سياسة الخصوصية

1. Scope and roles

Emplorium provides customer-support, messaging, automation, knowledge-base, visitor, and AI-assisted features. This notice covers information Emplorium handles for its own website, accounts, customer relationship, support, and service operations.

Customers can use Emplorium to communicate with their own visitors and users. For that customer-controlled content, the customer decides why the information is collected and how it is used, while Emplorium handles it to provide the service. If you interacted with an Emplorium widget on another organisation’s site, contact that organisation first about its privacy practices or a request concerning that conversation.

2. Information we receive

Information you provide

• Contact, account, and profile details, such as your name, email address, phone number, organisation, job title, team size, industry, use-case preferences, account credentials, and information entered in registration or contact forms.
• Messages, support requests, feedback, and any information you enter in the optional support-chat widget.
• Content and configuration submitted to the service, which can include conversations, contacts, knowledge-base material, instructions, files, automation settings, and AI inputs or outputs.
• Subscription, billing address, and transaction records when a paid service is ordered. Stripe processes payment-card details and may provide transaction status and fraud-risk signals; Emplorium does not store raw card numbers.

Fields identified as required are needed to create or secure an account, respond to a request, process an order, or provide the relevant service. If you do not provide a required field, Emplorium may be unable to complete that step, enter into or perform the requested contract, or respond to the request. Fields not identified as required are optional.

Information produced when the site or service is used

• Network, device, and log details such as IP address, browser, operating system, device identifier, screen resolution, connection type, language, timestamps, requested pages, referring page, load times, and technical errors.
• Account and product activity needed to operate, secure, diagnose, and support the service.
• Website analytics data from Google Analytics and PostHog only when you allow analytics in the site’s consent controls.
• Chat state and conversation data from the Emplorium support widget only when you allow support chat and then use the widget.

Information from services you connect

If you choose to connect a third-party service, Emplorium can receive the account, content, or event data that the connection makes available. The available information and permissions are shown by that service or the relevant integration. You can disconnect an integration through the available account or provider controls.

If you use Google, GitHub, or another OAuth or single-sign-on provider, Emplorium receives the profile details that provider makes available, such as name, email address, and profile image. Emplorium may also receive organisation, industry, or intent information from business-intelligence providers and public sources to support sales, service, and business verification.

3. How information is used

• Provide, configure, maintain, and support the website and service.
• Create accounts, authenticate users, and manage subscriptions.
• Process customer instructions, including delivering messages, running configured automations, retrieving knowledge, and producing requested AI-assisted results.
• Respond to enquiries and send service, security, billing, and administrative messages.
• Diagnose errors, monitor reliability, prevent abuse, and protect accounts and the service.
• Understand and improve the marketing website when optional analytics consent is active.
• Analyse usage patterns, conduct A/B tests, develop features, and create aggregated or de-identified statistics and benchmarks that do not reasonably identify a person.
• Meet legal obligations and establish, exercise, or defend legal claims.

Emplorium does not use personal data or identifiable input content to train its generalised AI models without explicit, informed consent. Aggregated and de-identified usage data may be used to improve platform performance and model accuracy.

When an AI subprocessor handles content to produce a requested result, that content is subject to Emplorium’s subprocessor terms and is not retained by that provider beyond what is needed to fulfil the request. Enterprise customers may request additional data-isolation and model-training restrictions in a custom Data Processing Agreement.

4. Legal grounds where applicable

Depending on where you are and the activity involved, Emplorium relies on one or more of the following: performing a contract or taking requested pre-contract steps; legitimate interests in operating, securing, supporting, and improving the service; your consent for optional website services or communications; and compliance with legal obligations. Where processing is based on consent, you can withdraw it without affecting processing that occurred before withdrawal.

5. When information is disclosed

Emplorium does not sell personal information. Information may be disclosed only as needed in these contexts:

• To contracted infrastructure, communications, support, payment, professional, and other service providers that help operate Emplorium, including cloud providers such as AWS or Google Cloud and payment processing such as Stripe.
• To Google Analytics and PostHog for website analytics after analytics consent is given.
• To services a customer or user chooses to connect, following that user’s configuration and instructions.
• To authorities or other parties when reasonably necessary to comply with law, respond to lawful process, protect rights and safety, investigate abuse, or enforce agreements.
• In connection with a proposed or completed financing, reorganisation, merger, sale, or transfer of all or part of the service, subject to appropriate handling of the information.

6. International handling

Emplorium operates globally, and Emplorium and its providers may process information in more than one country, including the United States. For transfers from the EEA, United Kingdom, or Switzerland to a country without an adequacy decision, Emplorium uses safeguards including European Commission Standard Contractual Clauses, data-processing agreements with subprocessors, and Binding Corporate Rules where applicable.

You can request information about, or a copy of, the safeguard relevant to your information by emailing [email protected]. Information may be redacted where necessary to protect confidential information or the rights of others.

7. Retention

Information is kept only for as long as reasonably needed for the purpose for which it was collected, including providing an active account or requested service, maintaining security and continuity, resolving disputes, and meeting legal, tax, accounting, or reporting requirements. The appropriate period depends on the type of information, the customer’s instructions, the sensitivity and risk, and applicable law. Information is deleted or de-identified when it is no longer needed, unless continued retention is required or permitted by law.

• Account data: for the customer relationship and three years afterward.
• Usage and log data: up to 12 months from collection.
• Billing records: seven years for tax and accounting requirements.
• Support communications: two years from the last contact.

After an account-deletion request, Emplorium deletes or anonymises personal data within 30 days except where continued retention is required by law or needed for the purposes above.

8. Security

Emplorium uses administrative, technical, and physical safeguards including TLS 1.2+ in transit, AES-256 encryption at rest, role-based access and least-privilege controls, multi-factor authentication for internal systems, security audits and penetration tests, and incident-response procedures. Emplorium’s SOC 2 Type II compliance programme is in progress. No internet transmission, storage system, or service can be guaranteed completely secure. Where a breach creates legally reportable risk, Emplorium will notify affected people and authorities as applicable law requires.

9. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain uses of personal information. You may also be able to withdraw consent or complain to the data-protection authority where you live. These rights can be limited or subject to exceptions. Emplorium may need to verify your identity and authority before acting on a request. Send a request to [email protected]. Emplorium will respond within 30 days, subject to any different period or extension allowed by applicable law.

• Right to object: you may object to processing based on legitimate interests because of your particular situation, and may object at any time to processing for direct marketing.
• Right to withdraw consent: you may withdraw consent at any time without affecting processing that took place before withdrawal.
• Right to complain: you may complain to the data-protection authority where you live or work. In the United Kingdom, you can complain to the Information Commissioner’s Office (ICO).

California residents may have additional rights under the CCPA/CPRA, including rights to know, correct, delete, and opt out of covered sale or sharing. Emplorium does not sell personal information as defined by the CCPA.

Use cookie settings to change website analytics and support-chat consent. Use an unsubscribe control in an optional marketing email to stop that type of message; essential account and service messages may still be sent.

10. Children

The website and service are intended for business users and are not directed to children under 16. Emplorium does not knowingly collect personal information from children under 16 and will delete it promptly if it learns that such collection occurred. Contact [email protected] if you believe a child submitted information.

11. Changes to this notice

Emplorium may update this notice when the service, its data practices, or legal requirements change. The date above identifies the current version. For a material change, Emplorium will email registered users and display a prominent service notice for 30 days.

12. Contact

Send privacy questions, requests, complaints, or requests for the current subprocessor list to [email protected]. General enquiries may be sent to [email protected]. Please describe the request and the account, site, or interaction it concerns. The cookie notice contains more detail about browser storage and the current website providers. Postal contact: Emplorium, Inc., 54 Iveagh Avenue, London, England, NW10 7DH. Emplorium is registered in the United Kingdom.