Privacy Policy

Empire by Design™, created by Iconic Empire by Karla Maree, is an AI business platform that combines business strategy, content creation, Human Design, astrology and optional member-connected services. This Privacy Policy explains what information we collect, why we use it, how it is protected, and the choices available to you.

1. Information We Collect

Account, Session & Security Information

When you create or use an Empire by Design account, we may collect:

• Your name, email address, account identifier, subscription tier and account status
• Authentication and session information managed through Supabase Auth
• Login, access and security timestamps
• Browser, device, IP address and technical diagnostic information

Business, Profile & Content Information

Information you choose to provide may include:

• Birth date, time and location used for Human Design and astrology calculations
• Business details, offers, goals, audience information and brand preferences
• Brand Interview answers, Blueprint information and business memory
• Chats, coaching notes, drafts, saved snippets and generated content
• Documents, images, PDFs and other files you upload for analysis

Usage & Billing Information

We collect token usage, feature activity, error and performance information to operate and protect the service. Stripe processes subscription and top-up payments. We store Stripe customer, subscription and payment-status identifiers, but Empire by Design does not store your full payment-card number.

Connected-Service Information

If you choose to connect an external service, we collect connection metadata, the permissions you approve, encrypted access and refresh credentials, and the information you explicitly ask Empire to retrieve or create through that service. Connecting a service is optional.

2. How We Use Information

We use information to:

• Authenticate your account and enforce your subscription entitlements
• Provide personalized coaching, strategy, content and business-memory features
• Generate Human Design charts, astrological calculations and related guidance
• Process the documents and connected sources you choose to use
• Create or save content when you explicitly request an external-service action
• Operate token accounting, billing, support, security and abuse prevention
• Diagnose failures and improve the reliability and usability of the Platform
• Send service, security, billing and support communications

3. Google User Data

This section applies only when you choose to connect Gmail or Google Drive. Empire requests only the Google permissions needed for the connected features you select.

Google Information We Access

• Google identity: your Google account identifier and email address, used to label and manage the connection
• Gmail: read-only access to message metadata and message content returned by searches you initiate or approve; Empire does not send, alter or delete email
• Google Drive: file and folder names, metadata and content needed for searches or files you select, plus permission to create files that you explicitly ask Empire to save

The Google scopes currently used are openid, email, https://www.googleapis.com/auth/gmail.readonly, https://www.googleapis.com/auth/drive.file and, when Drive search is enabled, https://www.googleapis.com/auth/drive.readonly.

How Google Information Is Used

Google information is used only to provide member-requested features, such as finding customer language in Gmail, locating selected plans or briefs in Drive, preparing content from chosen source material, and saving finished content to a Drive destination you select. Relevant source excerpts may be sent to our AI processing provider to answer your request. Empire does not use Google user data for advertising, sell it, or use it to train generalized AI models.

Storage, Sharing & Retention

OAuth access and refresh credentials are stored encrypted in Supabase Vault and are available only to the authenticated backend. Empire may temporarily cache bounded source summaries and references to complete your request and improve reliability. Generated outputs you choose to save may remain in your Empire workspace or Google Drive until you delete them. Google information is shared only with service providers needed to deliver the feature, including our secure hosting, database and AI processing providers, and is not transferred for advertising or data-broker purposes.

Your Google Controls

You can disconnect Gmail or Google Drive from Empire's Integrations settings at any time. Disconnecting removes Empire's stored OAuth credentials and temporary connector cache for that service and, where supported, asks Google to revoke the token. You can also revoke access through your Google Account. Disconnecting does not delete files that you previously asked Empire to create in your Google Drive.

Empire by Design's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI Processing

Empire uses Anthropic's Claude API and, for limited supporting tasks, other configured AI service providers to generate responses, retrieve relevant context and process member-requested content. Relevant prompts, conversations, business context, uploaded content or selected connected-source excerpts may be sent to those providers to complete your request. Empire does not sell your content or use it to train generalized AI models.

5. Storage & Security

Account and workspace data is primarily stored in Supabase-hosted PostgreSQL services. The Platform uses HTTPS/TLS in transit, authenticated server endpoints, database access controls, tenant-scoped data access, restricted service credentials and encrypted secret storage for integration credentials. No online service can guarantee absolute security, but we use administrative and technical safeguards appropriate to the information processed.

6. Other Service Providers

We use service providers only where needed to operate Empire, including:

• Supabase for authentication, database services and encrypted integration-secret storage
• Render for application and website hosting
• Anthropic and configured AI providers for member-requested AI processing
• Stripe for subscriptions, invoices, payment methods and token top-ups
• Google and other member-connected services when you authorize an integration
• Geocoding, Human Design and astrology data services for chart calculations and transit information
• Email and support providers for transactional messages and support requests

7. Retention & Deletion

We retain active-account data for as long as needed to provide your persistent workspace and the services you request. Cancelling a subscription makes access inactive but does not automatically delete the workspace.

You may request account deletion by emailing support@empirebydesign.ai from your account email with the subject line Empire by Design Data Deletion Request. After verifying the request, we aim to remove primary account and workspace data within 30 days. Encrypted integration credentials are removed when the relevant integration is disconnected or the account connection is deleted. Residual encrypted backups may remain for up to 90 days before expiry. We may retain limited billing, fraud-prevention, security or legal records where required by law or reasonably necessary to establish or defend legal claims.

8. Your Rights & Choices

Depending on your location, you may have rights to access, correct, export, restrict, object to processing of, or delete your personal information. Empire provides in-product access to common profile and data-export controls. You may also contact us to exercise a right or ask a privacy question. We may need to verify your identity before completing a request.

9. Cookies & Local Storage

Empire uses browser storage and similar technologies for authenticated sessions, account-scoped preferences, reliability and security. The public website may use referral or affiliate attribution when you arrive through a participating partner. You can clear browser storage through your browser, although doing so may sign you out or reset local preferences.

10. International Processing

Empire is operated from Australia and uses service providers that may process information in other countries. Where applicable, we take reasonable steps to use providers and safeguards appropriate to cross-border processing. Users in jurisdictions with data-protection laws may contact us to exercise applicable rights or lodge a complaint with their local regulator.

11. Children

Empire by Design is a business platform intended for adults and is not directed to children. We do not knowingly collect personal information from children through the Platform.

12. Changes to This Policy

We may update this Privacy Policy as the Platform, connected services or legal requirements change. We will update the date above and provide additional notice where a change materially affects how personal information is used.

13. Contact Us

For privacy-related questions, data deletion requests, or concerns, please contact: