Privacy Policy

Account information

When you register, Eminra stores your name, email address, a salted one-way password hash, account creation time, and revocable session records. Eminra does not store your readable password. You are responsible for keeping your login credentials confidential.

Information you choose to provide

When you purchase a service, complete an intake, upload a permitted project file, book a session, or contact us, you may provide professional background, proposed research titles, project instructions, public profile links, supporting references, feedback, and other information required for the selected service.

Project files

When secure project storage is enabled, permitted files are stored in a private Cloudflare R2 bucket and can be accessed only through authenticated, role-authorized Eminra routes. File metadata is stored in D1. Uploads are restricted by category, file type, file extension, and size. The public marketing pages and chat widget are not project-document submission channels.

Information you should not provide

Do not submit passports, government identifiers, A-numbers, immigration receipt numbers, immigration forms, payment-card numbers through chat or project uploads, or other sensitive identifiers. Submit only documents that you have the right to share and that are necessary for the purchased service. Do not use chat or ordinary email for confidential project files.

How information is used

Information is used to create and secure accounts, process requested services, maintain private project trackers, coordinate assigned team members, schedule meetings, deliver files, send transactional notifications, process payments and refunds, prevent misuse, comply with legal obligations, and understand aggregate website engagement. A private copy of transactional email is sent to Eminra’s designated operations recipient for service oversight.

Service providers

Eminra uses Cloudflare Workers, D1, and—when enabled—private R2 storage for website, account, database, and project-file infrastructure; Calendly for scheduling; Stripe for payment processing; Resend for transactional email; Crisp for optional live chat; Plausible for privacy-oriented aggregate analytics; and Google Meet or Zoom for calls. Those providers process information under their own terms and privacy policies. Payment-card data is handled by Stripe and is not stored by Eminra.

Analytics

Plausible is configured for aggregate page and conversion measurement without sending booking intake answers, names, email addresses, or submitted professional-profile URLs. Third-party scheduling and chat tools may set their own functional storage when loaded.

Retention and deletion

Account, booking, and service communications are retained only as reasonably necessary to provide the account and service, maintain financial and business records, prevent misuse, resolve disputes, and meet applicable legal obligations. Expired sessions are deleted automatically. You may request access, correction, or account deletion by emailing privacy@eminra.com. Some records may need to be retained where legally required.

Security

Eminra uses salted password hashing, HTTP-only session cookies, rate limits, server-side role authorization, signed webhook verification, private storage controls, and other reasonable administrative and technical safeguards. No online service can guarantee absolute security. Do not send information the site explicitly tells you not to submit.

International visitors

The site may be accessed internationally. Applicable privacy rights can vary by location. Contact privacy@eminra.com with a request and enough information for us to understand it without including sensitive immigration details.

Changes

This policy may change as the product develops. Material changes will be reflected by an updated effective date and, when appropriate, an in-product notice.

Contact

Privacy questions: privacy@eminra.com.