Privacy Policy

Last updated June 15, 2026

EpoxyWeb (“EpoxyWeb,” “we,” “us”), a service of AchStack LLC, builds, launches, and maintains websites for local businesses. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. We keep it short and plain on purpose.

Information we collect

We collect only what we need to provide the service:

Account information — your name, email, business name, phone (optional), preferred language, and a password (stored only as a salted hash; we never see your actual password).
Website content you give us — text, photos, logos, hours, services.
Payment information — processed by Stripe. We don't store your full card number; we keep a Stripe reference and basic billing status.
Support and requests — messages and change requests from your dashboard.
Essential technical data — a sign-in session cookie, your theme and language preferences, and standard server logs (e.g. IP) for security and reliability.

How we use your information

To build, launch, host, and maintain your website.
To process payments and manage your memberships.
To send you transactional email — verification, password resets, receipts, membership status, and replies to your requests — in your preferred language.
To respond to support and change requests (target: 24–48 hours).
To keep the service secure and prevent abuse.

We do not sell your personal information, and we don't use it for third-party advertising.

Cookies

We use only the cookies needed to run the service: a secure session cookie to keep you signed in, and small preference cookies for your theme and language. We don't use advertising or cross-site tracking cookies.

Service providers we share data with

We share information only with the providers that help us run EpoxyWeb, each under their own privacy terms:

Stripe — payment processing and billing.
Twilio SendGrid — sending transactional email.
Railway — application and database hosting.
Cloudflare — domains, DNS, and content delivery.

We may also disclose information if required by law, or to protect the rights, safety, and security of our customers and the service.

How long we keep it

We keep your information for as long as your account is active or as needed to provide the service and meet legal, tax, and accounting obligations. You can ask us to delete your account data at any time; some records may be retained where the law requires.

Your rights and choices

You can request to access, correct, export, or delete your personal information by emailing [email protected]. Depending on where you live (e.g. the EU/UK under GDPR or California under CCPA/CPRA), you may have additional rights, and we will honor them. We don't discriminate against you for exercising any of these rights.

Security

Passwords are stored as salted hashes, data is encrypted in transit (HTTPS), and access to production systems is limited. No method is 100% secure, but we work to protect your information and will notify you of a breach as required by law.

Children

EpoxyWeb is a business service and is not directed to anyone under 18. We do not knowingly collect information from children.

Where we operate

EpoxyWeb is operated from the United States. If you access it from elsewhere, your information may be processed in the United States.

Changes to this policy

We may update this policy from time to time. We'll change the “last updated” date above and, for significant changes, let you know by email or in your dashboard.

Contact us

Questions about your privacy? Email [email protected].