PRIVACY POLICY
Version: 1.0 · Effective 3 August 2026
1. Data controller
emable, operated by emadata.cz s.r.o., Company ID 08417326, registered office Národní 135/14, Nové Město, 110 00 Prague 1, Czech Republic ("we", "us"). Contact: jan.kluz@emable.ai.
2. What data we process
(a) Account data: name, e-mail address, company, password hash, authentication identifiers (including Google OAuth identifiers where you sign in with Google).
(b) Billing data: invoicing details, payment status. Card data are processed solely by our payment processor (Stripe) — we never store card numbers.
(c) Usage data: pages visited, actions performed in the Platform, technical logs (IP address, browser type), for security and product improvement.
(d) Content you submit: research hypotheses, audience definitions, uploaded documents and similar work products.
(e) Candidate and advisor data: professional profiles compiled from public registers (e.g. national financial-supervision registers) and other lawful sources, processed in our legitimate interest to provide recruitment and market intelligence services (Art. 6(1)(f) GDPR).
3. Purposes and legal bases
- Providing the Services (performance of contract, Art. 6(1)(b) GDPR)
- Billing and accounting (legal obligation, Art. 6(1)(c) GDPR)
- Security, fraud prevention, product analytics (legitimate interest, Art. 6(1)(f) GDPR)
- Marketing communications (consent, Art. 6(1)(a) GDPR — you can withdraw at any time)
4. Processors and recipients
We use vetted processors: Hetzner Online GmbH (application servers and databases, hosted in the EU), Cloudflare (content delivery and edge protection for our public site), Stripe (payments), and our transactional e-mail delivery provider. Processors are bound by data processing agreements under Art. 28 GDPR.
5. Connecting an AI assistant (MCP connector)
You may connect an AI assistant, such as Claude, to your Emable account.
(a) What the connection grants: the assistant acts as you, limited to the permissions you approve when you connect (reading your audiences and results, and — if approved — creating audiences and running validations, which spend credits from your account).
(b) What we record: for every call the assistant makes we store the capability name, the time, the credits charged, and which connection made it. This is how we bill and how you can audit what an assistant did on your behalf.
(c) What leaves our systems: the assistant receives the data it requested. Content you send through the assistant is processed by the assistant's own provider under their terms and privacy policy, not ours.
(d) Ending it: revoke a connection at any time in the Emable app. Revocation is immediate and the assistant loses access at once.
6. Retention
Account data are kept for the duration of the account and up to 3 years after closure (limitation periods); billing records for 10 years (statutory); usage logs typically for 12 months.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object (including to processing based on legitimate interest). You may lodge a complaint with your supervisory authority; for the Czech Republic this is the Office for Personal Data Protection (ÚOOÚ).
For persons listed in professional registers: you may request erasure or restriction of your professional profile at any time — contact jan.kluz@emable.ai and we will resolve the request without undue delay.
8. International transfers
Where data are transferred outside the EU/EEA, we rely on adequacy decisions or standard contractual clauses.
9. Changes
We may update this Policy; material changes will be announced in the Platform.
Contact for all privacy matters: jan.kluz@emable.ai