Privacy Policy

This Privacy Policy explains how Empyrean Merchant Services Inc. (“Empyrean,” “we,” “us,” or “our”) handles information in connection with Lumitag, a service provided and operated by Empyrean Merchant Services Inc., including information received when a merchant connects a Clover account to Lumitag.

1. Scope

This policy applies to the Lumitag web application, related services, and the Lumitag integration with Clover. Lumitag is designed primarily for businesses and authorized business users.

2. Information We May Collect

Depending on how Lumitag is used, we may collect or process:

• Account and contact information provided by a merchant or authorized user.
• Clover connection information, such as the Clover merchant identifier and other identifiers reasonably required to establish and maintain the authorized Clover connection.
• Clover inventory information, such as products, item names, SKUs, categories, modifiers, pricing-related inventory fields, and other inventory information available through the Clover APIs and authorized permissions.
• Authentication information, including OAuth access and refresh tokens required to maintain an authorized Clover connection.
• Technical and security information, such as request logs, timestamps, IP addresses, browser or device information, diagnostic information, and security events when reasonably necessary to operate and protect the service.
• Information entered into Lumitag by authorized users when configuring products, electronic shelf label content, stores, templates, or related functionality.

3. Current Clover Permissions

The current Lumitag Clover integration requests read access to Inventory only.

The current integration does not request Clover permissions for Customers, Employees, Merchant profile data, Orders, Payments, or Ecommerce, and it does not request write access to Clover inventory through the permissions currently configured for the application.

4. How We Use Information

We use information as reasonably necessary to:

• connect and authenticate a merchant's Clover account;
• identify the connected Clover merchant;
• import and display authorized Clover inventory information;
• reduce duplicate product entry and support product management;
• provide electronic shelf label and related Lumitag functionality;
• maintain, troubleshoot, secure, and improve Lumitag;
• respond to support, privacy, and security requests;
• prevent misuse, fraud, unauthorized access, and security incidents;
• comply with applicable legal and regulatory obligations.

5. Clover OAuth Credentials

OAuth tokens received in connection with a Clover authorization are treated as confidential authentication credentials. Lumitag is configured to store Clover access and refresh tokens in encrypted form within the application data store.

We do not intentionally expose OAuth access or refresh tokens in merchant-facing pages.

6. Limiting Collection and Use

We seek to collect and use information that is reasonably necessary for the operation, security, support, and improvement of Lumitag and for the purposes described in this policy.

Clover-connected information is not intended to be used by Lumitag to process card payments or to access Clover payment information under the application's currently configured permissions.

7. Sharing and Service Providers

We may use service providers that assist with hosting, infrastructure, security, communications, backups, monitoring, and other functions necessary to operate Lumitag. Such providers may process information on our behalf subject to applicable contractual and legal obligations.

We may also disclose information where reasonably necessary to comply with law, legal process, enforce agreements, protect users, investigate security issues, or protect the rights and security of Empyrean, merchants, users, or others.

8. Sale and Advertising Use

Lumitag does not use Clover-connected merchant inventory information for third-party behavioural advertising and does not sell Clover-connected merchant data as part of the Lumitag service.

9. Data Retention

We retain information for as long as reasonably necessary to provide and secure Lumitag, maintain authorized merchant connections, satisfy legitimate business and contractual requirements, resolve disputes, and meet applicable legal obligations.

Retention periods may vary depending on the type of information and the reason it is maintained.

10. Security

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No internet-connected service or storage system can be guaranteed to be completely secure.

11. Merchant Responsibilities

Merchants are responsible for ensuring that individuals who use Lumitag on their behalf are authorized to do so and that information submitted to or connected with Lumitag is handled in accordance with the merchant's own legal and privacy obligations.

12. Access, Correction, and Deletion Requests

Subject to applicable law and legitimate retention requirements, individuals and merchants may contact us to request information about our handling of their information or to request appropriate access, correction, or deletion.

13. Disconnecting Clover

A merchant may revoke or disconnect an application through available Clover account controls or may contact us for assistance. Revocation prevents future authorized API access through the revoked credentials. Certain records may remain where reasonably required for security, dispute resolution, backup integrity, or legal compliance.

14. Cross-Border Processing

Information may be processed or stored in jurisdictions where Empyrean or its service providers operate. When information is processed outside the merchant's jurisdiction, it may be subject to the laws of the jurisdiction in which it is processed.

15. Children

Lumitag is a business service and is not directed to children. We do not knowingly design the service to collect personal information from children for consumer use.

16. Third-Party Services

Clover is a third-party platform and maintains its own agreements, terms, and privacy practices. This Privacy Policy governs Empyrean's handling of information through Lumitag and does not replace Clover's privacy policy or terms.

17. Changes to This Policy

We may update this Privacy Policy as Lumitag, applicable requirements, or our practices evolve. The current version will be posted at this URL with its effective or last-updated date.

18. Contact Us