Privacy Policy
This Privacy Policy explains how Emplorium, Inc. (“Employrium,” “we,” “our,” or “us”) collects, uses, discloses, and protects your personal information when you access or use our platform, website, and related services (collectively, the “Services”). We are committed to handling your personal data with transparency, integrity, and the highest standards of care.
1. Introduction & Scope
Emplorium is an AI-powered platform that helps businesses build, deploy, and manage intelligent workflows, automated pipelines, and customer-facing experiences. Our Services are designed for businesses, developers, and individual professionals who want to harness the power of AI responsibly.
This Policy applies to:
• All visitors to our website at emplorium.io
• Registered users and account holders
• Business customers and enterprise clients
• Individuals who interact with Emplorium-powered products
This Policy does not apply where Emplorium acts solely as a data processor on behalf of a business customer. In those cases, the customer's own privacy policy and the applicable Data Processing Agreement govern the handling of personal data.
2. Information We Collect
We collect personal information in the following ways:
2.1 Information You Provide Directly
• Account & Identity Details — Your name, email address, phone number, company name, and account credentials when you register.
• Billing & Payment Information — Billing address and payment method details, processed securely by our third-party payment provider. We do not store raw card numbers.
• Profile Information — Job title, team size, industry, and use-case preferences you optionally provide.
• Communications — Messages, support requests, survey responses, or feedback you send to us.
• User-Generated Content & Inputs — Text, data, documents, or other content you upload or enter while using the Services.
2.2 Information Collected Automatically
• Log & Usage Data — IP addresses, browser type, operating system, referring URLs, pages visited, features accessed, and session timestamps.
• Device Information — Device identifiers, screen resolution, language settings, and connection type.
• Cookies & Tracking Technologies — We use cookies, pixel tags, and similar technologies. See Section 7 (Cookie Policy) for details.
• Performance Metrics — Error logs, load times, and interaction data used to diagnose issues and improve the platform.
2.3 Information from Third Parties
• OAuth / SSO Providers — If you sign in using Google, GitHub, or another third-party provider, we receive your name, email address, and profile picture from that provider.
• Payment Processors — Our payment partner (Stripe) may share transaction status and risk signals with us.
• Business Intelligence Partners — We may receive company size, industry, or intent data from enrichment partners to improve our sales and support experience.
• Publicly Available Sources — We may collect publicly available information to understand market context or verify business information.
3. How We Use Your Information
We use personal information only for legitimate, specified purposes:
Service Delivery
To create and manage your account, process transactions, authenticate your identity, and provide the core features of the Emplorium platform.
Product Improvement
To analyze usage patterns, diagnose technical issues, conduct A/B testing, and develop new features. Where we use your data to improve AI systems, we do so on aggregated, de-identified datasets and will not use your personal data to train generalized AI models without your explicit consent.
Communications
To send transactional emails (receipts, alerts, account notifications), product updates, and — with your consent — marketing communications. You may opt out of marketing emails at any time.
Security & Fraud Prevention
To detect, investigate, and prevent fraudulent transactions, unauthorized access, abuse of our Services, and other harmful activities.
Legal & Compliance
To comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms of Service, and protect the rights, property, or safety of Emplorium, our users, or others.
Aggregated & Anonymized Analytics
We may generate de-identified or aggregated data (e.g., industry benchmarks, usage statistics) that cannot reasonably identify you. This data may be used for any lawful business purpose, including publication.
4. Legal Basis for Processing (GDPR)
Where the General Data Protection Regulation (GDPR) or similar laws apply, we rely on the following legal bases:
• Contractual Necessity — Processing required to fulfill our agreement with you (e.g., providing the Services, processing payments).
• Legitimate Interests — Processing for our legitimate business interests where they are not overridden by your rights (e.g., security monitoring, product improvement, fraud prevention).
• Consent — Where you have given us clear, affirmative consent (e.g., marketing emails, optional analytics cookies). You may withdraw consent at any time.
• Legal Obligation — Processing required to comply with a legal obligation (e.g., tax records, responding to court orders).
5. How We Share Your Information
We do not sell your personal information. We share it only in the following circumstances:
5.1 Service Providers & Sub-Processors
We share data with trusted third-party vendors who process data on our behalf under contractual obligations to keep it confidential and secure. Categories include:
• Cloud infrastructure providers (e.g., AWS, Google Cloud)
• Payment processing (e.g., Stripe)
• Customer support and communication tools
• Analytics and monitoring services
• Email delivery providers
A current list of sub-processors is maintained at emplorium.io/legal/sub-processors.
5.2 Business Transfers
In connection with a merger, acquisition, financing, or sale of all or a portion of our business, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
5.3 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request — or to protect the rights, safety, and property of Emplorium, our users, or the public.
5.4 With Your Consent
We may share your information with third parties when you explicitly authorize us to do so.
6. International Data Transfers
Emplorium operates globally. Your personal data may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ from your jurisdiction. When we transfer personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to countries not recognized as providing an adequate level of protection, we implement appropriate safeguards, including:
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all sub-processors
• Binding Corporate Rules where applicable
For more information about our international transfer mechanisms, contact us at [email protected].
7. Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and support our marketing. The types of cookies we use include:
• Strictly Necessary: Essential for the platform to function. Cannot be disabled.
• Functional: Remember your preferences and settings across sessions.
• Analytics: Help us understand how visitors use our Services (e.g., Google Analytics).
• Marketing: Used to deliver relevant advertising and measure campaign effectiveness.
You can manage your cookie preferences through our Cookie Consent Banner or your browser settings. Disabling certain cookies may affect your ability to use some features of the platform.For full details, see our Cookie Policy at emplorium.io/legal/cookies.
8. Data Retention
We retain personal data for as long as your account is active or as needed to provide the Services. We also retain data to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
• Account data — Retained for the duration of your relationship with us plus 3 years thereafter.
• Usage & log data — Retained for up to 12 months from collection for security and analytics purposes.
• Billing records — Retained for 7 years to comply with tax and accounting regulations.
• Support communications — Retained for 2 years from the date of last contact.
Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
9. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
• Right to Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate or incomplete data.
• Right to Erasure — Request deletion of your personal data
• Right to Restrict Processing — Ask us to pause processing of your data in certain circumstances.
• Right to Data Portability — Receive your data in a structured, machine-readable format.
• Right to Object — Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent — Withdraw consent at any time where processing is consent-based.
• Right to Lodge a Complaint — File a complaint with your local data protection authority.
To exercise any of these rights, submit a request to [email protected] or through your account settings. We will respond within 30 days. We may ask you to verify your identity before processing your request.
9.1 California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, sold, or disclosed, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA. To submit a request, contact [email protected].
10. Data Security
We implement administrative, technical, and physical safeguards to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our security measures include:
• Encryption at rest and in transit (TLS 1.2+ / AES-256)
• Role-based access controls and the principle of least privilege
• Regular security audits and penetration testing
• Multi-factor authentication for all internal systems
• SOC 2 Type II compliance program (in progress)
• Incident response and breach notification procedures
While we take security seriously, no system can guarantee absolute protection. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
11. AI & Model Training
Emplorium uses AI and machine learning to power core features of our platform. We want to be fully transparent about how your data interacts with these systems:
• We do not use your personal data or the content of your inputs to train our general AI models without your explicit, informed consent.
• Aggregated, de-identified usage data may be used to improve platform performance and model accuracy.
• When AI features process your content (e.g., generating responses, summarizing documents), that content is handled in accordance with our sub-processor agreements and is not retained beyond what is necessary to fulfill the request.
• Enterprise customers may negotiate additional data isolation and model training restrictions through a custom Data Processing Agreement.
12. Children's Privacy
Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete that information. If you believe we have collected data from a child, please contact us at [email protected].
13. Third-Party Links & Integrations
Our Services may contain links to third-party websites, integrations, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use or access through our platform. Emplorium is not responsible for the privacy practices or content of third-party services.
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
• Update the "Last Updated" date at the top of this Policy
• Send an email notification to registered users
• Display a prominent notice on our platform for 30 days following the update
Your continued use of the Services after changes are posted constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should stop using the Services and may request deletion of your account.
Contact Us
For any questions, concerns, requests, or complaints about privacy or data protection, contact us at:
Or by post:
Emplorium Limited
128 Brent Park Road
London, NW4 3HP
United Kingdom