Privacy Policy

This Privacy Policy describes how Ember AI (“Ember,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website at withember.ai, our application, and our services (the “Service”). It also explains your privacy rights and choices. If you do not agree with our practices, please do not use the Service.

1. Information we collect

Information you provide. When you create an account or contact us, we collect information such as your name, email address, password, organization details, and billing information.

Information from accounts you connect. When you authorize Ember to connect to your email inbox (such as Gmail or Outlook), your CRM, and related services, we access and process data from those accounts so we can provide the Service. This may include the content, headers, and metadata of email messages; your contacts and their details; CRM records, notes, and activities; and calendar and meeting information. Ember accesses this data to read relationship context, draft email in your voice, and — after your approval — send email from your connected inbox.

Payment data. If you purchase a paid plan or credits, payment is processed by Stripe. Ember does not store full payment card numbers; Stripe handles and stores that data under its own privacy notice at stripe.com/privacy.

Information collected automatically. When you use the Service we automatically collect technical and usage information, such as your IP address, browser and device characteristics, operating system, referring URLs, and information about how and when you use the Service. This is used to operate, secure, and improve the Service.

Sensitive information. We do not seek to process special or sensitive categories of personal information.

2. How we use information

• To provide, maintain, secure, and improve the Service.
• To read relationship context and draft, queue, and — only after you approve — send the emails you authorize, from your connected inbox.
• To create and manage your account and authenticate you.
• To process payments and manage subscriptions and credits.
• To respond to your inquiries and provide support.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.

3. Artificial intelligence and large language models

Ember uses artificial intelligence to draft emails and generate summaries and recommendations. To do this, relevant content from your connected accounts (such as email context and contact information) is sent to third-party large language model providers — currently Anthropic, OpenAI, and Google — and embedding/ranking providers such as Cohere, acting as our service providers, solely to generate output you requested. These providers process the data to return results to Ember and, under their API terms, do not use it to train their models. We do not use the content of your connected accounts to train our own or any third party’s general-purpose AI models.

4. Google API Services and Limited Use

Ember’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Gmail and Google account scopes needed to provide and improve user-facing features of the Service (reading relationship context and sending email you approve).
• We only use Google user data to provide or improve those user-facing features, and we do not use it for serving advertisements.
• We do not transfer Google user data to others except as necessary to provide or improve user-facing features (for example, to the AI service providers described above, who do not train their models on it), to comply with applicable law, or as part of a merger or acquisition with appropriate notice.
• We do not allow humans to read your Google user data unless we have your affirmative consent for specific messages, it is necessary for security or to comply with law, or the data has been aggregated and anonymized.

5. How we share information

We do not sell your personal information. We share information only as described here:

• Service providers (subprocessors). We share data with vendors who process it on our behalf to deliver the Service, under appropriate safeguards. These include Supabase (database and authentication), Railway (hosting), Anthropic, OpenAI, and Google Cloud (AI/language models), Cohere (embeddings and ranking), Composio (integration and OAuth token management), Attio (CRM integration), Stripe (payments), Sentry (error monitoring), and Cloudflare (network and security).
• Legal and safety. We may disclose information where required by law or to protect the rights, safety, and security of Ember, our users, or the public.
• Business transfers. We may share or transfer information in connection with a merger, financing, acquisition, or sale of assets, with notice as appropriate.

6. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, maintain security, and understand usage so we can improve the Service. You can control cookies through your browser settings; disabling them may affect how the Service works.

7. How we handle your social logins

If you register or sign in using a third-party account such as Google, we receive basic profile information from that provider (typically your name and email address). We use it to create and authenticate your account as described in this Policy. We recommend you review the provider’s own privacy notice to understand and manage their practices.

8. International data transfers

Our servers and certain service providers are located in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries, which may have different data protection laws. We take measures to protect your information in accordance with this Policy and applicable law.

9. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter only as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer have a legitimate need to process your information, we delete or anonymize it, or isolate and securely store it until deletion is possible. When you disconnect an integration or delete your account, we cease ongoing access and delete or anonymize associated data subject to these limits.

10. Children

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will take appropriate steps to delete it.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can review and update much of your information in your account settings, or you can exercise your rights by emailing hello@withember.ai. We will respond in accordance with applicable law. Withdrawing consent does not affect processing carried out before withdrawal.

12. Security

We maintain technical and organizational measures designed to protect your information, including least-privilege access, per-user data scoping, and secure storage of integration credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. See our Security page for more.

13. Do-Not-Track

Because no common industry standard for Do-Not-Track signals has been finalized, we do not currently respond to them. We will revisit this if a standard is adopted.

14. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last updated” date, and for material changes we will provide additional notice as appropriate. Your continued use of the Service after an update means you accept the revised Policy.

15. Contact us

Questions about this Policy, or want to review, update, or delete your data? Email hello@withember.ai.