Privacy Policy

• Account information: name, email address, firm name
• Uploaded documents: receipts, invoices, bank statements you submit for processing
• Extracted financial data: vendor names, amounts, dates, and categories derived from your documents
• Usage data: pages visited, actions taken, and feature usage (no third-party analytics)

• To provide and improve the Emplero service
• To process your documents using AI extraction
• To send transactional emails (account verification, password reset)
• We do not sell your data to third parties or use it to train AI models

All data — including uploaded files and extracted financial records — is stored exclusively on Canadian infrastructure (Supabase, region: ca-central-1). Your data never leaves Canada. This supports compliance with PIPEDA (Personal Information Protection and Electronic Documents Act) and provincial privacy legislation applicable to accounting firms operating in Canada.

Your data is retained for as long as your account is active. When you delete your account, all uploaded documents and extracted data are permanently deleted within 30 days. You may request immediate deletion by contacting us.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production data is restricted to authorized personnel only. We perform regular security reviews.

• Right to access: request a copy of all data we hold about you
• Right to correction: update or correct inaccurate data
• Right to deletion: request permanent deletion of your account and data
• Right to portability: export your data in CSV format at any time

For privacy inquiries or data requests, contact us at privacy@emplero.com. We respond within 5 business days.