How we work with your data and your business.

Privacy Policy

Effective as of 10 August 2026

1. Who We Are

EMVRIA ("we", "us", "our") provides intelligent, secure workflow automation and AI agent services from the United Kingdom. This Privacy Policy explains how we collect, use and protect your personal information when you visit our website at emvria.ai or use our services.

2. Information We Collect

We only ask for personal or business information when we truly need it to provide a service to you — for example, to set up an account, schedule a demonstration, or deliver the automated workflows you have requested. We collect it by fair and lawful means, with your knowledge and consent, and we let you know why we are collecting it and how it will be used.

3. How We Use Your Information

We use your information to respond to enquiries, provide and improve our services, deliver the workflows you have requested, and comply with our legal obligations. We never sell your personal information, and we do not share personally identifying information publicly or with third parties, except when required to by law or where necessary to provide the service you have requested.

4. AI Agents & Automated Workflows

Where our platform processes data through AI agents and automated workflows, that data is handled solely to deliver and improve the services you have engaged us for, in line with your instructions and under appropriate confidentiality and data protection safeguards.

5. Data Retention

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

6. Cookies

Our website may use cookies and similar technologies to improve your experience and understand site usage. You can control cookies through your browser settings; disabling them may affect some features of the site.

7. Your Rights

Under applicable data protection law, you have rights including access, rectification, erasure, restriction, objection and data portability. You may also withdraw consent at any time. To exercise any of these rights, contact us using the details on our website.

8. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or alteration.

9. External Links

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

10. Your Choices

You are free to refuse our request for your personal or business information, with the understanding that we may be unable to provide you with some of your desired services.

11. Changes & Contact

We may update this Privacy Policy from time to time, and any changes will be posted on this page with an updated date. Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us via our website.

Terms & Conditions

Last updated: 10 August 2026

1. Application

By accessing or using the EMVRIA website at emvria.ai (including all sub-pages) or any of our products, platforms or services, you agree to be bound by these Terms and Conditions. If you do not agree with any part of these terms, please do not use our website or services.

2. The Service

EMVRIA provides intelligent workflow automation, AI agent orchestration and related implementation and consulting services. We may add, remove or change features from time to time and will make reasonable efforts to notify you of significant changes.

3. Accounts

Where you register an account, you must provide accurate and up-to-date information. You are responsible for safeguarding your login credentials and for all activity under your account, and must notify us promptly of any unauthorised access or use.

4. Acceptable Use

You agree not to misuse our website or services, including by attempting to gain unauthorised access, reverse engineering our software, scraping or harvesting data without permission, interfering with the operation of the service, or using it for any unlawful purpose.

5. Your Data & Content

You retain ownership of the data and content you provide. We process your information to provide and improve the service, and may use de-identified, aggregated data for analytics and product development. You are responsible for ensuring any data you provide is accurate and that you have the right to provide it.

6. Confidentiality

Each party agrees to keep confidential any non-public information disclosed in connection with the use of our services and to use it only for the purposes intended. This does not apply to information that is or becomes publicly available through no fault of the receiving party, or that is required to be disclosed by law.

7. Intellectual Property

Our website, software, designs, branding and content are owned by or licensed to EMVRIA and are protected by intellectual property laws. You may not copy, modify, distribute or create derivative works from them except as expressly permitted. You retain all rights in your own content and data.

8. Third-Party Services & Payments

Our services may integrate with or link to third-party providers, and payment processing may be carried out by third-party payment providers. Your use of such services is subject to their own terms and policies, and we are not responsible for their acts or omissions.

9. Payment Terms

Unless otherwise agreed in writing, all invoices are due and payable within 30 days of the invoice date. We may charge interest on overdue amounts at the rate permitted by law, and may suspend access to the service while amounts remain outstanding.

10. Termination

We may suspend or terminate your access if you breach these terms, misuse our services or otherwise act in a way that is unlawful or harmful. You may stop using our services and close your account at any time. Provisions relating to confidentiality, intellectual property, disclaimers, liability and indemnification will survive termination.

11. Disclaimers

Our website and services are provided "as is" and "as available" without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose and non-infringement. We do not guarantee that the service will be uninterrupted, error-free or secure.

12. Limitation of Liability

To the maximum extent permitted by law, we will not be liable for any indirect, incidental, special or consequential damages, or for loss of profits, data or business opportunity, arising out of or in connection with your use of our website or services. Our total aggregate liability will not exceed the amounts paid by you to us in the twelve months preceding the claim.

13. Indemnification

You agree to indemnify and hold harmless EMVRIA and its operators from claims arising out of your breach of these terms, your misuse of the services, or your violation of applicable law.

14. Governing Law & Disputes

These terms are governed by the laws of England and Wales. Any dispute arising out of or in connection with these terms will be subject to the exclusive jurisdiction of the courts of England and Wales.

15. Changes & Contact

We may update these terms from time to time and will post the updated version on this page. Your continued use of our services after changes take effect constitutes acceptance. If you have any questions, please contact us via the details on our website.

Data Processing Agreement

Last updated: 10 August 2026

1. Purpose

This Data Processing Agreement (the "DPA") sets out the terms on which EMVRIA processes personal data on behalf of its customers in connection with the provision of its workflow automation platform, AI agents and related services. It forms part of and is governed by the Terms and Conditions.

2. Definitions

Terms used in this DPA have the meanings given in applicable data protection law. In particular: "Personal Data" means any information relating to an identified or identifiable natural person; "Controller" means the party who determines the purposes and means of processing; "Processor" means the party who processes Personal Data on behalf of the Controller; and "Data Subject" means the individual to whom the Personal Data relates.

3. Roles & Responsibilities

The customer is the Controller of the Personal Data they upload to the platform. EMVRIA is a Processor and processes Personal Data only on the documented instructions of the Controller, in order to provide the services requested. This DPA is the complete instruction set for such processing.

4. Data We Process

We process Personal Data such as names, contact details and account information that customers provide, as well as business data processed through their automated workflows. We process this data only as necessary to operate the platform, provide support, deliver contracted services and comply with our legal obligations.

5. Data Subject Rights

We will assist the Controller in responding to requests from Data Subjects exercising their rights under applicable data protection law, including rights of access, rectification, erasure, restriction, portability and objection, where we are reasonably able to do so and are instructed in writing.

6. Security

We implement appropriate technical and organisational measures to protect Personal Data, including encryption in transit, access controls, regular backups and procedures for managing security incidents. We take reasonable steps to ensure that personnel with access to Personal Data are subject to appropriate confidentiality obligations.

7. Sub-processors

We may engage third-party sub-processors (such as hosting, payment and email providers) to assist in providing the service. We ensure that any sub-processor is bound by data protection obligations no less protective than those in this DPA, and we will provide a list of sub-processors on request.

8. International Transfers

Where Personal Data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place, such as the UK or EU standard contractual clauses or other recognised transfer mechanisms, in accordance with applicable law.

9. Personal Data Breach

We will notify the Controller without undue delay after becoming aware of a personal data breach affecting Personal Data processed under this DPA, and will provide reasonable information to assist the Controller in meeting its notification obligations.

10. Duration & Return of Data

This DPA applies for as long as we process Personal Data on the Controller's behalf. Upon termination of the service or at the Controller's request, we will delete or return all Personal Data unless we are required by law to retain it.

11. Contact

Questions about this DPA or our data processing practices can be directed to us through the contact details on the EMVRIA website.

Master Service Agreement

Template — Last updated: 11 August 2026

1. Parties

This Master Service Agreement (the "Agreement") is between EMVRIA Ltd (the "Provider") and the Client (the "Customer"). This Agreement governs all services delivered by the Provider.

2. Services Provided

The Provider will deliver workflow automation services, platform access (web, mobile, AI), compliance and certificate generation, support and maintenance, and any additional services agreed in writing.

3. Subscription & Fees

Fees are outlined in the Customer's Order Form. Subscriptions renew automatically unless cancelled. Invoices are payable within 30 days, and late payments may result in suspension of service.

4. Customer Responsibilities

The Customer agrees to provide accurate information, maintain secure account access, use the platform lawfully, and ensure staff follow compliance workflows.

5. Data Protection

The Provider will process personal data according to the Data Processing Agreement (DPA). The Customer remains the data controller.

6. Security

The Provider will maintain encryption, identity management, access control, and secure cloud infrastructure. Details are available on the Security & Compliance page.

7. Service Levels (SLA)

Unless otherwise agreed, the Provider aims for high uptime, support is available during business hours, and critical issues are prioritised. A full SLA can be added if required.

8. Intellectual Property

All platform technology, workflows, and content remain the property of the Provider. The Customer receives a licence to use the platform.

9. Confidentiality

Both parties agree to keep confidential information private and secure.

10. Liability

Liability is limited to the extent permitted by law. The Provider is not liable for customer misuse, incorrect data entry, or unauthorised access caused by Customer negligence.

11. Term & Termination

This Agreement remains in effect until terminated. Either party may terminate with 30 days' notice. Upon termination, Customer data is returned or deleted and access to the platform ends.

12. Governing Law

This Agreement is governed by the laws of England and Wales.

13. Contact

EMVRIA Ltd. Email: [email protected]