EpicX Privacy Policy
Last updated: August 9, 2026 | Effective Date: August 9, 2026 | Version: 2026-08-09-marketplace-digital-editions
EpicX is a product operated by GoldenEpic Solutions Inc. Learn more about our products at goldenepics.com.
1. Information We Collect
When you use EpicX, we collect:
- Account Information: Email address, phone number (required), username, and password when you create an account.
- Verification Data: Email verification status and phone verification status to ensure account security.
- Profile Information: Display name, avatar, and bio that you choose to provide.
- Avatar and Companion Information: Avatar appearance and loadout, Backdrop, equipped achievements, owned and active pets, pet care state and history, scene preferences, renderer and asset versions, and customization inventory.
- Communication Preferences: Notification settings including email and push notification preferences.
- Usage Data: Reading history, preferences, and interaction with the app.
- Content and Metadata: Content you upload, submit, publish, read, listen to, or interact with, including text, chapter data, book metadata, formatting information, and related activity needed to provide platform features.
- Device Information: Device type, operating system, and app version for troubleshooting.
- Advertising and Consent Data: advertising identifier where permitted, device and app signals, approximate network-derived location, consent and privacy-choice status, age-restriction signals, ad requests, interactions, diagnostics, and impression-level estimated revenue.
- Community and Messaging Data: Direct messages, Circle Chat messages, posts, comments, replies, quoted or forwarded previews, and related sender, recipient, circle, visibility, and delivery metadata.
- Language and Translation Choices: Your account content language, whether you enabled automatic community translation, when the translation prompt was shown, when you consented, the applicable consent version, and whether notification previews are enabled.
- Payment & Transaction Data: purchase history, subscription status, digital credit balances, and transaction records. Where applicable, we may store limited payment-related identifiers (for example, order/transaction IDs, Stripe Payment Intent IDs, dispute/chargeback status) for customer support, accounting, fraud prevention, and to deliver purchased items/credits.
- Digital Edition Security Data: uploaded file metadata, validation and malware-scan outcomes, checksums, asset versions, rights records, entitlement state, short-lived download-session records, byte-range requests, offline-access lease state, and access audit events. Download tokens are stored only as one-way hashes and are redacted from application request logs.
- Seller and Tax Data: legal name, entity type, primary address, tax residency, business registration information, encrypted tax identifiers and date of birth where required, certification status, consideration, fees, commissions, taxes, royalties, and payouts.
- Orders and Fulfillment: shipping address, phone number, print requests, product/order details, carrier, tracking, returns, and managed-print production records.
- Reading and Offline Activity: chapter reads, reading/listening progress, goals, streaks, bookmarks, highlights, offline download records, and cached content state.
- Push Delivery Data: Firebase/APNs registration tokens, app installation identifier, platform, preferences, delivery attempts, failure codes, opens, and last-seen time.
2. Required vs. Optional Data
To create and secure your account, we require certain information (such as email and phone number). Other information (like your bio or avatar) is optional and can be provided or removed at any time.
3. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Verify your identity and secure your account (email and phone verification)
- Enable communication between users through direct messaging
- Show eligible community content in an account holder's selected language after that account holder enables automatic translation
- Personalize your reading experience
- Render and synchronize Avatar Studio scenes, companions, equipped achievements, quest progress, and owned customization items
- Process transactions and send related information
- Send notifications about your account, circles, and updates based on your preferences
- Improve our services and develop new features
- Ensure compliance with our Terms of Service and community guidelines
- Maintain accounting records, reconcile payments, issue seller statements, prevent tax fraud, and meet lawful tax or platform-reporting obligations
- Request, personalize where permitted, measure, limit, and account for audiobook-player advertising
We may process content, text, metadata, usage data, and related app activity to provide and improve EpicX features, including:
- Reading and publishing functionality
- AI-assisted translation
- Text-to-speech narration
- Audio playback
- Formatting and chapter display
- Recommendations and discovery
- Search indexing
- Moderation and abuse prevention
- Analytics and app improvement
- Security
- Customer support
- Third-party provider functionality where required
Text-to-speech narration, comic generation, and other assisted features may involve third-party technology providers, including Async and ToONeR and their disclosed subprocessors. These providers may process the content, text, prompts, metadata, and technical information needed to deliver the requested feature, subject to applicable agreements and their own terms or privacy policies where relevant.
Automatic community translation is optional and is off until an account holder enables it. When enabled, EpicX may send eligible human-readable text from direct messages, Circle Chat, Circle and global-feed posts, comments, replies, quoted or forwarded previews, inbox snippets, and eligible notification previews to a contracted machine-translation provider so that the recipient or viewer can read it in the content language selected for that account.
A recipient's or viewer's translation choice can cause text written by another user to be processed for translation even when the author has not enabled translation for their own account. Translation does not change who can access the content: EpicX applies the same participation, membership, block, publication, and visibility rules before resolving content for translation.
EpicX currently uses Google Cloud Translation. EpicX may use DeepL API Pro only when it is configured under appropriate data-processing terms. These providers act as service providers or processors for the translation request. EpicX sends the eligible text and requested target language; it does not intentionally include the EpicX account ID or entity ID in the provider translation payload. Supported mentions, usernames, URLs, emoji, share metadata, and media placeholders are protected from translation where technically feasible.
Voice recordings, voice transcription, and text contained only inside images are not included in automatic community translation. Notification text is translated only when automatic community translation and notification previews are both enabled. If translation is unavailable, EpicX displays the original content without delaying communication.
The original content remains the authoritative record for moderation, reports, legal review, editing, forwarding, sharing, and search. Machine translations may be inaccurate and may not preserve wording, tone, context, or meaning.
EpicX may cache translated text, the detected source language, target language, provider attribution, and a content hash for up to 180 days to reduce repeated provider processing. Translation caches are invalidated when content changes, removed with deleted content where supported, and otherwise expire automatically. Turning automatic translation off stops new automatic translation requests for that account; an existing shared cache may remain until it expires or the underlying content is deleted.
You can withdraw translation consent at any time under Profile > Language & Translation without losing access to the original community features. EpicX retains limited consent records as needed to demonstrate and administer your privacy choice.
Public profile scenes may display your selected avatar, Backdrop, active companion, and equipped achievements according to your profile and achievement visibility settings. Asset files and manifests may be cached locally on your device for performance and offline fallback.
ToONeR may be used by authorized administrators as an asset-production tool. The live profile experience does not send individual user avatar loadouts or companion state to ToONeR. Reviewed production assets are published to EpicX separately.
3.2 Epic Sparks and Gifts
To operate Epic Sparks and creator gifts, we process Spark balances, purchase receipts and provider transaction identifiers, estimated fees and taxes, purchase-lot allocations, stored gift quantities and versions, delivery records, author gift earnings, fraud signals, public-attribution choices, refund and chargeback records, and payout reconciliation. Public gift attribution is off by default.
Apple, Google, or Stripe processes payment information under its own terms. We receive only the purchase, refund, account-binding, and settlement information needed to validate delivery, prevent duplicate grants, reconcile liabilities, and comply with legal and accounting obligations.
Gift asset prompts and reviewed production requirements may be processed by ToONeR and its disclosed image-generation providers. EpicX does not send private payment credentials to those providers.
4. Information Sharing
We do not sell your personal information. We may share your information:
- With your consent
- With other users based on your privacy settings (e.g., profile visibility)
- To comply with legal obligations
- To protect our rights and prevent fraud
- With service providers who assist in our operations (e.g., SMS verification services)
- With contracted translation providers when automatic translation is enabled for an eligible recipient or viewer
4.1 Payments & Third-Party Services
- Stripe: We may use Stripe to process certain payments and to support payouts via Stripe Connect (where available). Stripe may process payment details directly. Their use of information is governed by Stripe’s own policies.
- Stripe Connect (payouts): If you are an author and request withdrawals, you may be required to complete onboarding/verification through Stripe Connect (for example, identity and/or bank account verification) depending on your country and payout method.
- Google Sign-In: If you choose to sign in with Google, Google may provide us with basic account information (such as email and profile details) as permitted by your Google settings and the integration.
- Apple App Store / Google Play: If you purchase subscriptions or digital items through Apple or Google, those platforms handle billing under their policies. We may receive purchase/entitlement signals to confirm delivery and account access.
- Google Mobile Ads: For eligible audiobook-player advertising, Google may process advertising identifiers, consent signals, device/app data, approximate location, ad requests, interactions, diagnostics, and measurement data. EpicX requests limited or non-personalized ads when consent does not permit personalization and applies under-age restrictions when account information requires them.
- Singular and Tapjoy: When permitted by your privacy choices, Singular may process installation identifiers, advertising identifiers, campaign and referral metadata, deferred links, consent signals, and verified engagement milestones to measure Tapjoy acquisition campaigns. EpicX begins with limited measurement, clears its user mapping on logout, and limits advertising identifiers for underage and Parent Mode accounts unless an eligible guardian choice applies.
- Firebase Cloud Messaging and Apple Push Notification service: device tokens and delivery data are processed to deliver phone notifications according to your settings.
- Google Cloud Translation: eligible community text and the requested target language may be processed to return a machine translation. Google processes this information under the applicable Google Cloud contractual and data-processing terms.
- DeepL API Pro: if enabled in the future under appropriate data-processing terms, eligible community text and the requested target language may be processed to return a machine translation.
- EasyPost, printers, carriers, sellers, and EpicX fulfillment staff: order and shipping information is shared only as needed to quote, produce, ship, track, support, or return physical goods.
- Tax authorities and professional advisers: seller identity and financial activity may be disclosed where required by law or authorized for accounting, audit, or filing support.
Third parties process your information under their own terms and privacy policies. We encourage you to review them.
5. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the Internet is 100% secure.
6. Communication and Verification
We may use your email address or phone number for necessary account and service communications. Marketing email and phone-tray promotions require a separate opt-in:
- Account verification codes and security notifications
- Service-related communications
- Notifications based on your selected preferences
- Marketing communications only where you opted in; you may withdraw that consent independently at any time without losing service access
We retain marketing consent and withdrawal records as reasonably necessary to demonstrate compliance with applicable anti-spam requirements, including Canada's Anti-Spam Legislation (CASL).
Phone numbers are used solely for account verification and security purposes. We do not share your phone number with third parties for marketing purposes.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data
- Opt-out of marketing communications
- Enable or disable automatic community translation and change your content language under Profile > Language & Translation
- Revisit advertising privacy choices in Privacy & Security and use operating-system tracking controls where available
8. Data Retention
We retain personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Community translation cache entries expire after no more than 180 days unless removed earlier because the underlying content is edited or deleted. Limited translation-consent records may be retained to administer and demonstrate the privacy choice. Accounting, seller, payout, order, tax-profile, consent, and supporting electronic records may be retained for at least six years after the end of the relevant tax year, and longer during a legal hold, audit, dispute, or mandatory retention period. Tax identifiers are field-level encrypted and excluded from ordinary app and admin responses. When records are no longer required, we delete or anonymize them.
8.1 Accountability, Safeguards, and Breaches
We identify purposes before collection, limit collection and use, maintain access controls and audit records for sensitive information, and investigate suspected security incidents. Where applicable law requires notification of a breach creating a real risk of significant harm, we notify affected individuals and the appropriate authority.
8.2 Parent Mode
Parent Mode stores a guardian email, verification state, strongly hashed Parent PIN, synchronized restriction settings, short-lived authorization sessions, security events, and recovery status. Plaintext Parent PINs are never stored. Guardian notices and audit records may be retained where needed for account security, disputes, and legal obligations.
9. International Transfers
Your information, including eligible community text processed by translation service providers, may be processed in countries other than where you live. We use contractual and technical safeguards appropriate to the service and take steps to protect data when it is transferred across borders.
10. Regional Privacy Rights
Depending on your location, you may have additional rights (such as access, deletion, correction, portability, or objection to processing). We honor valid requests as required by applicable law.
11. Children's Privacy
EpicX is not intended for children under 13. We do not knowingly collect personal information from children under 13.
12. Changes to This Policy
We may update this privacy policy from time to time. We will post the updated policy and, where a change is material or applicable law requires it, provide an in-app notice or request renewed acknowledgment or consent.
13. Contact Us
If you have questions about this privacy policy, please contact us at:
Email: admin@goldenepics.com
© 2026 EpicX. All rights reserved.