Privacy Policy

Privacy notice addendum — 15 July 2026

Effective and last updated: 15 July 2026

This notice explains how Emplorium, Inc. (“Emplorium”) handles personal information when you visit the Emplorium website, contact us, create or use an account, or use Emplorium services.

This dated notice supplements the previously published privacy text retained below. If the two directly conflict about the processing described here, this notice controls.

1. Scope and roles

Emplorium provides customer-support, messaging, automation, knowledge-base, visitor, and AI-assisted features. This notice covers information Emplorium handles for its own website, accounts, customer relationship, support, and service operations.

Customers can use Emplorium to communicate with their own visitors and users. For that customer-controlled content, the customer decides why the information is collected and how it is used, while Emplorium handles it to provide the service. If you interacted with an Emplorium widget on another organisation’s site, contact that organisation first about its privacy practices or a request concerning that conversation.

2. Information we receive

Information you provide

Contact, account, and profile details, such as your name, email address, phone number, organisation, job title, team size, industry, use-case preferences, account credentials, and information entered in registration or contact forms.
Messages, support requests, feedback, and any information you enter in the optional support-chat widget.
Content and configuration submitted to the service, which can include conversations, contacts, knowledge-base material, instructions, files, automation settings, and AI inputs or outputs.
Subscription, billing address, and transaction records when a paid service is ordered. Stripe processes payment-card details and may provide transaction status and fraud-risk signals; Emplorium does not store raw card numbers.

Fields identified as required are needed to create or secure an account, respond to a request, process an order, or provide the relevant service. If you do not provide a required field, Emplorium may be unable to complete that step, enter into or perform the requested contract, or respond to the request. Fields not identified as required are optional.

Information produced when the site or service is used

Network, device, and log details such as IP address, browser, operating system, device identifier, screen resolution, connection type, language, timestamps, requested pages, referring page, load times, and technical errors.
Account and product activity needed to operate, secure, diagnose, and support the service.
Website analytics data from Google Analytics and PostHog only when you allow analytics in the site’s consent controls.
Chat state and conversation data from the Emplorium support widget only when you allow support chat and then use the widget.

Information from services you connect

If you choose to connect a third-party service, Emplorium can receive the account, content, or event data that the connection makes available. The available information and permissions are shown by that service or the relevant integration. You can disconnect an integration through the available account or provider controls.

If you use Google, GitHub, or another OAuth or single-sign-on provider, Emplorium receives the profile details that provider makes available, such as name, email address, and profile image. Emplorium may also receive organisation, industry, or intent information from business-intelligence providers and public sources to support sales, service, and business verification.

3. How information is used

Provide, configure, maintain, and support the website and service.
Create accounts, authenticate users, and manage subscriptions.
Process customer instructions, including delivering messages, running configured automations, retrieving knowledge, and producing requested AI-assisted results.
Respond to enquiries and send service, security, billing, and administrative messages.
Diagnose errors, monitor reliability, prevent abuse, and protect accounts and the service.
Understand and improve the marketing website when optional analytics consent is active.
Analyse usage patterns, conduct A/B tests, develop features, and create aggregated or de-identified statistics and benchmarks that do not reasonably identify a person.
Meet legal obligations and establish, exercise, or defend legal claims.

Emplorium does not use personal data or identifiable input content to train its generalised AI models without explicit, informed consent. Aggregated and de-identified usage data may be used to improve platform performance and model accuracy.

When an AI subprocessor handles content to produce a requested result, that content is subject to Emplorium’s subprocessor terms and is not retained by that provider beyond what is needed to fulfil the request. Enterprise customers may request additional data-isolation and model-training restrictions in a custom Data Processing Agreement.

4. Legal grounds where applicable

Depending on where you are and the activity involved, Emplorium relies on one or more of the following: performing a contract or taking requested pre-contract steps; legitimate interests in operating, securing, supporting, and improving the service; your consent for optional website services or communications; and compliance with legal obligations. Where processing is based on consent, you can withdraw it without affecting processing that occurred before withdrawal.

5. When information is disclosed

Emplorium does not sell personal information. Information may be disclosed only as needed in these contexts:

To contracted infrastructure, communications, support, payment, professional, and other service providers that help operate Emplorium, including cloud providers such as AWS or Google Cloud and payment processing such as Stripe.
To Google Analytics and PostHog for website analytics after analytics consent is given.
To services a customer or user chooses to connect, following that user’s configuration and instructions.
To authorities or other parties when reasonably necessary to comply with law, respond to lawful process, protect rights and safety, investigate abuse, or enforce agreements.
In connection with a proposed or completed financing, reorganisation, merger, sale, or transfer of all or part of the service, subject to appropriate handling of the information.

6. International handling

Emplorium operates globally, and Emplorium and its providers may process information in more than one country, including the United States. For transfers from the EEA, United Kingdom, or Switzerland to a country without an adequacy decision, Emplorium uses safeguards including European Commission Standard Contractual Clauses, data-processing agreements with subprocessors, and Binding Corporate Rules where applicable.

You can request information about, or a copy of, the safeguard relevant to your information by emailing [email protected]. Information may be redacted where necessary to protect confidential information or the rights of others.

7. Retention

Information is kept only for as long as reasonably needed for the purpose for which it was collected, including providing an active account or requested service, maintaining security and continuity, resolving disputes, and meeting legal, tax, accounting, or reporting requirements. The appropriate period depends on the type of information, the customer’s instructions, the sensitivity and risk, and applicable law. Information is deleted or de-identified when it is no longer needed, unless continued retention is required or permitted by law.

Account data: for the customer relationship and three years afterward.
Usage and log data: up to 12 months from collection.
Billing records: seven years for tax and accounting requirements.
Support communications: two years from the last contact.

After an account-deletion request, Emplorium deletes or anonymises personal data within 30 days except where continued retention is required by law or needed for the purposes above.

8. Security

Emplorium uses administrative, technical, and physical safeguards including TLS 1.2+ in transit, AES-256 encryption at rest, role-based access and least-privilege controls, multi-factor authentication for internal systems, security audits and penetration tests, and incident-response procedures. Emplorium’s SOC 2 Type II compliance programme is in progress. No internet transmission, storage system, or service can be guaranteed completely secure. Where a breach creates legally reportable risk, Emplorium will notify affected people and authorities as applicable law requires.

9. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain uses of personal information. You may also be able to withdraw consent or complain to the data-protection authority where you live. These rights can be limited or subject to exceptions. Emplorium may need to verify your identity and authority before acting on a request. Send a request to [email protected]. Emplorium will respond within 30 days, subject to any different period or extension allowed by applicable law.

Right to object: you may object to processing based on legitimate interests because of your particular situation, and may object at any time to processing for direct marketing.
Right to withdraw consent: you may withdraw consent at any time without affecting processing that took place before withdrawal.
Right to complain: you may complain to the data-protection authority where you live or work. In the United Kingdom, you can complain to the Information Commissioner’s Office (ICO).

California residents may have additional rights under the CCPA/CPRA, including rights to know, correct, delete, and opt out of covered sale or sharing. Emplorium does not sell personal information as defined by the CCPA.

Use cookie settings to change website analytics and support-chat consent. Use an unsubscribe control in an optional marketing email to stop that type of message; essential account and service messages may still be sent.

10. Children

The website and service are intended for business users and are not directed to children under 16. Emplorium does not knowingly collect personal information from children under 16 and will delete it promptly if it learns that such collection occurred. Contact [email protected] if you believe a child submitted information.

11. Changes to this notice

Emplorium may update this notice when the service, its data practices, or legal requirements change. The date above identifies the current version. For a material change, Emplorium will email registered users and display a prominent service notice for 30 days.

12. Contact

Send privacy questions, requests, complaints, or requests for the current subprocessor list to [email protected]. General enquiries may be sent to [email protected]. Please describe the request and the account, site, or interaction it concerns. The cookie notice contains more detail about browser storage and the current website providers. Postal contact: Emplorium, Inc., 54 Iveagh Avenue, London, England, NW10 7DH. Emplorium is registered in the United Kingdom.

Previously published privacy policy (retained)

Effective Date: March 25, 2026

Last Updated: March 25, 2026

This Privacy Policy explains how Emplorium, Inc. (“Emplorium,” “we,” “our,” or “us”) collects, uses, discloses, and protects your personal information when you access or use our platform, website, and related services (collectively, the “Services”). We are committed to handling your personal data with transparency, integrity, and the highest standards of care.

1. Introduction & Scope

Emplorium is an AI-powered platform that helps businesses build, deploy, and manage intelligent workflows, automated pipelines, and customer-facing experiences. Our Services are designed for businesses, developers, and individual professionals who want to harness the power of AI responsibly.

This Policy applies to:

All visitors to our website at emplorium.io
Registered users and account holders
Business customers and enterprise clients
Individuals who interact with Emplorium-powered products

This Policy does not apply where Emplorium acts solely as a data processor on behalf of a business customer. In those cases, the customer's own privacy policy and the applicable Data Processing Agreement govern the handling of personal data.

2. Information We Collect

We collect personal information in the following ways:

2.1 Information You Provide Directly

Account & Identity Details — Your name, email address, phone number, company name, and account credentials when you register.
Billing & Payment Information — Billing address and payment method details, processed securely by our third-party payment provider. We do not store raw card numbers.
Profile Information — Job title, team size, industry, and use-case preferences you optionally provide.
Communications — Messages, support requests, survey responses, or feedback you send to us.
User-Generated Content & Inputs — Text, data, documents, or other content you upload or enter while using the Services.

2.2 Information Collected Automatically

Log & Usage Data — IP addresses, browser type, operating system, referring URLs, pages visited, features accessed, and session timestamps.
Device Information — Device identifiers, screen resolution, language settings, and connection type.
Cookies & Tracking Technologies — We use cookies, pixel tags, and similar technologies. See Section 7 (Cookie Policy) for details.
Performance Metrics — Error logs, load times, and interaction data used to diagnose issues and improve the platform.

2.3 Information from Third Parties

OAuth / SSO Providers — If you sign in using Google, GitHub, or another third-party provider, we receive your name, email address, and profile picture from that provider.
Payment Processors — Our payment partner (Stripe) may share transaction status and risk signals with us.
Business Intelligence Partners — We may receive company size, industry, or intent data from enrichment partners to improve our sales and support experience.
Publicly Available Sources — We may collect publicly available information to understand market context or verify business information.

3. How We Use Your Information

We use personal information only for legitimate, specified purposes:

Service Delivery

To create and manage your account, process transactions, authenticate your identity, and provide the core features of the Emplorium platform.

Product Improvement

To analyze usage patterns, diagnose technical issues, conduct A/B testing, and develop new features. Where we use your data to improve AI systems, we do so on aggregated, de-identified datasets and will not use your personal data to train generalized AI models without your explicit consent.

Communications

To send transactional emails (receipts, alerts, account notifications), product updates, and — with your consent — marketing communications. You may opt out of marketing emails at any time.

Security & Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, unauthorized access, abuse of our Services, and other harmful activities.

Legal & Compliance

To comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms of Service, and protect the rights, property, or safety of Emplorium, our users, or others.

Aggregated & Anonymized Analytics

We may generate de-identified or aggregated data (e.g., industry benchmarks, usage statistics) that cannot reasonably identify you. This data may be used for any lawful business purpose, including publication.

4. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) or similar laws apply, we rely on the following legal bases:

Contractual Necessity — Processing required to fulfill our agreement with you (e.g., providing the Services, processing payments).
Legitimate Interests — Processing for our legitimate business interests where they are not overridden by your rights (e.g., security monitoring, product improvement, fraud prevention).
Consent — Where you have given us clear, affirmative consent (e.g., marketing emails, optional analytics cookies). You may withdraw consent at any time.
Legal Obligation — Processing required to comply with a legal obligation (e.g., tax records, responding to court orders).

5. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

5.1 Service Providers & Sub-Processors

We share data with trusted third-party vendors who process data on our behalf under contractual obligations to keep it confidential and secure. Categories include:

Cloud infrastructure providers (e.g., AWS, Google Cloud)
Payment processing (e.g., Stripe)
Customer support and communication tools
Analytics and monitoring services
Email delivery providers

A current list of sub-processors is maintained at emplorium.io/legal/sub-processors.

5.2 Business Transfers

In connection with a merger, acquisition, financing, or sale of all or a portion of our business, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request — or to protect the rights, safety, and property of Emplorium, our users, or the public.

5.4 With Your Consent

We may share your information with third parties when you explicitly authorize us to do so.

6. International Data Transfers

Emplorium operates globally. Your personal data may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ from your jurisdiction. When we transfer personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to countries not recognized as providing an adequate level of protection, we implement appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with all sub-processors
Binding Corporate Rules where applicable

For more information about our international transfer mechanisms, contact us at [email protected].

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and support our marketing. The types of cookies we use include:

Strictly Necessary: Essential for the platform to function. Cannot be disabled.
Functional: Remember your preferences and settings across sessions.
Analytics: Help us understand how visitors use our Services (e.g., Google Analytics).
Marketing: Used to deliver relevant advertising and measure campaign effectiveness.

You can manage your cookie preferences through our Cookie Consent Banner or your browser settings. Disabling certain cookies may affect your ability to use some features of the platform.For full details, see our Cookie Policy at emplorium.io/legal/cookies.

8. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Services. We also retain data to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:

Account data — Retained for the duration of your relationship with us plus 3 years thereafter.
Usage & log data — Retained for up to 12 months from collection for security and analytics purposes.
Billing records — Retained for 7 years to comply with tax and accounting regulations.
Support communications — Retained for 2 years from the date of last contact.

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access — Request a copy of the personal data we hold about you.
Right to Rectification — Request correction of inaccurate or incomplete data.
Right to Erasure — Request deletion of your personal data
Right to Restrict Processing — Ask us to pause processing of your data in certain circumstances.
Right to Data Portability — Receive your data in a structured, machine-readable format.
Right to Object — Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent — Withdraw consent at any time where processing is consent-based.
Right to Lodge a Complaint — File a complaint with your local data protection authority.

To exercise any of these rights, submit a request to [email protected] or through your account settings. We will respond within 30 days. We may ask you to verify your identity before processing your request.

9.1 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, sold, or disclosed, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA. To submit a request, contact [email protected].

10. Data Security

We implement administrative, technical, and physical safeguards to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our security measures include:

Encryption at rest and in transit (TLS 1.2+ / AES-256)
Role-based access controls and the principle of least privilege
Regular security audits and penetration testing
Multi-factor authentication for all internal systems
SOC 2 Type II compliance program (in progress)
Incident response and breach notification procedures

While we take security seriously, no system can guarantee absolute protection. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

11. AI & Model Training

Emplorium uses AI and machine learning to power core features of our platform. We want to be fully transparent about how your data interacts with these systems:

We do not use your personal data or the content of your inputs to train our general AI models without your explicit, informed consent.
Aggregated, de-identified usage data may be used to improve platform performance and model accuracy.
When AI features process your content (e.g., generating responses, summarizing documents), that content is handled in accordance with our sub-processor agreements and is not retained beyond what is necessary to fulfill the request.
Enterprise customers may negotiate additional data isolation and model training restrictions through a custom Data Processing Agreement.

12. Children's Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete that information. If you believe we have collected data from a child, please contact us at [email protected].

13. Third-Party Links & Integrations

Our Services may contain links to third-party websites, integrations, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use or access through our platform. Emplorium is not responsible for the privacy practices or content of third-party services.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

Update the "Last Updated" date at the top of this Policy
Send an email notification to registered users
Display a prominent notice on our platform for 30 days following the update

Your continued use of the Services after changes are posted constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should stop using the Services and may request deletion of your account.

Contact Us

For any questions, concerns, requests, or complaints about privacy or data protection, contact us at:

[email protected]

Or by post:

Emplorium Limited

128 Brent Park Road

London, NW4 3HP

United Kingdom

Emplorium Limited

Registered in the United Kingdom.

If you would like a list of our current subprocessors, to exercise your rights, or for any other privacy queries, please contact us at [email protected]