Privacy

EMBTEC operates this site and the platform behind it at embtec.app. If you want to know what we hold about you, or want it deleted, use the contact form on this site and say so — that is a real request and we will answer it.

Enquiry form

Your name, email address, company, and optionally your website and role — plus the problems you tick and anything you write in the message box.

Your account

Email address and name. If you set a password we store only a scrypt hash of it, never the password. If you sign in with Google we store the account link, not your Google credentials.

Sign-in sessions

For each active session: the IP address and browser it was created from, so you can recognise a session that is not yours and end it. Visible to you at /account.

Prospect rooms

If we send you a private room: which sections you opened, roughly how long you engaged, the referrer and any campaign parameters, and your device and browser type. Your IP address is stored only as a salted hash, never as an address.

Company research

Business information about companies we may work with, gathered from public sources — websites, job postings, news. This is information about organisations, not private individuals.

Files

Documents uploaded to the platform by us or by a client. Stored privately and served only through short-lived signed links.

Analytics and errors

Product analytics and error reports, used to see which parts of the product are used and to find faults.

To answer your enquiry, to run the platform you or your company are using, and to decide which companies to approach and how. This is business-to-business work: we are interested in organisations and the people who represent them in that capacity, not in individuals’ private lives.

We do not sell personal data, we do not share it for advertising, and we do not use it to build profiles for anyone other than ourselves.

The platform runs on services that necessarily see some of this data. Each is used for one purpose only:

Vercel

Hosting and delivery of the application.

Neon

The PostgreSQL database. All of the above is stored here.

Cloudflare R2

Private file storage.

Resend

Sending transactional email — invitations, password links, notifications.

OpenAI

Generating research drafts about companies. Personal data is not the input here; company information is.

PostHog

Product analytics.

Sentry

Error monitoring.

Google

Only if you choose to sign in with Google. We receive your email address, name and profile picture, and nothing else.

One cookie is strictly necessary: the session cookie that keeps you signed in. It holds a random token and nothing about you — no name, no role, no email — and it is removed when you sign out.

Product analytics may set its own cookie. Nothing on this site is used for advertising, and there are no third-party ad or tracking pixels.

Enquiries and the records of our work with a company are kept for as long as the commercial relationship or its possibility lasts, and are deleted on request. Sessions expire on their own — thirty days at the outside, seven days of inactivity. Invitation and password links expire in days or hours and can only be used once.

Passwords are hashed with scrypt and are not recoverable, by us or by anyone with a copy of the database. Session tokens are stored only as hashes, so a database read cannot be replayed as a login, and any session can be revoked immediately. Files are private objects reached only through short-lived signed URLs. Every read and write in the application is scoped to the organisation making it.

No system is beyond compromise. If one affecting your data occurs, we will tell you rather than wait to be asked.

You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, and object to our using it. Use the contact form and say which of those you want. We do not require a formal process and we will not make you chase it.

If you received a prospect room from us and would rather we held nothing at all, say so and we will delete the room and its engagement record.

When this page changes, the date at the top changes with it. Material changes to what we collect or who processes it will be told to the people affected, not just posted here.

See also our terms of service.