personalisation are switched off, and data is retained for 14 months. You can block it with a browser setting or the Google Analytics opt-out add-on.
• Advertising measurement: if you reach e1pi.com from one of our own advertisements (for example Google Ads or YouTube), we may record that the visit and any registration came from that advertisement so we can measure the campaign. We do not build advertising profiles of visitors and we do not sell visitor data.

4. Personal data inside the E1pi application

• The E1pi application runs on the customer's computer. Accounting entries, bank statements, supplier bills, customer orders, employee expense claims, conversations with the AI and the record of every tool call are stored on that computer under the customer's control. The customer decides where those records are kept and for how long.
• When the AI needs a language model, only the minimal text required for the task (typically a few hundred words) is sent to the model. Whole files, databases and access tokens are not sent.
• Microsoft 365 is used for sign-in, user roles, email and Teams. The customer's Microsoft access tokens stay on the customer's installation and are never transferred to E1pi.
• The administrator of each installation can view and record every call the AI makes, as one timeline per user.
• In respect of data processed inside a customer's installation, the customer is the data controller and E1pi acts only on the customer's instructions, for example when providing support.

5. Google services

E1pi uses Google APIs for its own company accounts only: Google Search Console (to monitor how e1pi.com appears in Google Search), Google Ads (to run and measure our own advertising) and YouTube (to publish videos on the E1pi channel). Access is granted by our staff through Google sign-in (OAuth) and can be withdrawn at any time at myaccount.google.com/permissions. Data received from these APIs is used solely to operate those accounts, is not sold, is not used to build profiles of individuals, and is shared with no one other than Google. E1pi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Microsoft, Meta and other services

E1pi sends and receives Microsoft Teams messages and emails through the Microsoft Graph API as the signed-in user, and WhatsApp messages through the Meta WhatsApp Business Cloud API from E1pi business numbers. Carrier, bank and ERP connections (for example Maersk, Tally Prime, SAP, QuickBooks) use the official interfaces of those providers under the customer's own accounts. Each provider processes data under its own terms and privacy policy.

7. How we use personal data

• To provide demos, trials, installation, updates and support for E1pi.
• To respond to your enquiries and to send service notices about your account.
• To secure our systems, prevent abuse and keep records required by law.
• To measure our own advertising, as described in section 3.

We do not sell personal data and we do not send marketing emails to people who have not asked for them.

8. Sharing

We share personal data only with service providers that host or deliver our services (Microsoft Azure for hosting and sign-in, Microsoft 365, Meta for WhatsApp, Google for the services in section 5), with professional advisers, and where the law or a court requires it. Each provider is bound by its own contractual and legal obligations.

9. Retention

Registration and correspondence data is kept while your account or enquiry is active and for up to two years afterwards, unless a longer period is required by law. Web server logs are kept for 90 days. Data inside a customer's installation is retained according to the customer's own settings.

10. Security

Access to the E1pi application uses passkeys with device encryption, biometric sign-in on the local network, and biometric sign-in plus a device certificate issued by E1pi's own certificate authority over the internet. Our servers are hosted on Microsoft Azure in access-controlled subscriptions. Credentials for third-party services are stored outside web-accessible folders and are never committed to source control.

11. International transfers

We operate from Singapore. Service providers named above may process data in other countries under safeguards consistent with the PDPA's transfer requirements.

12. Your rights

You may ask us to access or correct your personal data, to withdraw consent, or to delete your registration. Write to sales@e1pi.com; we respond within 30 days. If you are a user of a customer's installation, please contact that customer, who controls the data on that installation.

13. Children

E1pi is a business service and is not directed at anyone under 18. We do not knowingly collect personal data from children.

14. Changes

We may update this policy. The effective date at the top changes when we do, and material changes are announced on e1pi.com.

15. Contact

Global Power Source Pte Ltd, Singapore. Email sales@e1pi.com.