Effective date: September 14, 2026
Last updated: September 15, 2026
Emperous is operated by Emperous Solutions Ltd. (“Emperous,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, retain, and protect personal information when you visit emperous.com, contact us, or use our services.
We designed our website analytics to be first-party, consent-based, limited in scope, and useful for improving our own website. We do not use cross-site tracking, advertising identifiers, browser fingerprinting, session replay, or third-party advertising pixels.
We may collect information you choose to provide, including your name, business contact details, company, message content, project information, form submissions, and communications with us.
If you select Accept analytics, we may collect limited information about visits to our website, including:
a random visitor identifier and session identifier;
consent status and related timestamps;
browser family and version, operating system, device category, language, timezone, and viewport size;
normalized page paths and page titles;
referring website origin and campaign parameters such as UTM values;
page views, visible-page activity, approximate time spent, scroll milestones, and permitted interactions such as selected calls to action or downloads; and
server-confirmed events such as a successful contact or demo-request submission.
We do not intentionally record typed form content, passwords, payment details, full page contents, keystrokes, or arbitrary clicks through the analytics system.
Our site stores your consent choice in your browser. After analytics are accepted, we may also use a first-party cookie or similar first-party mechanism to recognize a returning browser and protect the integrity of analytics requests. These identifiers identify a browser installation, not a verified individual.
You may decline analytics and still use the website. You can review or change your choice through the Privacy choices control on the site. Withdrawing consent stops future optional analytics collection from that browser; it does not automatically erase information already collected, although you may request deletion as described below.
Our server necessarily receives an Internet Protocol address when a device connects to the website. For accepted analytics visits, we may temporarily store the address in encrypted form for security, troubleshooting, fraud prevention, and reliable first-party analytics processing.
Raw IP addresses are:
stored separately from ordinary visit records;
encrypted at rest;
retained for no more than 7 days under our current configuration;
excluded from normal analytics APIs and dashboard views;
available only through a restricted administrative process; and
subject to an audit record when accessed through that process.
We may retain a keyed, non-reversible technical value derived from an address for limited security and analytics purposes. We do not display that value in visitor dossiers and do not use an IP address or derived value to determine a person’s identity or employer.
Private, local, and Tailscale network addresses are classified as non-public and are not treated as public geographic locations.
Public-IP geographic and network enrichment is not currently configured. Accordingly, the website does not currently use an external IP lookup service to populate city, region, country, internet service provider, organization, or autonomous-system information.
If we enable this capability in the future, we will use an appropriate local or contracted data source, limit the resulting information to approximate geography and network context, and update this policy where required. Such information would be treated as approximate and would not be used by itself to identify a person or company.
We use personal information for purposes such as:
providing, operating, securing, and improving our website and services;
responding to inquiries and communicating with customers and prospective customers;
understanding aggregate website usage, content performance, and campaign effectiveness;
diagnosing errors, preventing abuse, and maintaining system integrity;
managing proposals, projects, customer relationships, and business records;
meeting legal, regulatory, tax, accounting, and contractual obligations; and
establishing, exercising, or defending legal claims.
Analytics may assign a bounded engagement or intent category based on first-party activity, such as page depth, visible time, or a server-confirmed conversion. This is a prioritization signal only. It is not proof of identity, employment, purchasing authority, or intent, and it is not used to make legal, employment, credit, insurance, or similarly significant automated decisions.
Optional analytics begin only after you accept them through our consent notice. If you decline, we record only what is necessary to remember and respect that choice and to operate and secure the website.
You may change your analytics choice at any time using the Privacy choices control. Browser controls may also allow you to remove cookies or local storage. Removing them may cause the consent notice to appear again.
Some processing may be necessary to provide a service you request, secure our systems, comply with law, or maintain required business records. Where consent is the basis for processing, you may withdraw it subject to legal and contractual restrictions and reasonable notice.
We do not sell personal information.
We may disclose limited information to service providers that support our hosting, infrastructure, security, communications, forms, customer management, or professional operations. These providers may use information only to provide services to us and are expected to protect it appropriately.
We may also disclose information when reasonably necessary to comply with law or legal process; protect rights, safety, systems, or property; investigate fraud or abuse; complete a financing, merger, sale, reorganization, or similar business transaction; or act with your direction or consent.
We retain information only for as long as reasonably necessary for the purposes described in this policy, subject to legal, accounting, security, contractual, and dispute-resolution requirements.
Current website analytics settings are:
Encrypted raw IP address: up to 7 days;
Ordinary derived visit and engagement history: up to 365 days; and
Consent and security records: as reasonably required to demonstrate and protect the operation of the system.
Business communications, proposals, contracts, invoices, and customer records may be retained for longer periods where needed for ongoing service, legal obligations, or legitimate business records. Backup copies may remain for a limited backup cycle before being overwritten or securely removed.
We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. These include access controls, encryption for temporarily retained raw IP addresses, purpose-separated technical keys, restricted administrative access, audit logging for raw-IP access, limited retention periods, and controls intended to keep sensitive network values out of ordinary dashboards and APIs.
No system can guarantee absolute security. If you believe information involving Emperous may have been compromised, please contact us promptly.
Our primary operations are in Canada. Some service providers may process or store information in another province or country. When information is processed outside your jurisdiction, it may be subject to the laws and lawful access requirements of that location. We take reasonable steps to select providers and safeguards appropriate to the information involved.
Subject to applicable law, you may ask us to:
explain whether we hold personal information about you;
provide access to eligible personal information;
correct inaccurate or incomplete information;
withdraw consent for future consent-based processing;
delete information that we are not required or permitted to retain; or
answer a question or concern about our privacy practices.
Because analytics identifiers are pseudonymous, we may need information from your browser or details about a visit to locate a record. We may also need to verify your identity before responding. Some requests may be limited by legal obligations, the privacy of others, security concerns, or information that cannot reasonably be linked to you.
Our website and services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can review and delete it where appropriate.
Our website may link to websites operated by others. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices.
We may update this policy as our website, services, or legal obligations change. We will post the revised version on this page and update the date above. If a change is material, we will provide additional notice or request renewed consent where required.
For privacy questions, requests, or complaints, contact:
Privacy Officer
Emperous Solutions Ltd.
PO Box 22002, Calgary RPO Bankers Hall
Calgary, Alberta T2P 4J1
Canada
integrations@emperous.com
We will review privacy concerns and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, as applicable.
Get occasional updates, announcements, and useful resources delivered to your inbox.