Privacy Policy

What we collect

When you use Empire we collect:

• Account info — email, display name, business name (vendors), role.
• Profile info — buy-box preferences, markets, asset types, vendor service categories, bio, logo.
• Activity — deals you list or save, offers you submit, questions you ask, vendor inquiries you send.
• Billing info — Stripe handles card data directly; we store only a Stripe customer ID and subscription metadata.
• Ad telemetry — impressions and clicks for sponsored placements, attributed to your viewer identity (or an anonymous session token if signed out).
• Email + messaging — content of support tickets, deal-room messages, and buyer-blast emails we send on a wholesaler’s behalf.

Third parties we share with

• Supabase — our database and auth provider; stores all of the above except Stripe card data.
• Stripe — processes payments for subscriptions and ad wallet top-ups.
• Resend — sends transactional email (buyer-blast notifications, password resets).
• Twilio — sends transactional SMS alerts (only to users who opted in).
• Vercel — hosts the web app and aggregates anonymized request logs.

We do not sell or rent personal information. We do not show ads from external networks. We do not share your buyer-box preferences with vendors or other buyers.

SMS / text message data

If you opt in to text alerts at signup or in Settings → Notifications, we collect your mobile phone number and store it on your profile alongside an opt-in timestamp. We use this number solely to send transactional alerts (new offers, messages, deal matches, etc.) via Twilio. We never share your phone number with third parties for marketing, advertising, or any purpose other than delivering the messages you requested.SMS opt-in data is never used as a precondition for accessing the platform — you can use every feature of Empire without SMS enabled. Reply STOP at any time to opt out; the carrier will immediately stop delivery and our system mirrors the opt-out within seconds.

How we use information

• To operate the marketplace and match deals to matching buyers.
• To process payments and deliver paid features.
• To send transactional notifications you opted into (buyer-blast, deal-room replies).
• To detect fraud, abuse, and security incidents.
• To comply with legal obligations.

Your rights

You can view, export, correct, or delete your data anytime. Email privacy@empire.com from the address on your account and we will respond within 30 days. If you reside in California, the EU, or another jurisdiction with extended privacy rights (CCPA, GDPR), those rights apply to your Empire account at no charge and without retaliation.

Data retention

We retain account data while your account is active and for 12 months after deletion to support dispute resolution, fraud investigation, and tax recordkeeping. Anonymized ad telemetry and aggregated analytics may be retained longer.

Security

We use industry-standard practices: TLS for all transport, server-side row-level security on every database table, separate service-role credentials for privileged operations, and per-user rate limits on write endpoints. We do not store passwords; Supabase handles auth with bcrypt-equivalent hashing. No system is perfectly secure; if you believe your account has been compromised, email security@empire.com immediately.

Children

Empire is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has registered, email us and we will delete the account.

Contact

Privacy questions: privacy@empire.com. Mailing address: Empire PropTech, Inc., [your business address].