Legal
Privacy Notice
Last updated: June 27, 2026
This Privacy Notice explains how Epoq, Inc. (Epoq, we, us) handles personal information collected through airrprotocol.com (the Site) in support of the AIRR Protocol initiative.
1. Who is responsible
Epoq, Inc., a Massachusetts corporation, registered office 82 Wendell Avenue, STE 100, Pittsfield, MA 01201, is the controller of personal information processed through the Site. You can reach us at grahame@grayz.com.
2. What we collect
We only collect the information you choose to give us through the access-request form. That is typically:
- your name;
- your work email address;
- the name of the carrier or agency you represent;
- your role at that organization;
- any optional notes you add.
We do not run third-party advertising trackers or analytics cookies on the Site. We do not buy personal information from data brokers.
3. Why we use it
We use the information you submit only to:
- review your access request manually;
- contact you about the request and, if approved, give you access to more detail;
- keep a record of who has requested access, so we can manage the participant list and respond to any future questions about your request.
Our lawful basis is our legitimate interest in operating the AIRR Protocol initiative and responding to people who contact us, and, where applicable, the steps taken at your request before entering into any future agreement.
4. Who we share it with
We do not sell or rent your personal information. We share it only with a small number of service providers who help us run the Site and respond to you, including:
- our hosting and database provider (Lovable Cloud, powered by Supabase);
- our transactional email provider (Resend);
- the reviewer at Epoq and the AIRR Protocol convenor (Grahame Cohen).
We may also disclose information if we are required to by law, or to protect our rights or the safety of others.
5. International transfers
Our service providers may process data in the United States and other countries. Where personal information is transferred outside your country, we rely on the safeguards offered by those providers (such as Standard Contractual Clauses) where applicable.
6. How long we keep it
We keep request information for as long as needed to manage your relationship with the AIRR Protocol initiative and to comply with our legal obligations. You can ask us to delete your information at any time using the contact details below.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, and to data portability. To exercise any of these rights, email grahame@grayz.com. You also have the right to complain to your local data-protection authority.
8. Cookies
We only set a strictly-necessary cookie used to keep you signed in if you log into the participants area. For details, see our Cookie Notice.
9. Changes
We may update this Privacy Notice from time to time. The version shown on this page is the current one and the “last updated” date at the top will change when we make material updates.