Privacy Policy

Account information: your email address and password when you create an account (passwords are stored only in hashed form by our authentication provider), and your name if you provide it.

Organization information: your organization’s name, website, cause area, social media handles, and the peer organizations you choose to benchmark against.

Content you submit: materials you paste into SpeakUp for analysis, such as mission statements, press releases, and website copy.

Media coverage data: news mentions and related public information about your organization that the service gathers from publicly available sources on your behalf.

Security and activity records: an audit log of security-relevant events in your organization (such as sign-ins, role changes, data exports, and deletions), kept so admins can see what happened in their account.

Cookies: strictly functional cookies only — a session cookie that keeps you signed in, and a temporary cookie if you use the public demo. We do not use advertising or third-party analytics cookies.

To provide the service: measuring your media coverage, generating messaging audits and reports, and surfacing PR opportunities.

To secure the service: authenticating users, enforcing role-based permissions, preventing abuse, and maintaining audit trails.

To communicate with you about the service itself, such as account confirmations and important changes.

We do not sell your personal information, and we do not use your data for advertising.

SpeakUp produces automated analyses of your content and coverage — for example, sentiment scores, messaging themes, and “say–do gap” reports. These are generated to help your team’s judgment, not replace it.

These analyses are powered by Google’s Gemini models running on Google Cloud Vertex AI. Under Google Cloud’s data-governance terms, the content we send for analysis is not used to train Google’s models. We chose this arrangement specifically for that guarantee.

We use a small number of infrastructure providers to run SpeakUp: Supabase (database and authentication), Google Cloud / Firebase (application hosting), and Google Cloud Vertex AI (AI analysis, as described above). These providers process data on our behalf under their own security and privacy commitments.

Media coverage data is sourced from the GDELT Project, an open index of world news; we send GDELT search terms (such as your organization’s name), not your account data.

Video mentions are found using YouTube API Services: we search public YouTube videos for your organization’s name and display the results with links back to YouTube. Google’s Privacy Policy (https://www.google.com/policies/privacy) applies to YouTube data. SpeakUp does not access your YouTube account.

We will update this policy if the list of providers materially changes.

Every organization’s records are isolated at the database layer using row-level security, so members of one organization can never read another organization’s data.

Access within an organization is governed by roles (admin, editor, viewer) enforced on our servers. All traffic is encrypted in transit. Service credentials are held in a managed secrets vault, and security-relevant actions are recorded in the audit log.

We keep your data for as long as your organization’s account is active.

Organization admins can permanently delete their organization at any time from Settings. Deletion removes the organization and all associated records — members, coverage data, audits, opportunities, and activity logs.

To delete an individual account, or to request deletion of specific data, email us and we will honor the request promptly.

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, by emailing support@epiloguecomms.com from the address associated with your account.

Depending on where you live, you may have additional rights under laws such as the GDPR or the California Consumer Privacy Act. We honor reasonable requests regardless of jurisdiction.

SpeakUp is a workplace tool for organizations and is not directed to children under 16. We do not knowingly collect personal information from children.

When we update this policy, we will change the “Last updated” date above. For material changes, we will also notify organization admins by email before the changes take effect.

Epilogue Group, LLC · support@epiloguecomms.com. We aim to respond to privacy requests within a few business days.