Privacy Policy

Last updated: July 9, 2026

Epic Marks LLC (“Epic Marks,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website epicmarks.com, place an order, or use our services — including our Make Your Mark web-design, hosting, and customer-portal services.

Please read this Privacy Policy carefully. By using our website or services, you consent to the practices described in this policy.

1. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party sources.

1.1 Information You Provide

Account Information: When you create an account, we collect your name, email address, phone number, and password.

Order Information: When you place an order, we collect:

Billing and shipping addresses
Payment information (processed securely through Square)
Order details and preferences
Uploaded artwork and design files

Communications: When you contact us, we collect the information you provide in your messages, including email correspondence and phone call records.

Marketing Preferences: If you subscribe to our newsletter or marketing communications, we collect your email address and preferences.

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

Device Information: Browser type, operating system, device type, and unique device identifiers
Usage Information: Pages viewed, time spent on pages, clicks, and navigation paths
Location Information: General geographic location based on IP address
Log Data: IP address, access times, and referring website addresses

1.3 Uploaded Artwork

When you upload artwork for custom printing orders, we store your files solely for the purpose of fulfilling your order. Your artwork files are:

Used only to produce your ordered products
Not shared with third parties except as necessary for order fulfillment
Not used for marketing or promotional purposes without your consent
Retained for a limited period to allow for reprints or quality issues

2. How We Use Your Information

We use the information we collect to:

2.1 Provide Our Services

Process and fulfill your orders
Print your custom designs
Ship products to you
Process payments
Provide customer support
Manage your Epic Rewards loyalty program—your points and tier progression are tracked by Square and linked to your Epic Marks account to automatically apply earned discounts and benefits at checkout

2.2 Communicate With You

Send order confirmations and shipping notifications
Respond to your inquiries and requests
Send marketing communications (with your consent)
Notify you about changes to our services or policies

2.3 Improve Our Services

Analyze website usage and trends
Improve our website and user experience
Develop new products and services
Personalize your experience

2.4 Protect Our Business

Detect and prevent fraud
Enforce our Terms of Service
Comply with legal obligations

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

Payment Processing: Square processes all payments securely
Shipping: USPS and UPS receive shipping addresses to deliver your orders
Email Marketing: Brevo manages our email communications
Analytics: Google Analytics helps us understand website usage

(Additional providers used specifically for our Make Your Mark web services are listed in Section 11.)

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

Comply with legal obligations
Protect the rights, property, or safety of Epic Marks, our customers, or others
Investigate fraud or security issues

3.3 Business Transfers

If Epic Marks is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website.

4.1 Types of Cookies We Use

Essential Cookies: Required for the website to function properly, including:

Shopping cart functionality
User authentication
Security features

Analytics Cookies: Help us understand how visitors use our website:

Google Analytics for traffic analysis
Page view and session tracking

Marketing Cookies: Used to deliver relevant advertisements:

Social media pixels (Facebook, Instagram)
Remarketing cookies

4.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality, including the shopping cart and checkout process.

Most browsers allow you to:

View cookies stored on your device
Delete individual or all cookies
Block cookies from specific or all websites
Set preferences for first-party vs. third-party cookies

5. Third-Party Services

Our website integrates with third-party services that have their own privacy policies:

5.1 Payment Processing

Square: All payment transactions are processed through Square. Your payment card information is transmitted directly to Square and is not stored on our servers. View Square’s Privacy Policy.

5.2 Email Marketing

Brevo: We use Brevo for email marketing and customer relationship management. View Brevo’s Privacy Policy.

5.3 Analytics

Google Analytics: We use Google Analytics to analyze website traffic and usage patterns. View Google’s Privacy Policy.

5.4 Cloud Storage Integrations (Gang Sheet Builder)

Our Gang Sheet Builder allows you to import images from third-party cloud services. These integrations are entirely optional and only activated when you choose to use them.

Google Drive

Data Accessed: When you choose to import images from Google Drive, we use the Google Picker API to let you select specific files. We only access the files you explicitly select—we cannot browse or access any other files in your Google Drive.

How We Use It: Selected image files are downloaded and stored on our servers for use in your gang sheet design. The original files in your Google Drive are not modified.

Data Storage: Imported images are stored on our secure servers (Amazon S3) and are subject to our standard data retention policies. We do not store your Google account credentials or maintain ongoing access to your Google Drive.

Revoking Access: Since we use the Google Picker (one-time file selection) rather than persistent OAuth access, no ongoing permissions need to be revoked. You can review apps with access to your Google account at myaccount.google.com/permissions.

View Google’s Privacy Policy.

Canva

Data Accessed: When you connect your Canva account, we request read-only access to view your designs (titles and thumbnails) and export selected designs as images. We cannot edit or delete your Canva designs.

How We Use It: You can browse your Canva designs and select ones to import into the Gang Sheet Builder. Selected designs are exported as PNG images and stored on our servers for use in your gang sheet.

Data Storage: Imported images are stored on our secure servers (Amazon S3). We store encrypted OAuth tokens to maintain your connection, allowing you to import additional designs without re-authenticating. Tokens are automatically refreshed and can be revoked at any time.

Revoking Access: You can disconnect your Canva account at any time from within the Gang Sheet Builder. You can also revoke access directly from Canva’s Connected Apps settings. When access is revoked, we delete your stored tokens.

View Canva’s Privacy Policy.

Dropbox

Data Accessed: When you connect your Dropbox account, we request read-only access to files you select for import. We cannot access files you don’t explicitly choose to share.

How We Use It: Selected image files are downloaded and stored on our servers for use in your gang sheet design.

Revoking Access: You can disconnect your Dropbox account from the Gang Sheet Builder or revoke access from Dropbox’s Connected Apps settings.

View Dropbox’s Privacy Policy.

5.5 AI Customer Support Chatbot

We offer an AI-powered customer support chatbot on our website and through Facebook Messenger to help answer questions about orders, services, and general inquiries.

Website Chat Widget

Data Collected: When you use our website chat, we collect your messages and generate a session identifier. If you provide your email or order number, we use that to look up relevant information to assist you.

How We Use It: Your messages are processed by AI to provide helpful responses. Conversations may be reviewed by our team to improve service quality and train the AI system.

Data Storage: Chat conversations are stored on our secure servers. Message content may be encrypted at rest. Conversations are retained for 90 days for quality assurance purposes.

Facebook Messenger Integration

Data Accessed: When you message our Facebook Page, Facebook provides us with your Page-Scoped User ID (a unique identifier specific to our page—not your real Facebook ID or profile information) and your message content.

How We Use It: Messages are processed by our AI chatbot to provide customer support. We sync recent conversation history from Facebook to maintain context across sessions. You can request to speak with a human at any time, and we’ll transfer the conversation to our team.

Data Storage: We store your messages and Page-Scoped User ID to maintain conversation history and provide consistent support. Message content may be encrypted at rest.

Your Control: You can delete your conversation with our page directly through Facebook Messenger. You can also block our page to stop receiving messages.

This integration is subject to Meta’s Privacy Policy and Meta Platform Terms.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Account Information: Retained while your account is active and for 3 years after account closure
Order Records: Retained for 7 years for tax and legal compliance
Artwork Files: Retained for 90 days after order completion to allow for reprints
Marketing Data: Retained until you unsubscribe or request deletion
Analytics Data: Aggregated data retained indefinitely; individual data retained for 26 months

(Retention specific to Make Your Mark web services is described in Section 11.)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption: SSL/TLS encryption for all data transmitted to and from our website
Secure Payments: PCI-compliant payment processing through Square
Access Controls: Limited employee access to personal information on a need-to-know basis
Security Monitoring: Regular monitoring for unauthorized access or security breaches

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 Access and Portability

You can request a copy of the personal information we hold about you. Contact us at [email protected] to request your data.

8.2 Correction

You can update your account information at any time by logging into your account or contacting us.

8.3 Deletion

You can request deletion of your personal information by contacting us at [email protected]. We will process your request within 30 days. Note that we may need to retain certain information for legal or business purposes (such as order records for tax compliance).

8.4 Marketing Opt-Out

You can opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email
Contacting us at [email protected]

Important: Our Epic Rewards loyalty program requires enrollment in our mailing list. If you unsubscribe from marketing emails, you will also be unenrolled from Epic Rewards and lose access to tier-based discounts and benefits.

Note: You will still receive transactional emails related to your orders (order confirmations, shipping updates, etc.) regardless of your marketing preferences.

8.5 Do Not Track

Our website does not currently respond to “Do Not Track” browser signals. You can manage tracking preferences through your browser settings.

9. Children’s Privacy

Our website and services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at [email protected], and we will delete that information.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

10.4 No Sale of Personal Information

We do not sell your personal information as defined by the CCPA.

To exercise your California privacy rights, contact us at [email protected] or call 512-649-3886.

11. Make Your Mark Web Services

This section describes how we handle personal information in connection with Make Your Mark, our web-design service line: the Website Checkup audit, the customer portal at mym.epicmarks.com, and the websites we build and host for business clients. It supplements the sections above; where it addresses a topic specifically for our web services, it controls for that context.

11.1 Information We Collect (Web Services)

Customer portal (our web clients):

Account and authentication data — email address (we use passwordless “magic-link” sign-in, so we do not store a portal password), name, role, and sign-in/session records.
Content you submit — business information (hours, contact details, notices), photos and files you upload, and the contents of support tickets and change requests.
Billing data — a payment-card token plus the card’s brand and last four digits, and your payment history. Full card numbers are collected and stored by our payment processor, Square — not by us.
Technical data — IP address and basic request metadata, used for security, rate-limiting, and audit logs.

Website Checkup (audit): When you request an audit, we process the website address/domain you submit and publicly available information about it (for example, DNS and TLS configuration, on-page SEO signals, performance metrics, and public business-listing and map data). We do not require personal information beyond your contact details to deliver the report.

Websites we build and host (site-visitor data): The sites we build for clients may include a contact/lead form. When a visitor submits one, we process the name, email, phone number, and message they provide, plus their IP address and anti-abuse signals, solely to forward the message to the relevant business (our client) and to prevent spam and abuse. We do not send visitors marketing email and do not operate an autoresponder on these forms. For this site-visitor data, the client business is the controller and we act as its service provider/processor — visitors should also consult that business’s own privacy notice.

11.2 How We Use Web-Services Information

We use the information above to provide, secure, and maintain the portal and hosted sites; deliver audit reports; authenticate sign-ins; forward site-visitor leads to the relevant business; process payments and manage subscriptions; provide support; detect and prevent fraud and abuse; and comply with law.

11.3 Service Providers (Web Services)

In addition to the providers listed in Sections 3 and 5, we use the following providers to run our web services, each limited to processing information on our behalf:

Provider	Purpose
Cloudflare, Inc.	Website and portal hosting, edge compute and storage, bot protection (Turnstile), cookieless web analytics, and access control
Resend	Transactional email (magic-link sign-in, lead notifications, ticket updates)
Square, Inc.	Payment processing and card-on-file storage
Google LLC	Public business-listing and site-performance data for audits (Places / PageSpeed APIs)
Serper	Public search-result data for audits
GitHub, Inc.	Source-code and site-content repository hosting
Anthropic, PBC	AI-assisted drafting of audit report narrative

11.4 Cookies (Web Services)

The customer portal uses a strictly necessary session cookie to keep you signed in. It does not use advertising cookies.
Client websites are built to be privacy-light. Analytics on hosted client sites use Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. The Turnstile anti-bot widget on contact forms may set or read a token strictly to verify that a submission is human. Individual client sites may add their own cookies or tools; where they do, that client’s own notice governs.

11.5 Data Retention (Web Services)

Portal account and content data is retained while the account is active and for a reasonable period afterward, then deleted, unless we must keep it longer for legal, tax, or dispute reasons.
Site-visitor leads are forwarded to the client’s inbox and are not retained by us as a standing record beyond what is transiently needed to deliver and secure the message.
Audit reports and artifacts are retained for up to 12 months to allow re-access and conversion to a build, then deleted.
Payment records are retained as required for tax and accounting, consistent with the retention periods in Section 6.

11.6 Your Choices (Web Services)

You may access, correct, or request deletion of your web-services personal information using the contact details in Section 13. If you are a visitor who submitted a lead on a client’s site and want it addressed, contact that business directly, or contact us and we will route your request to the appropriate client.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

Update the “Last Updated” date at the top of this page
Post the revised policy on our website
For material changes, notify you via email or prominent website notice

Your continued use of our website after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Epic Marks LLC
418 Chisholm Valley Drive
Round Rock, TX 78681

Phone: 512-649-3886
Email: [email protected]

Business Hours:
Monday – Friday: 10:00 AM – 7:00 PM CT
Saturday: 10:00 AM – 5:00 PM CT
Sunday: 12:00 PM – 5:00 PM CT

For general inquiries or support, visit our Contact Page.