Privacy Policy
Last updated: January 21, 2026
This Privacy Policy describes how Employee Envoy ("we", "us", or "our") collects, uses, and protects your information when you use our Service.
1. Information We Collect
1.1 Information You Provide
We collect information that you provide directly to us, including:
- Account Information: Name, email address, organization name, phone number, and password
- Employee Data: Employee names, email addresses, departments, roles, and other information you input into the Service
- Integration Credentials: API keys, tokens, and other authentication credentials for third-party services (encrypted and stored securely)
- Communication Data: Messages, support requests, and feedback you send to us
1.2 Automatically Collected Information
When you use the Service, we automatically collect certain information, including:
- Usage Data: Pages visited, features used, time spent, and actions taken
- Device Information: IP address, browser type, operating system, device identifiers
- Log Data: Access logs, error logs, and system logs
2. How We Use Your Information
We use the information we collect to:
- Provide and Maintain the Service: Process your requests, manage your account, and deliver features
- Communicate with You: Send service-related notices, support responses, and important updates
- Improve the Service: Analyze usage patterns, identify issues, and develop new features
- Ensure Security: Detect and prevent fraud, abuse, and security threats
- Comply with Legal Obligations: Meet legal requirements and respond to legal requests
3. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption
- Password Security: Passwords are hashed using PBKDF2 with 100,000 iterations
- Access Controls: Role-based access control and authentication requirements
- Secure Storage: Data is stored in secure, monitored data centers
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- With service providers who perform services on our behalf
- If required by law or in response to valid requests by public authorities
- In the event of a merger, acquisition, or sale of assets
- With your explicit consent
5. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Update or correct your information
- Deletion: Request deletion of your personal information
- Data Portability: Export your data in a machine-readable format
- Opt-Out: Opt out of marketing communications
6. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: What personal information is collected, used, shared, or sold
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
- Right to Non-Discrimination: Non-discrimination for exercising your privacy rights
Do Not Sell My Personal Information
We do not sell personal information. Employee Envoy has never sold personal information and has no plans to do so.
7. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
8. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@employeeenvoy.com
Support: support@employeeenvoy.com
Business Address: California, United States
By using Employee Envoy, you acknowledge that you have read and understood this Privacy Policy.