Privacy Policy

1. Who We Are

Apiphany (“we”, “us”) is operated by Eastware Solutions. Our platform is accessible at https://app.eastwaresolutions.com.

2. Information We Collect

• Account data: name, email address, and password (hashed) when you register.
• Payment data: processed by Stripe — we never store raw card numbers.
• WordPress credentials: stored encrypted in our database, used only to publish content on your behalf.
• Google Search Console data: with your explicit consent, we access search performance metrics (impressions, clicks, average position) for your connected sites via the Google Search Console API (webmasters.readonly scope). This data is stored in your account and used solely to display analytics inside the dashboard.
• Usage data: page views and feature interactions collected via Vercel Analytics (anonymised).

3. How We Use Your Information

• To provide and operate the Apiphany platform.
• To publish AI-generated content to your WordPress site.
• To display Google Search Console analytics in your dashboard.
• To send transactional emails (subscription confirmations, payment receipts).
• To improve the platform through aggregated, anonymised usage data.

We do not sell, rent, or share your personal data with third parties for advertising purposes.

4. Google API Data

Apiphany’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request only the webmasters.readonly scope — read-only access to your Search Console properties.
• Data retrieved from the Google Search Console API is used only to populate the Analytics section of your Apiphany dashboard.
• We do not use Google API data for serving advertisements or for any purpose unrelated to the features described above.
• You can revoke access at any time from the Settings → Analytics & SEO page, or via your Google Account permissions.

5. Data Retention

We retain your account data for as long as your account is active. Search Console metrics cached in our database are refreshed weekly and automatically overwritten. You can request deletion of your account and all associated data by emailing support@eastwaresolutions.com.

6. Security

All data is transmitted over HTTPS. Passwords are hashed using industry-standard algorithms. WordPress credentials are encrypted at rest using Fernet symmetric encryption. We apply row-level security policies in our database so each user can only access their own data.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing of your data.
• Data portability.

To exercise any of these rights, contact us at support@eastwaresolutions.com.

8. Cookies

We use session cookies required for authentication. No third-party advertising or tracking cookies are set. Vercel Analytics uses privacy-preserving, cookieless measurement.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. The “Last updated” date at the top of this page reflects the most recent revision.