Privacy Policy

Last updated: May 29, 2026

NDPR CompliantGDPR Aligned

1. Who We Are

EMerc Enterprise operates the EMerc Intel platform at emercintel.emerc.site. We are the data controller responsible for your personal information. Contact us at emercintel@emerc.site for any privacy-related enquiries.

2. What Data We Collect

Account data (if you register)

·Email address
·First name (optional)
·Password (stored as a secure hash — we never see your plain password)
·Timezone and digest time preference

Subscription data

·Email address for newsletter subscribers
·WhatsApp number if you subscribe via WhatsApp (stored via Twilio webhook)
·Notification preferences

Usage data (automatically collected)

·Pages visited and features used
·Browser type and operating system
·IP address (not stored permanently)
·Referral source

Watchlist data

·Keywords, CVE IDs, vendor names, and threat actor names you choose to monitor

3. How We Use Your Data

✓To provide and operate the Platform and its features
✓To send you the daily intelligence digest at your preferred time
✓To send you critical threat alerts when high-severity articles are published
✓To maintain your personal watchlist and notify you of matches
✓To improve the Platform based on usage patterns
✓To comply with legal obligations

4. Breach Checker Privacy

🔒 We do not store the emails you check

When you use the Breach Checker, your email address is sent to the BreachDirectory API for lookup. We cache the result (not the email itself — we store a one-way SHA-256 hash) for 24 hours to reduce API calls. The original email is never stored in our database.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We share data only with the following service providers who process it on our behalf:

SupabaseDatabase and authentication📍 USA

VercelFrontend hosting📍 USA

RenderBackend hosting📍 USA

Zoho MailEmail delivery📍 India/USA

TwilioWhatsApp message delivery📍 USA

GroqAI content generation📍 USA

RapidAPIBreach data lookup📍 USA

6. Data Retention

Account dataUntil you delete your account
Email subscriptionsUntil you unsubscribe
Watchlist entriesUntil you remove them or delete your account
Breach cache24 hours (result only, not your email)
Usage logs30 days rolling

7. Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and aligned with GDPR principles, you have the following rights:

Right of access

Request a copy of your personal data

Right to rectification

Correct inaccurate personal data

Right to erasure

Request deletion of your personal data

Right to data portability

Receive your data in a portable format

Right to object

Object to processing of your data

Right to withdraw consent

Unsubscribe or delete your account at any time

To exercise any of these rights, email us at emercintel@emerc.site. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), Row Level Security on our database, hashed passwords, and environment-isolated API keys. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

This Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us immediately at emercintel@emerc.site.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a platform notice. The "Last updated" date at the top of this page reflects the most recent revision.