Privacy Policy

EPB Privacy Policy Draft

_Last updated: 2026-06-27_

1. Introduction This Privacy Policy explains how EPB, also referred to as the EB-1 Portfolio Builder platform, collects, uses, stores, protects, and discloses personal data and platform-related information when users access or use the EPB platform.

EPB is a portfolio-building, workflow, evidence-organization, and best-practice guidance platform designed to help users prepare materials relevant to EB-1 case development. EPB is not a law firm and does not provide legal advice by default. This Privacy Policy should be read together with the applicable Terms and Conditions and any other notices presented through the platform.

2. Information We Collect EPB may collect and process the following categories of information:

A. Account and registration information - full name - email address - phone number - username - password or password-derived authentication data - preferred language - country of residence and related profile data

B. Client case and workflow information - questionnaire responses - selected EB-1 categories - uploaded documents and evidence files - notes, workbook entries, and messages - appointment requests and meeting details - attorney referral requests - activity history and progress information

C. Technical and security information - login activity - session data - device and browser information - IP-address-related access data where applicable - audit, security, or anti-abuse records - account behavior relevant to misuse detection, fraud prevention, or security enforcement

D. Billing and subscription information - subscription status - payment status - billing method descriptors - renewal or cancellation dates - processor-linked billing references where applicable

EPB does not intend to store raw payment card details directly unless expressly stated through a specific compliant payment workflow. Payment processing may be handled by external payment service providers.

3. How We Use Information EPB may use collected information to: - create and manage accounts; - provide platform access and client workflow functionality; - generate assessments, reports, strategy outputs, and best-practice guidance; - organize and display uploaded evidence and case progress; - support client communications, appointment flows, and attorney-referral requests; - operate AI-assisted and retrieval-assisted platform features; - secure the platform, detect misuse, investigate suspicious behavior, and enforce the Terms and Conditions; - manage subscriptions, billing states, access control, and feature unlocking; - improve platform performance, reliability, workflows, and user experience; - maintain logs, backups, operational recovery processes, and service continuity measures.

4. Legal and Service Boundary EPB may process information in order to provide portfolio-building guidance, operational support, and educational best-practice assistance. Use of EPB does not by itself create an attorney-client relationship.

Information submitted to EPB may be used to support workflow guidance, evidence organization, internal staff review, and best-practice outputs, but such use does not mean EPB is providing legal advice unless a separate attorney engagement applies.

5. AI, Automation, and Platform Processing EPB may use automated systems, retrieval systems, AI services, and workflow tools to analyze, normalize, organize, and generate platform outputs based on user inputs, uploaded materials, and case-related context.

This may include: - language normalization into English for internal workflow use; - evidence feedback and categorization support; - strategy support and knowledge-retrieval assistance; - workflow messaging and queue support.

Users should not rely on AI-generated or automated outputs as a substitute for legal advice.

6. Sharing and Disclosure EPB does not sell personal data as a consumer data product. EPB may disclose or make information available only where reasonably necessary to operate the platform, protect the service, comply with legal obligations, or provide subscribed functionality.

Information may be shared with: - hosting, infrastructure, database, storage, backup, or security providers; - AI or workflow service providers used to operate platform features; - payment processors or billing providers where needed for subscription activation; - authorized staff, operators, administrators, contractors, or attorneys working within the EPB service structure and only to the extent operationally necessary; - legal or regulatory authorities where disclosure is required by law, court order, legal process, fraud response, or rights protection.

7. Data Security and Platform Protection EPB uses reasonable administrative, technical, and operational measures to protect stored information, platform integrity, and account security. These may include access controls, audit records, backups, monitoring, and anti-abuse measures.

However, no online system can guarantee absolute security. Users are responsible for protecting their credentials and for notifying EPB if they suspect unauthorized access or account compromise.

8. Account Sharing, Misuse Detection, and Investigations Because EPB contains protected platform content, private case data, and licensed workflow materials, EPB may monitor account usage for suspicious access, unauthorized sharing, abuse, or misuse.

Where EPB reasonably suspects misuse, account sharing, scraping, unauthorized redistribution, fraud, or security compromise, EPB may review usage records and temporarily suspend or restrict access while an investigation is conducted.

9. Data Retention EPB may retain information for as long as reasonably necessary to: - provide the platform and subscription services; - maintain records of client workflow activity; - support backup, recovery, and operational continuity; - enforce platform rules and investigate misuse; - comply with contractual, legal, accounting, regulatory, or dispute-related obligations.

Retention periods may vary depending on data category, account status, security needs, legal obligations, and operational requirements.

10. Client Rights and Requests Depending on the applicable jurisdiction and legal framework, users may have rights relating to access, correction, deletion, restriction, objection, or portability of certain personal data.

Requests concerning personal data, account records, or privacy handling should be directed through the designated EPB support or administrative contact channel. EPB may require verification before acting on sensitive requests.

EPB may refuse or limit requests where legally permitted, operationally necessary, security-related, fraudulent, or inconsistent with recordkeeping or compliance obligations.

11. Cross-Border Processing Because platform infrastructure, service providers, and operational tooling may involve cross-border systems or vendors, information may be processed or stored in jurisdictions outside the user’s home country, subject to applicable operational and legal safeguards.

12. Children and Minors EPB is not intended for unsupervised use by children. Users should be of legal age to enter binding terms or otherwise use the platform only with appropriate authority and consent where legally required.

13. Third-Party Services EPB may rely on third-party providers for infrastructure, communication, AI, security, analytics, file handling, and payment services. Those third parties may operate under their own terms and privacy policies. EPB is not responsible for third-party policies outside its own service scope.

14. Changes to This Privacy Policy EPB may update this Privacy Policy from time to time to reflect operational, technical, legal, or platform changes. Updated versions may be posted through the platform or otherwise communicated to users. Continued use of EPB after changes take effect may constitute acceptance of the updated Privacy Policy where permitted by law.

15. Contact and Legal Review Note Questions about privacy, data handling, account security, data rights, or this Privacy Policy should be directed through the designated EPB support or administrative contact channel.

This draft is intended as a strong platform-facing privacy document and should be reviewed by qualified legal counsel before final public launch, especially if jurisdiction-specific privacy, consumer, or international data-transfer rules apply.