Privacy Policy

Last updated: February 3, 2026

1. Information We Collect

We collect: account information (name, email), usage data, uploaded documents (tenant-isolated).

2. How We Use Your Data

To provide services, process queries, improve AI models (opt-in only), billing.

3. Data Storage & Security

Data encrypted at rest and in transit. Multi-tenant isolation enforced. Regular backups.

4. Data Sharing

We do NOT sell your data. Third-party sharing limited to: payment processors, infrastructure providers.

5. Your Rights

You can: access your data, request deletion, export data, opt-out of analytics.

6. Cookies

We use essential cookies for authentication. No tracking cookies.

7. Data Retention

Active accounts: indefinite. Deleted accounts: 90-day grace period, then permanent deletion.

8. GDPR & CCPA Compliance

We comply with GDPR and CCPA. Contact us to exercise your rights.

9. Contact

Privacy questions: support@empathycorp.us