Privacy.

1. Information We Collect

We collect information you provide to us directly, information generated through your use of the Service, and limited technical information needed to operate and secure the Service.

Information you provide to us may include:

• Account information: name, email address, role, and authentication information such as password-related credentials.
• Profile information: bio, school, graduation year, class year, areas of interest or practice, photo, mentorship style, location preferences, and similar fields you choose to add.
• Professional verification information: for mentor, lawyer, employer, or similar applicants, we may collect professional credentials such as firm or employer, title, bar admission year, license number or bar number, jurisdictions, practice areas, and related information used to verify eligibility.
• Application information: information you submit when applying to use Embra, join the mentor network, participate in a pilot, request access, or apply for a role or opportunity through the Service.
• Communications: messages you send through the Service, connection requests, mentor/student interactions, support requests, survey responses, feedback, and any messages you send us directly, including by email at support@myembra.com.
• Settings and preferences: notification preferences, account settings, saved items, visibility settings, and other choices you make within the Service.

We may also collect information automatically when you use the Service, including:

• Usage information: pages you visit, features you use, actions you take in the Service, timestamps, session activity, and other interaction data.
• Device and technical information: browser type, operating system, device type, IP address, log data, and similar technical information needed to provide, secure, troubleshoot, and improve the Service.
• Cookies and similar technologies: we use first-party authentication cookies and similar technologies to keep you signed in, maintain sessions, remember account preferences, and secure the Service. We do not use third-party advertising cookies.

2. How We Use Information

We use the information we collect to:

• Operate and provide the Service.
• Create and manage user accounts.
• Match students with mentors, lawyers, employers, schools, or other relevant opportunities.
• Deliver messages, connection requests, notifications, invitations, confirmations, and account updates.
• Review applications and verify professional credentials where appropriate.
• Maintain account security, prevent fraud, detect abuse, and protect the Service.
• Provide support and respond to requests.
• Personalize your experience based on your profile, role, preferences, and activity.
• Analyze usage, troubleshoot errors, and improve the Service.
• Communicate with you about updates, product changes, pilot participation, and administrative matters.
• Comply with legal obligations and enforce our rights, agreements, and policies.

We do not sell your personal information. We do not share your personal information with advertisers.

3. AI-Assisted Features

Embra may use automated or AI-assisted systems to help operate and improve the Service. These systems may assist with tasks such as improving matching, organizing information, detecting abuse, generating internal insights, supporting customer service workflows, or improving product functionality.

We do not use your private messages to train public AI models. If Embra introduces new AI-assisted features that materially change how user information is used, we will update this policy or provide additional notice where appropriate.

4. Legal Bases for Processing

Where required by law, including for users in the European Economic Area or the United Kingdom, we process personal information based on one or more of the following legal bases:

• Performance of a contract: to provide the Service, create accounts, deliver features, process applications, and support user interactions.
• Legitimate interests: to secure, maintain, analyze, and improve the Service; prevent misuse; understand product performance; and communicate with users about relevant Service updates.
• Consent: where we ask for your permission, such as for certain optional communications, profile visibility choices, or future features that require consent.
• Legal obligations: to comply with applicable laws, lawful requests, dispute resolution, recordkeeping, and enforcement of our rights.

5. Who We Share Information With

We share information only as needed to operate the Service, comply with law, protect rights and safety, or support user-requested interactions.

Service providers

We share information with service providers who help us operate the Service, including:

• Supabase for database, authentication, and backend infrastructure.
• Resend for transactional email.
• Sentry for error monitoring and diagnostics.
• Vercel for hosting and deployment.
• Google Cloud or other infrastructure providers, if used to support hosting, security, storage, or operational systems.

These providers may only use the information we share to provide services to us, and they are required to protect it.

Other users

Certain profile information may be visible to other users depending on your role, settings, and use of the Service. For example, students may see mentor profiles, mentors may see limited student profile information related to a connection request, and users may see information needed to communicate or participate in mentorship features.

Schools, employers, firms, and partner organizations

If you access Embra through a law school, employer, law firm, or partner organization, that organization may provide or request limited information related to your access, participation, engagement, or eligibility. We will describe any school-, employer-, firm-, or partner-specific data sharing before enabling those features or as part of the applicable pilot, agreement, or program.

We do not share private student messages, private notes, or sensitive individual-level activity with schools or partners unless clearly disclosed, authorized by the user, required to provide the Service, or required by law.

Legal and safety reasons

We may share information when required by law, in response to lawful legal process, to enforce our agreements or policies, or to protect the rights, property, safety, or security of Embra, our users, or the public.

Business transfers

If Embra is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, your information may be transferred as part of that transaction, subject to this Privacy Policy or a policy with similar protections.

6. Data Retention

We keep personal information for as long as needed to provide the Service, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

We generally keep account information for as long as your account is active.

If you pause or deactivate your account, we may keep your information so you can reactivate later, unless you request deletion.

If you request account deletion, we deactivate your account, remove your profile from public surfaces, and delete or anonymize personal information that is no longer needed. We may retain limited records where necessary for security, fraud prevention, dispute resolution, legal compliance, backup integrity, accounting, audit purposes, or legitimate business records.

Some information may remain in backups for a limited period before being deleted in the ordinary course of backup retention.

You can pause, reactivate, or request deletion of your account from your settings page or by contacting support@myembra.com.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

No online service can guarantee complete security. You are responsible for keeping your login credentials secure and notifying us if you believe your account has been compromised.

8. Your Choices and Rights

You may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your account or request deletion of certain personal information.
• Object to or restrict certain uses of your information.
• Request a copy of certain personal information in a portable format.
• Change notification preferences.
• Control certain profile visibility settings where available.

To exercise these rights, sign in to your account and use the settings page, or contact us at support@myembra.com.

Depending on your location, including if you are in the European Economic Area, the United Kingdom, California, or another jurisdiction with privacy laws, you may have additional rights. We will respond to requests as required by applicable law.

9. California Privacy Notice

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

We do not use third-party advertising cookies.

California residents may request access, correction, or deletion of personal information by using the settings page or contacting support@myembra.com.

Depending on applicable law, California residents may also have the right to know the categories of personal information we collect, the purposes for collection, the categories of sources from which information is collected, the categories of third parties to whom information is disclosed, and the categories of information disclosed for business purposes.

10. International Users

Embra is operated from the United States. If you use the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other locations where our service providers operate.

Data protection laws in these locations may differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

11. Children

Embra is intended for adult law students, lawyers, mentors, employers, schools, and related legal education users. We do not knowingly collect personal information from anyone under 18.

If you believe we have collected information from a minor, contact us at support@myembra.com and we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, through the Service, or by another appropriate method.

The “Last updated” date at the top tells you when this Privacy Policy was last revised.

13. Contact

Questions about this Privacy Policy or your personal information?

Email us at support@myembra.com.