1. Who we are
Emulsion Financial Solutions (Fijn Software, LLC D.B.a Emulsion Financial Services, “Emulsion”, “we”, “us” or “our”) provides a platform that consolidates financial data from the accounting systems an organization runs or has inherited. This policy covers our website, emulsionfs.com (the “Website”), and the Emulsion platform and related services (the “Platform”).
Our role. For information we collect through the Website, from sales inquiries and to run our business, Emulsion decides how the information is used and acts as a “controller” (or “business”). For financial data and user account information that customers provide to the Platform, we act on our customer’s behalf as a “processor” (or “service provider”). In that case, your organization controls the data, and you should direct privacy requests to them first.
2. Information we collect
Information you give us
When you book a demo, contact sales or request a scoping call, we collect what you enter in the form:
- Name, work email, phone number and company
- Number of entities and the accounting systems you use
- The reason you’re contacting us and any message you include
We also collect information you share with us in emails, calls and meetings, such as your job title and details about your organization’s needs.
Information collected automatically
Our Website uses Google Analytics to understand how visitors use it. This collects details such as the pages you view, how long you stay, your browser and device type, your IP address and approximate location derived from it, and the site that referred you. If you open our marketing emails, Mailchimp may record whether an email was opened and which links were clicked.
Account information
If you use the Platform, we collect your name, email address, role and the permissions your organization assigns you. We also keep technical and usage records needed to run and secure the Platform, such as login times, IP addresses and audit logs of actions taken and data accessed.
Customer financial data
Customers connect or provide financial records from their accounting systems, such as ledgers, journal entries, account balances, vendor and customer records, and related reports. These records may include personal information, such as names of employees, vendors or customers. We process this data on the customer’s behalf, as described in Section 4.
We do not ask for, and ask you not to submit through the Website, sensitive personal information such as government ID numbers, health information or payment card numbers.
3. How we use information
| Purpose | Information used | Legal basis (EU/UK visitors) |
|---|---|---|
| Respond to your inquiry and schedule demos or scoping calls | Form details, communications | Steps you ask us to take before a contract; legitimate interests |
| Send product news and updates (you can unsubscribe at any time) | Name, work email, email engagement | Legitimate interests, or consent where the law requires it |
| Provide, maintain and support the Platform | Account information, customer financial data | Performance of our contract; on the customer’s instructions |
| Secure the Website and Platform and prevent fraud or misuse | Account, usage and technical data | Legitimate interests; legal obligation |
| Understand and improve how our Website is used | Analytics data | Consent (where required) or legitimate interests |
| Meet legal, tax and accounting obligations and enforce our agreements | Any relevant information | Legal obligation; legitimate interests |
We do not use personal information for automated decision-making that has legal or similarly significant effects on you. If we want to use your information for a new purpose that isn’t compatible with these, we will tell you first.
4. Customer financial data
Financial data from your systems belongs to your organization. We use it only to provide the services in your agreement with us, and we follow your organization’s instructions about how it is handled.
- Read-only connections. Connections to live systems are read-only. We never write to your systems.
- Dedicated hosting. Hosted customers get a dedicated database, never shared or pooled with other customers, encrypted with AES-256 at rest and TLS in transit.
- Local deployment. Customers who choose local deployment keep their repository on their own infrastructure, and Emulsion does not hold a copy of that data.
- No AI training. Your data is never used to train AI models, ours or anyone else’s.
- AI integrations are opt-in. Optional AI integrations are off unless your organization turns them on. If it does, the relevant data is sent to the AI provider your organization selects, under that provider’s terms and your organization’s settings.
- Access by our staff. Emulsion personnel access customer data only when needed to provide support, maintain the service or meet legal obligations, and that access is logged.
If we receive a privacy request from someone whose information is in customer data, we will refer them to the customer, or help the customer respond, as our agreement provides.
7. International data transfers
Emulsion is based in The United States of America, and our service providers may process information in the United States and other countries. Those countries may have data protection laws different from yours. When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we use safeguards recognized by law, such as the European Commission’s Standard Contractual Clauses and the UK Addendum. Hosted customers can choose the region where their dedicated database is stored.
8. Retention
We keep personal information only as long as we need it for the purposes in this policy:
- Inquiry and contact details: We retain your information for 24 months after expiration of a contract, initial contact, or until you ask us to delete them.
- Marketing email preferences: We keep a record of your unsubscribe so we can honor it.
- Account information: For as long as your organization’s account is active, then deleted per the customer agreement.
- Customer financial data: For the length of your agreement, then returned or deleted as your agreement sets out.
- Analytics data: Google Analytics retains event data for 12 months under our settings.
- Legal and financial records: As long as the law requires, such as for tax and accounting purposes.
9. Security
We use administrative, technical and physical safeguards designed to protect personal information, including:
- Encryption of data at rest (AES-256) and in transit (TLS)
- Role-based access controls and the principle of least privilege
- Logging of access to customer data
- Microsoft Multi-factor Authentication
- Google Multi-factor Authentication
No system is perfectly secure, and we can’t guarantee the security of information sent over the internet. If we become aware of a breach affecting your personal information, we will notify you, affected customers and regulators as the law and our agreements require. You are responsible for keeping your Platform login credentials confidential.
10. Your choices and rights
Everyone. You can ask us to access, correct or delete your personal information. You can unsubscribe from marketing emails at any time with the link in any message; we may still send you messages about your account or our services.
California residents. Under the California Consumer Privacy Act, as amended (CCPA), you have the right to:
- Know what personal information we collect, use and disclose, and get a copy of it
- Request that we correct inaccurate information
- Request that we delete your information, subject to legal exceptions
- Opt out of the sale or sharing of your information (we do not sell or share it)
- Limit the use of sensitive personal information (we do not collect it for that purpose)
- Not be discriminated against for exercising these rights
In the past 12 months, we collected identifiers (such as name, email and IP address), professional information (such as company and role), internet activity (such as Website usage) and approximate location, from the sources and for the purposes described above. We disclosed these categories only to the service providers listed in Section 5. You may use an authorized agent to submit a request on your behalf.
Other U.S. states. Residents of states with similar privacy laws (such as Colorado, Connecticut, Virginia and others) have comparable rights. If we deny your request, you may appeal by replying to our decision; if we deny the appeal, you can contact your state attorney general.
EEA, UK and Swiss residents. Under the GDPR and UK GDPR, you also have the right to restrict or object to our processing, to data portability, and to withdraw consent at any time where we rely on it. You can lodge a complaint with your local data protection authority.
How to make a request. Email us at privacy@emulsionfs.com. We will verify your identity, usually by confirming details we already hold, and respond within the time the law requires (generally 30 to 45 days). If your information is held in an organization’s account on the Platform, we will refer your request to that organization.
11. Children
Our Website and services are built for businesses and aren’t directed to children under 16. We don’t knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.
12. Third-party links
Our Website may link to other sites, and the Platform may connect to third-party systems your organization chooses, such as accounting software or AI assistants. We aren’t responsible for their privacy practices, so please review their policies.
13. Changes to this policy
We may update this policy from time to time. We’ll post any changes on this page and update the date at the top. If a change is significant, we’ll tell customers directly, by email or through the Platform, before it takes effect.
14. Contact us
Questions about this policy or your information:
Emulsion Financial SolutionsEmail: privacy@emulsionfs.com