Privacy Policy

Effective September 24, 2026

Epoch Solutions Group, LLC (“Epoch,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with:

  • Our websites, including epochsg.com;
  • EpochField and its associated mobile, web, administrative, scheduling, workflow, and support services;
  • EpochField operated as a software-as-a-service offering hosted by or for Epoch (“EpochField SaaS”);
  • EpochField installed and operated within a customer’s environment or an environment selected and controlled by the customer (“Customer-Hosted EpochField”); and
  • Our sales, implementation, training, customer-support, and other business activities.

EpochField is available under different deployment models. The information Epoch receives and the responsibilities of Epoch and its customers differ depending on the deployment model. Those differences are described throughout this Policy.

Important Information for EpochField Users

If you use EpochField through your employer or another organization, that organization (the “Customer”) determines how EpochField is configured and what information is collected and used through it. Depending on the deployment model, Customer Data may be stored in an environment hosted by Epoch or in an environment controlled by the Customer.

For most Customer Data, the Customer determines why and how the information is processed. Epoch generally processes Customer Data only on the Customer’s behalf and does not independently determine how that information is used. The sections below explain the differences between EpochField SaaS and Customer-Hosted EpochField.

1. Scope and Roles

In this Policy, “Customer” means the organization that licenses, subscribes to, or otherwise uses EpochField. “User” means an individual authorized by a Customer to use EpochField. For purposes of this Privacy Policy, “Customer Data” means information submitted to, stored in, or processed through EpochField on behalf of a Customer. Customer agreements may define “Customer Data” differently for contractual purposes.

For most Customer Data:

  • The Customer determines why and how the information is processed and acts as the data controller, business, or equivalent entity under applicable privacy law.
  • Epoch acts as a service provider or data processor when it processes Customer Data on the Customer’s behalf.
  • Each Customer is responsible for providing any notices, obtaining any consents, and establishing any other lawful basis required for its collection and use of Customer Data, including employee and workforce location information.

Epoch acts on its own behalf with respect to information collected through our public website, sales and marketing activities, business contacts, account administration, billing, security operations, and similar business functions.

If a Customer’s agreement, data processing addendum, or other written contract with Epoch conflicts with this Policy, the applicable contract will control to the extent of the conflict.

2. Deployment Models

EpochField SaaS
For EpochField SaaS, Epoch or its authorized hosting providers host the EpochField environment. Customer Data may therefore be transmitted to and stored in systems managed by Epoch and its service providers.

Epoch processes this information to provide, secure, maintain, support, and administer the contracted services, subject to the Customer’s agreement with Epoch.

Customer-Hosted EpochField
For Customer-Hosted EpochField, the Customer or its designated hosting provider operates the server environment in which Customer Data is primarily stored and processed.

Unless otherwise agreed or enabled by the Customer:

  • Epoch does not routinely host the Customer’s production Customer Data;
  • Customer Data transmitted by EpochField mobile or web applications is transmitted to the Customer-controlled environment;
  • The Customer controls the infrastructure, hosting location, user access, backups, retention, and deletion of Customer Data; and
  • The Customer is responsible for the security and administration of its hosting environment.

Epoch may receive limited information from a Customer-Hosted deployment when necessary to provide licensing, implementation, maintenance, diagnostics, security, or support services. The categories and transmission of such information depend on the Customer’s configuration and agreement with Epoch.

When troubleshooting requires access to a Customer’s environment or a copy of Customer Data, such access will be provided or authorized by the Customer and limited to Epoch personnel with a business need.

3. Information We Collect

The information processed through EpochField, and the information Epoch itself receives, depend on how an individual interacts with Epoch and which deployment model applies.

Website and Business Contact Information
When you visit our website, request a demonstration, contact us, register for an event, download materials, or communicate with our sales or support teams, we may collect:

  • Name, job title, employer, and business contact details;
  • Information submitted through forms, email, telephone calls, or other communications;
  • Marketing and communication preferences;
  • Internet Protocol address, browser type, device type, operating system, referring pages, pages visited, and date and time information; and
  • Information collected through cookies and similar technologies.

You generally may browse our public website without directly providing your name or contact information, although certain technical information may be collected automatically.

Customer and User Account Information
Depending on the deployment and configuration, EpochField may process, and Epoch or the Customer may receive or maintain:

  • User name and business contact information;
  • Email address, telephone number, employee or user identifier, and assigned work location;
  • Organization, department, team, role, and access permissions;
  • Authentication information or identifiers, subject to the authentication method selected by the Customer; and
  • Customer account, billing, subscription, licensing, and administrative contact information.

For Customer-Hosted EpochField, this information is ordinarily maintained in the Customer-controlled environment. Epoch may separately retain Customer administrative contacts and related business records necessary to manage the commercial relationship.

Customer Operational and Workspace Data
Customers may use EpochField to process information concerning:

  • Tasks, jobs, work orders, schedules, and dispatch activities;
  • Documents, photographs, forms, notes, and attachments;
  • Infrastructure, equipment, facilities, and other fixed or mobile assets;
  • Customer or end-customer records associated with work activities;
  • Historical changes to jobs, users, forms, documents, and assets;
  • Data imported from or transmitted to geographic information systems, enterprise asset-management systems, and other Customer systems; and
  • Other information entered into forms or workflows configured by the Customer.

The Customer determines the particular information entered into EpochField and how that information is used.

For EpochField SaaS, Epoch processes this data within the hosted environment on the Customer’s behalf. For Customer-Hosted EpochField, the data is primarily processed and retained in the Customer-controlled environment.

Location Information
When enabled by the Customer and permitted by the User’s device settings, EpochField may collect precise or approximate location information. Depending on the Customer’s configuration, this may occur while the application is in use or while it is operating in the background.

Location information may be used for functions such as:

  • Displaying users, work, and assets on maps;
  • Dispatching and workforce coordination;
  • Recording arrival at or departure from work sites;
  • Geofencing and geographic searches;
  • Route, activity, safety, and operational reporting; and
  • Synchronizing field activity with the Customer’s systems.

For EpochField SaaS, location information may be transmitted to and stored in the Epoch-hosted environment. For Customer-Hosted EpochField, it is ordinarily transmitted to and stored in the Customer-controlled environment.

The Customer determines whether location features are enabled, the purposes for which location information is used, and which authorized personnel may view it. Users should direct questions about employer-required location tracking to their employer or other relevant Customer organization.

Users may be able to manage certain location permissions through their device settings. Disabling location access may prevent some EpochField functions from operating properly and may be inconsistent with a Customer’s workplace requirements.

Device, Log, and Diagnostic Information
Depending on the deployment, configuration, and support arrangement, EpochField may generate, and Epoch may receive, limited technical information such as:

  • Application version, device type, operating system, and device identifiers;
  • Login events, system logs, audit records, and error reports;
  • Performance, availability, synchronization, and security information;
  • License status and product usage information; and
  • Support communications and diagnostic files provided by the Customer.

For Customer-Hosted EpochField, technical information is not necessarily transmitted to Epoch. Epoch receives it only when the software is configured to transmit it, the Customer provides it, or the applicable agreement authorizes its collection.

4. How We Use Information

We may use information as appropriate to:

  • Provide, configure, operate, and administer EpochField;
  • Authenticate users and maintain account security;
  • Process and synchronize work, asset, form, and location data;
  • Provide implementation, training, maintenance, and customer support;
  • Diagnose errors, monitor performance, and protect the security and availability of our services;
  • Manage licenses, subscriptions, billing, and the Customer relationship;
  • Communicate service notices, product updates, and support information;
  • Respond to inquiries and requests;
  • Conduct analytics relating to our website and business operations and, where permitted by the applicable Customer agreement, analyze service usage to maintain and improve our products and services;
  • Develop aggregated or deidentified statistics that do not reasonably identify an individual or Customer;
  • Send marketing communications where permitted by law;
  • Enforce our agreements and protect Epoch, our Customers, Users, and others; and
  • Comply with legal and regulatory obligations.

Epoch does not use Customer Data from one Customer to provide another Customer access to that data except when the affected Customers have expressly authorized a configured data-sharing arrangement.

Epoch will not sell Customer Data to advertisers.

5. How Information Is Disclosed

We may disclose information in the following circumstances.

Within the Customer’s Organization
EpochField is designed as a workforce and operational collaboration platform. Information entered into EpochField may be available to other authorized Users, supervisors, administrators, dispatchers, and other personnel designated by the Customer.

The Customer controls user roles and permissions. Information submitted to a shared Customer workspace should not be considered private from the Customer or from authorized members of that workspace.

Customer-Authorized Integrations and Data Sharing
At a Customer’s direction, EpochField may exchange information with systems such as geographic information systems, enterprise asset-management systems, identity providers, reporting systems, and other third-party applications.

Customers may also configure arrangements that share selected information between separate organizations or workspaces. Epoch will enable such sharing only as directed or authorized by the participating Customers.

Third-party systems process information according to their own agreements and privacy practices.

Service Providers
We may use hosting, infrastructure, payment-processing, communications, analytics, support, security, and other providers to perform services for Epoch.

These providers are permitted to process personal information only as necessary to provide their services to Epoch and subject to appropriate contractual obligations.

The providers used for EpochField SaaS may differ from those involved with Customer-Hosted EpochField. A Customer’s own hosting providers and technology vendors are selected and managed by that Customer.

Customer Support and Professional Services
Authorized Epoch personnel may access Customer Data when necessary to provide implementation, maintenance, professional, or support services.

For Customer-Hosted EpochField, such access may require the Customer to provide temporary remote access, diagnostic files, database extracts, or other information. Epoch will use this information for the authorized purpose and handle it in accordance with the applicable agreement and support procedures.

Legal Requirements and Protection
We may preserve or disclose information when we reasonably believe doing so is necessary to:

  • Comply with applicable law, legal process, or a valid governmental request;
  • Protect the rights, property, or security of Epoch, a Customer, a User, or another person;
  • Detect, investigate, or prevent fraud, abuse, or security incidents;
  • Enforce our agreements; or
  • Respond to an emergency involving a risk of death or serious physical injury.

Where legally permitted and appropriate, Epoch will direct requests for Customer Data to the relevant Customer or notify the Customer before disclosure.

Business Transactions
Information may be disclosed or transferred as part of a proposed or completed merger, acquisition, financing, reorganization, sale of assets, or similar transaction. Where required, we will provide notice of material changes affecting the handling of personal information.

Testimonials and Case Studies
We may publish a Customer’s name, testimonial, logo, success story, or case study only with appropriate authorization.

6. Cookies and Similar Technologies

Our public website may use cookies, pixels, scripts, and similar technologies for:

  • Essential website functionality;
  • Remembering preferences;
  • Measuring website traffic and performance;
  • Understanding how visitors use our website;
  • Supporting marketing campaigns; and
  • Providing relevant content or advertising.

These technologies may collect information such as IP address, browser type, device information, pages viewed, referring website, and interaction dates and times.

Our website may use analytics, customer relationship management, support, communications, and marketing technology providers. These providers may process information under their own privacy policies and applicable agreements.

Where required, visitors may be offered cookie-management choices. Browser settings may also be used to block or delete cookies, although doing so may affect website functionality.

Cookie and marketing technologies used on the public website are separate from the operational processing of Customer Data within Customer-Hosted EpochField.

7. Data Retention and Deletion

EpochField SaaS
Epoch retains Customer Data for as long as necessary to provide the contracted services and as otherwise specified in the applicable agreement.

When a User or Customer deletes information, the information may remain temporarily in backups, logs, or recovery systems. Subject to legal, security, and contractual requirements, deleted Customer Data is removed from active and backup systems in accordance with Epoch’s established retention practices and the applicable Customer agreement.

Epoch may retain information for a longer period when necessary to comply with law, resolve disputes, prevent fraud, maintain security, or enforce an agreement.

Customer-Hosted EpochField
The Customer controls retention and deletion of Customer Data stored in its environment, including its production databases, backups, logs, mobile-device management systems, and integrated systems.

Uninstalling EpochField or ending maintenance services does not automatically delete information from the Customer’s infrastructure. Users seeking deletion of information from a Customer-Hosted deployment should contact the Customer that operates the environment.

Information separately provided to Epoch for support, licensing, account administration, or other business purposes is retained in accordance with Epoch’s applicable retention practices and contractual obligations.

Website and Business Records
We retain website, contact, sales, billing, marketing, and support information for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, and recordkeeping requirements.

8. Information Security

Epoch uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

For EpochField SaaS, Epoch is responsible for security of the hosting environment within the scope defined by the applicable agreement. Customers remain responsible for matters such as:

  • Selecting and managing authorized Users;
  • Assigning appropriate roles and permissions;
  • Protecting login credentials;
  • Configuring Customer-controlled integrations and devices; and
  • Promptly notifying Epoch of suspected unauthorized access.

For Customer-Hosted EpochField, the Customer is responsible for securing and administering its infrastructure, networks, databases, backups, identity systems, integrations, and server environment. Epoch is responsible for the security measures applicable to software and services under Epoch’s control, as described in the applicable agreement.

Customer Data transmitted between supported EpochField components is protected using appropriate encryption in transit. Data stored on mobile devices may also be protected through application, device, and operating-system security controls. No security program can guarantee complete protection against every threat.

Users must not share accounts or passwords. Suspected account compromise or security incidents involving Epoch-hosted services should be reported promptly to Epoch and the relevant Customer administrator.

9. Data Location and Transfers

Epoch is headquartered in the United States.

For EpochField SaaS, Customer Data is hosted in the location identified in the Customer’s agreement or service documentation. Unless otherwise agreed, SaaS data may be processed in the United States by Epoch and its authorized service providers.

For Customer-Hosted EpochField, the Customer selects and controls the hosting location. Epoch does not determine where Customer Data in that environment is stored, except for limited information separately transferred to Epoch for support or other authorized services.

Where personal information is transferred across jurisdictions, Epoch will use appropriate safeguards as required by applicable law.

10. Privacy Choices and Requests

Individuals may:

  • Unsubscribe from marketing emails by using the link included in the message;
  • Manage available website cookie preferences;
  • Update certain account information through the applicable service or Customer administrator; and
  • Request access, correction, deletion, or another privacy right available under applicable law.

When Epoch processes Customer Data on behalf of a Customer, Users should first direct privacy requests to the Customer, such as their employer. If Epoch receives a request concerning Customer Data, we may refer the request to the relevant Customer and assist that Customer as required by contract or law.

Epoch may need to verify an individual’s identity and authority before completing a request. Some information may be retained where permitted or required by law.

Privacy requests concerning information that Epoch controls directly may be submitted using the contact details below.

11. Children’s Privacy

Epoch’s website and services are intended for organizations and their authorized workforce and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through our public website.

If a Customer uses EpochField in a manner involving minors, that Customer is responsible for complying with applicable notice, consent, and privacy requirements.

12. Third-Party Websites and Services

Our website and services may contain links to third-party websites or integrate with third-party systems. Epoch does not control the privacy or security practices of those third parties. Information provided to a third party is governed by that third party’s terms and privacy policy.

13. Changes to This Policy

We may update this Policy periodically to reflect changes in our services, practices, technology, or legal obligations.

The revised Policy will display an updated effective date. If a change materially affects how we process Customer Data, we will provide any additional notice required by applicable law or contract.

14. Contact Us

Questions, comments, or privacy requests may be directed to:

Epoch Solutions Group, LLC 

10155 Westmoor Drive, Suite 135 

Westminster, CO 80021 

United States

 

Email: support@epochsg.com 

General inquiries: info@epochsg.com 

Telephone: (720) 458-3006