Privacy Policy
Last updated: May 2026
1. Who we are
Empasa is a product of Empasa Technology, an independent software company. When this policy says “we”, “us”, or “Empasa”, it refers to Empasa Technology as the data controller.
2. What we collect
We collect only what is necessary to provide the service:
- Account information — email address, name, and password hash when you register.
- Marketplace data — listings, users, and transactions synced from your Sharetribe marketplace via the Integration API, stored to power analytics and automation features.
- Payment information — processed by Stripe. We store your Stripe customer ID but never your card details.
- Usage data — which features you use, page views within the app, and error reports for product improvement.
3. How we use your data
- To provide and improve the Empasa service (analytics, automation, AI features).
- To communicate with you about your account, billing, and product updates.
- To detect and prevent security issues or abuse.
We do not sell, rent, or share your personal data or marketplace data with third parties for marketing purposes.
4. Where your data is stored
All marketplace data and account information is stored on EU-hosted infrastructure (PostgreSQL databases hosted in the European Union). We use Stripe (US-based, EU-US Data Privacy Framework certified) for payment processing.
5. Data retention
We retain your data for as long as your account is active. If you cancel your subscription and request deletion, we will remove your marketplace data within 30 days. Account records may be retained for up to 12 months for legal and accounting purposes.
6. Your rights
Under GDPR and applicable data protection law, you have the right to:
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Export your data in a machine-readable format.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at emanuel@empasa.io.
7. Third-party services
- Stripe — payment processing.
- Sharetribe — marketplace data access via their Integration API (you authorize this connection).
- Sentry — error monitoring (anonymized error reports).
- OpenAI — AI features (marketplace data may be sent for analysis; not used for model training).
8. Cookies
We use essential cookies only: session authentication (HTTP-only JWT cookie). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. Changes to this policy
We may update this policy as the product evolves. Significant changes will be communicated via email to active account holders.
10. Contact
For privacy questions or data requests: emanuel@empasa.io
Company information: empasa.io