Privacy Policy
Last updated August 30, 2026
1. What we collect
When you create a Emerpa account, we collect your email address and the password you set (stored only as a salted hash — we never see it in plain text). When you use the product, we collect the credential documents you upload (certificates, licenses, and inspection records, whether photos or PDFs) along with the data our AI extracts from them, such as certificate numbers, issuers, and expiration dates. If your organization uses team features, we also collect the names, email addresses, and role assignments of team members an admin invites.
2. How we use it
We use your data to operate the credential wallet: storing your documents, extracting and verifying their contents, tracking expiration dates, and sending you reminders before a credential lapses. We use your email address to send transactional messages — account confirmations, password resets, and expiration reminders — and never for marketing without separate consent. Billing information is used solely to process subscription payments through our payment processor.
3. Document processing
Uploaded credential documents are sent to an AI service to extract structured data (issuer, title, dates, certificate numbers). This processing happens automatically when you upload a file. We retain the original document and the extracted data for as long as your account remains active, so you and anyone you explicitly share a credential with can verify it later.
4. Sharing your data
We do not sell your personal data. We share it only with the service providers that make Emerpa work — our database and authentication provider, our AI document processor, our payment processor, and our email delivery provider — each bound to use it only to provide their service to us. If you turn on a public credential portfolio, the credentials you choose to include become visible to anyone with the link, until you disable sharing.
5. Data retention
We keep your account data and uploaded documents for as long as your account is active. If you delete your account, we delete your documents and personal data within a reasonable period, except where we’re required to retain billing records for legal or tax purposes.
6. Your rights
You can access, correct, or delete your credential records at any time from your dashboard. To request a full export or deletion of your account and associated data, contact us using the details below.
7. Security
We use industry-standard safeguards — encryption in transit, row-level access controls on your data, and hashed credentials — to protect your account and documents. No system is perfectly secure, but we treat credential data as sensitive and design access controls around that.
8. Changes to this policy
If we make material changes to this policy, we’ll notify active accounts by email before the changes take effect.
9. Contact
Questions about this policy or your data can be sent to the email address associated with your Emerpa invitation, or through the contact options on our pricing page.