Privacy Policy
Last updated: February 20, 2026
The Short Version
Your management notes and team data are private. We never sell your data, never share it with employers, and never will. You own everything you put into emkit.
1. What We Collect
Account Information
Name, email address, and payment details (processed by Stripe — we never store your card number).
Your Content
Management notes, 1:1 records, performance reviews, team rosters, action items, and any other data you enter into emkit.
Usage Data
Basic analytics like which features you use, page views, and session duration. This helps us improve the product.
2. How We Use Your Data
- Provide and maintain the Service
- Process payments
- Send you important account updates (not marketing spam)
- Improve the product based on aggregate usage patterns
- Respond to your support requests
3. What We Don't Do
❌ We never sell your data to anyone.
❌ We never share your management notes, reviews, or team data with employers, recruiters, or any third party.
❌ We never use your content to train AI models.
❌ We never send unsolicited marketing emails.
4. Manager Notes & Team Data
We understand that management data is sensitive. Your 1:1 notes, performance reviews, feedback, and team assessments are strictly private. Only you can see them. No one at emkit reads your content. No other user can access your data. Period.
5. Cookies
We use essential cookies to keep you logged in and remember your preferences. We use basic analytics cookies to understand how the product is used. We don't use advertising or tracking cookies from third parties.
6. Data Retention
We keep your data as long as your account is active. If you delete your account, we delete all your data within 30 days. Backups are purged within 90 days.
7. Your Rights (GDPR & Beyond)
Regardless of where you live, you have the right to:
- Export your data — download everything you've entered into emkit
- Delete your data — remove your account and all associated content
- Access your data — see exactly what we store about you
- Correct your data — update any inaccurate information
To exercise any of these rights, email support@emkit.dev and we'll handle it within 30 days.
8. Third-Party Services
We use a limited number of third-party services:
- Stripe — payment processing
- Vercel / hosting provider — application hosting
Each has their own privacy policy. We only share the minimum data necessary for them to function.
9. Security
We use encryption in transit (HTTPS) and at rest. Access to production systems is restricted. We take security seriously — if you discover a vulnerability, please report it to support@emkit.dev.
10. Changes to This Policy
If we make significant changes, we'll notify you via email. Minor clarifications may be made without notice. The "last updated" date at the top always reflects the latest version.
11. Contact
Questions or concerns? Reach us at support@emkit.dev.