Privacy Policy

Effective 1 July 2026. Short version: we collect the minimum needed to run EPAX, we never sell data, and your business information stays yours.

What we collect

When you request an audit we collect what you type into the form: your name, business name, and phone number. If you contact us by email, Instagram, or phone, we keep that correspondence. As a client, we additionally hold the business information needed to deliver the service — account access, photos, prices, and calendars you share with us.

How we use it

Audit-request details are used for one thing: preparing your audit and contacting you about it. Client information is used only to deliver the plan you pay for. We do not run advertising lists and we do not sell or rent data to anyone.

Analytics

The site uses privacy-respecting page analytics (Vercel Web Analytics) to count visits and measure which pages work. It does not use advertising cookies and does not follow you across other websites. Technical error reports contain no personal information.

Who else touches the data

Three kinds of processors: our hosting provider (Vercel), our form-delivery service (which forwards audit requests to our inbox), and the platforms your service requires — Google, Meta, TripAdvisor, Booking.com. Each receives only what its role needs.

Retention

Audit requests that do not become clients are deleted within 12 months. Client records are kept for the engagement plus the period Mongolian accounting law requires for invoices. Correspondence is kept as long as it is useful for serving you.

Your rights

Ask us any time what we hold about you, ask for a correction, or ask for deletion of anything the law does not require us to keep. One message is enough.

Contact

Privacy questions: hello@epax.mn, or message @epax.ub on Instagram. EPAX operates from Ulaanbaatar, Mongolia, and this policy is governed by the laws of Mongolia.