Privacy Policy
This Privacy Policy explains how Embersona ("Embersona," "we," "us") collects, uses, and protects information when you use the Embersona service (the "Service"). We are the data controller for the information described here. If you have questions, contact hello@embersona.com.
1. Who this policy covers
This policy covers Creators who sign up for Embersona, and it also explains how we process the subscriber (fan) message data that flows through a Creator's connected Fanvue account so the Service can generate replies. Creators are responsible for their own relationship with, and disclosures to, their subscribers.
2. Information we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, password (stored only as a salted hash, never in plain text) | Create and secure your account |
| Fanvue connection | OAuth access token issued by Fanvue, your Fanvue creator ID | Read messages and send replies on your behalf |
| Subscriber message data | Incoming and outgoing message text, media references, and basic fan identifiers within your account | Generate relevant, in-character replies and remember context |
| Content you provide | Persona details, media catalog metadata, pricing, greetings | Configure how the AI represents you |
| Usage data | Log data, timestamps, feature usage, diagnostic events | Operate, secure, and improve the Service |
| Billing data | Plan, transaction records (card details are handled by our payment processor, not stored by us) | Process payments |
We do not ask for or store your Fanvue password, and we request only the Fanvue permissions the Service needs.
3. How we use information
- To operate the Service: reading incoming messages and generating and sending replies on your behalf.
- To maintain conversation context and memory so replies stay consistent.
- To secure the Service, prevent abuse, and troubleshoot problems.
- To process payments and manage your subscription.
- To communicate with you about your account and important changes.
We do not sell your personal information, and we do not use one Creator's data to serve another Creator.
4. Legal bases (GDPR)
Where the GDPR applies, we process data on these bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (where required, e.g., certain communications), and legal obligation (e.g., record-keeping).
5. How we share information
We share information only with service providers that help us operate, under contract and only as needed:
- Fanvue: to read messages and deliver replies through your connected account.
- Cloud and AI infrastructure providers: to host the Service and generate replies. Message content may be processed by our AI model infrastructure solely to produce your replies.
- Payment processor: to handle billing. They receive only what they need to process payment.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of users and the public. We do not send your data to any recipient you have not authorized.
6. Data retention
We keep account and configuration data for as long as your account is active. When a subscriber has not written for 12 months, the stored messages of that conversation are deleted; the AI keeps only a short summary of that subscriber, so someone who comes back is not treated as a stranger. All message data is purged on request or on account closure. Database backups are kept for at most 30 days, and diagnostic logs for a limited period, and then they are deleted or de-identified. When you disconnect Fanvue, we stop processing new messages for that account.
If, when reporting a bug, you choose to attach one of your conversations to help us debug, that transcript is shared only with Embersona support to investigate the issue you reported, is never sold or shared onward, and is automatically deleted within 30 days. Attaching a conversation is always optional and requires your explicit consent each time.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. Creators can exercise these rights in-app or by emailing hello@embersona.com. We respond within the timeframe required by applicable law.
8. Data deletion
You can permanently delete your account and all associated data at any time, yourself, from Settings → Delete my data in the Embersona dashboard. You can also request deletion by emailing hello@embersona.com. Deletion removes, for your account: your persona and configuration, your operational settings, your entire message history and the AI's stored memory of your subscribers, your synced content catalog, your per-subscriber overrides, your stored Fanvue access and refresh tokens, and your Embersona login. It is immediate and irreversible, and it never affects another creator's data. We may retain a limited amount of information only where required by law or for security (for example, fraud or abuse records); such data is minimized and deleted when no longer needed. Deletion here removes data held by Embersona; it does not delete anything on Fanvue itself. Deleting your data also revokes our Fanvue access immediately.
9. Data security
We use technical and organizational measures to protect your data, including encryption in transit, hashed passwords, access tokens stored securely and never logged in plain text, and internal access limited to staff who need it. No system is perfectly secure, but we work to protect your information and to isolate each Creator's data from every other Creator's.
10. International transfers
We may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.
11. Children
The Service is strictly for adults (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
12. Cookies
Our dashboard uses only the cookies necessary to keep you signed in and to operate the Service. We do not use third-party advertising cookies.
13. Changes to this policy
We may update this policy from time to time. We will post the new effective date at the top and, for material changes, notify you by a reasonable means.
14. Contact
Embersona
Email: hello@embersona.com