Template for review — have counsel check this before launch.

Privacy Policy

Last updated June 27, 2026

Who we are

Ember ("we", "us") is an AI follow-up assistant operated at emberapp.org. This policy explains what data we access, why, and the choices you have.

What we access

With your explicit consent we access: your Google account email; Gmail messages (read) to build your digest and detect follow-ups; Gmail send to deliver drafts you approve; Google Calendar (read) for meeting context; and Google Drive (read) for meeting transcripts. We never send a message without your action.

How we use it

We use this data only to provide the product: ranking who needs a reply, drafting messages in your voice, tracking promises, and enriching your contacts. To generate drafts and summaries we send the minimum necessary content to our AI processors (Anthropic Claude and Google Gemini). We do not use your data to train models and we do not sell it.

Google API Limited Use

Ember's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide and improve user-facing features, is not transferred to others except as needed to provide the service or as required by law, and is not used for advertising. We do not allow humans to read your Google user data unless we first obtain your affirmative agreement to view specific messages, files, or other data; it is necessary for security purposes (such as investigating abuse); it is required to comply with applicable law; or the data has been aggregated and anonymized for internal operations.

Subprocessors

We rely on: Google Cloud / Firebase (hosting, auth, storage), Anthropic and Google (AI processing), and Stripe (billing). Each processes data only to provide their part of the service.

Storage & security

Data is stored in Google Cloud (Firestore). OAuth and messaging tokens are encrypted at rest. Access is restricted to your account.

Retention & deletion

You can export or permanently delete your account at any time from Settings → Billing. Deleting your account revokes our Google access, cancels any subscription, and purges your data.

Your rights

You may access, export, correct, or delete your data, and revoke Google access from your Google account permissions at any time.

Contact

Questions? hello@emberapp.org.