At Empathiq, we run our Services on Supered.io, our official platform partner, and utilize third-party tools to deliver a seamless and efficient experience for our clients. This policy outlines the subprocessors involved in operating our platform and the third-party tools we may recommend or configure as part of our services. It also includes information about the software solutions highlighted in our Packs and Decks.

Platform Subprocessors

The following subprocessors are utilized by Supered.io, the platform upon which Empathiq operates. These subprocessors are essential to maintaining the reliability and functionality of our Services:

• AWS (Amazon Web Services):

  • Location: USA regions

  • Purpose: Servers, storage, and databases

  • Data: User account data (e.g., name, email), platform-related data

  • Persistence: Data is encrypted at rest and securely managed

• Fly.io:

  • Location: USA regions

  • Purpose: Servers

  • Data: In-flight platform data

  • Persistence: No data is persisted by Fly.io

Third-Party Tools Used in Services

In addition to the subprocessors powering our platform, Empathiq frequently employs third-party tools and software for configuration, integration, and optimization services provided to our clients. These tools are selected based on their compliance with industry standards and relevance to client needs. While Empathiq configures and supports these tools, we do not have direct control over their operational practices. Examples include:

• HubSpot: CRM and marketing tools

• Google Analytics: Website tracking and user behavior analytics

• Slack: Internal and client communications

• Stripe: Payment processing

Key Considerations

1. Data Handling Responsibility: When Empathiq configures third-party tools for clients, the tool providers remain responsible for managing and operating their services, including the security and privacy of the data processed through them.

2. Data Scope: Empathiq ensures that third-party tools are configured to process only the data necessary for the intended purpose. Clients should review the privacy and security policies of these providers.

3. Compliance Standards: We work exclusively with providers that demonstrate adherence to industry-standard compliance frameworks, including GDPR, SOC2, and ISO 27001 where applicable.

4. Packs and Decks Disclosure: Software solutions highlighted in Empathiq Packs and Decks are provided as examples of tools that may be useful for specific workflows or configurations. Unless explicitly stated, these tools are not affiliated with, endorsed by, or partnered with Empathiq. Clients should independently review and assess these tools before adoption.

Data Transfers and Security

All data transfers between subprocessors are conducted over secure, private networking channels. No sensitive databases or platform components are exposed to the public internet. Data managed by third-party tools configured by Empathiq remains subject to the providers’ security measures.

Reporting Concerns

If you have any questions or concerns regarding the subprocessors, third-party tools, or software solutions referenced in our Packs and Decks, please contact us at support@getempathiq.com. We are committed to addressing your inquiries and ensuring transparency in how your data is managed.