Privacy Policy

Effective Date: January 1, 2025

Last Updated: January 1, 2025

Emblem PE Inc., a Delaware corporation (“Emblem”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered due diligence platform and related services (the “Service”).

Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

Account registration information (name, email, company name, job title)
Payment and billing information
Documents and files you upload to our platform
Communications with us (support requests, feedback)
Any other information you choose to provide

1.2 Information We Automatically Collect

Usage data (features used, actions taken, time spent)
Device information (browser type, operating system)
IP address and approximate location
Cookies and similar tracking technologies

1.3 Cloud Storage Integration

When you connect third-party services (OneDrive, Google Drive, Dropbox), we access only the files and folders you explicitly authorize, solely for the purpose of providing our Service.

2. How We Use Your Information

To provide, maintain, and improve our Service
To process your transactions and manage your account
To analyze documents and generate insights using our AI technology
To communicate with you about updates, security alerts, and support
To detect, prevent, and address technical issues
To comply with legal obligations

Important: We do not use your data to train our AI models. Your documents and data remain confidential and are used solely to provide services to you.

3. Data Storage and Security

We use Supabase for data storage, which maintains SOC 2 Type II compliance. Your data is protected with:

Encryption at rest (AES-256)
Encryption in transit (TLS 1.2+)
Isolated tenant databases
Enterprise-level authentication through Auth0
Regular security audits and penetration testing

We are SOC 2 Type 1 compliant and are currently undergoing SOC 2 Type 2 certification.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

With your consent or at your direction
With service providers who assist in operating our Service (under strict confidentiality agreements)
To comply with legal obligations or respond to lawful requests
To protect the rights, property, or safety of Emblem, our users, or others
In connection with a merger, acquisition, or sale of assets (with notice to affected users)

5. Data Retention

We retain your information only as long as necessary to provide our Service and fulfill the purposes outlined in this policy. Specifically:

Account information: Retained while your account is active
Documents and project data: Retained until you delete them or close your account
Usage analytics: Retained for up to 24 months
Legal and compliance data: Retained as required by law

Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law.

6. Your Rights and Choices

You have the following rights regarding your information:

Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal information
Portability: Receive your data in a structured, machine-readable format
Opt-out: Unsubscribe from marketing communications
Restriction: Request limited processing of your data

To exercise these rights, please contact us at privacy@emblem.pe.

7. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, and disclose
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

8. International Data Transfers

Our Service is operated in the United States. If you are located outside the United States, please be aware that information we collect will be transferred to and processed in the United States. By using our Service, you consent to this transfer.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

10. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last Updated” date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Emblem PE Inc.

1209 Orange Street

Wilmington, DE 19801

Email: privacy@emblem.pe

Website: https://emblem.pe