What we collect
Your account: your email address, the name you give, a photo if you add one, your language and timezone, and the letterhead you set up. Sign-ins: the time, the address and the device, kept as a record of who used the account. Agreements: the text you write, the people you send to, every event on the agreement (drafted, sent, opened, signed, declined) with its time, address and device, the signatures drawn or photographed for it, and the sealed PDF. Signatures on file: only the ones you ask us to keep. Kaigi: who was invited, who joined and when, and the caption transcript and write-up when the host turns those on. Calendar: if you connect Google Calendar, the busy times on the calendars you choose and the events Empirica writes there; the tokens are encrypted at rest.
What we do not do
We do not sell your data. We do not show advertising. We do not read your agreements except as the smart assistant does at your request, when the text you give it is sent to the model provider to produce the answer you asked for. We do not email a signature image; only the executed agreement travels by email.
Who sees what
The other party to an agreement sees the agreement, your name on it, your signature, and the certificate page. The people on a kaigi see who else is on it. Administrators of Empirica can see accounts, activity and the health of the platform, and the agreements only as needed to keep the service running or when the law requires it. Email is sent through a delivery provider; video runs on the Zoom Video SDK; the smart assistant runs on Anthropic's API. Each receives only what that function needs.
Your choices
You may change your name, photo, language, timezone and letterhead at any time. You may remove signatures on file, disconnect a calendar, and delete draft agreements you have not sent. Agreements that were signed remain on record for both parties. To close your account, write to privacy@empirica.orijtech.com.
Security
Sign-in codes are short-lived and rate-limited; passkeys are supported. Sessions are stored server-side and can be revoked. Calendar tokens are encrypted with a key derived from a server secret. Sealed PDFs are stored outside the web root and served only to the parties. If you find a security problem, write to security@empirica.orijtech.com.