Privacy Policy

1. Introduction

EmpatiQ (empatiqapp.com) is operated by S3P Solutions Inc. ("S3P Solutions", "we", "us", "our"). We respect your privacy. This Privacy Policy explains what data S3P Solutions Inc. collects through the EmpatiQ Service, how we use it, and your rights in relation to it. By using the Service you agree to the practices described here.

2. Data We Collect

• Account data: email address and password (stored securely via Supabase Auth).
• Usage data: session activity, persona configurations, and conversation history generated during training sessions.
• Payment data: billing information is processed by Paddle. We only store a Paddle customer ID; we never see or store your full card details.
• Technical data: IP address, browser type, and basic device information collected automatically when you use the Service.
• Cookies: we use cookies and similar technologies as described in Section 8 below.

3. How We Use Your Data

• To provide, operate, and improve the Service
• To authenticate your account and manage your subscription
• To generate AI-powered training sessions based on your persona configurations
• To send transactional emails (e.g. account confirmation, billing receipts)
• To detect and prevent fraud or misuse
• To comply with legal obligations

We do not sell your personal data to third parties.

4. AI Processing

Conversation content from training sessions is sent to OpenAI's API to generate patient responses and to ElevenLabs for voice synthesis. These providers process data on our behalf under their own privacy policies and data processing agreements. Session content is used solely to generate responses in real time and is not used to train third-party AI models.

5. Data Sharing

We share personal data only with:

• Supabase — authentication and database hosting
• OpenAI — AI response generation
• ElevenLabs — voice synthesis
• LiveKit — real-time audio infrastructure
• Paddle — payment processing
• Railway — cloud hosting infrastructure

All sub-processors are bound by appropriate data processing agreements.

6. Data Retention

We retain your account data for as long as your account is active. Session and conversation data is retained for up to 12 months to enable session history features, after which it is deleted. You may request earlier deletion at any time.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at privacy@empatiq.app.

8. Cookies

We use the following types of cookies:

• Strictly necessary: required for authentication and core platform functionality. These cannot be disabled.
• Analytics: help us understand how the Service is used so we can improve it. You can decline these via the cookie banner.

Your cookie preferences are stored locally in your browser. You can change them at any time by clearing your browser's local storage.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

10. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

12. Contact

The data controller for the EmpatiQ Service is S3P Solutions Inc. For privacy-related questions or requests, contact us at privacy@empatiq.app.