This Privacy Policy explains how [LEGAL ENTITY NAME] ("Embersona," "we," "us") collects, uses, and protects information when you use the Embersona service (the "Service"). We are the data controller for the information described here. If you have questions, contact [SUPPORT EMAIL].
This policy covers Creators who sign up for Embersona, and it also explains how we process the subscriber (fan) message data that flows through a Creator's connected Fanvue account so the Service can generate replies. Creators are responsible for their own relationship with, and disclosures to, their subscribers.
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, password (stored only as a salted hash, never in plain text) | Create and secure your account |
| Fanvue connection | OAuth access token issued by Fanvue, your Fanvue creator ID | Read messages and send replies on your behalf |
| Subscriber message data | Incoming and outgoing message text, media references, and basic fan identifiers within your account | Generate relevant, in-character replies and remember context |
| Content you provide | Persona details, media catalog metadata, pricing, greetings | Configure how the AI represents you |
| Usage data | Log data, timestamps, feature usage, diagnostic events | Operate, secure, and improve the Service |
| Billing data | Plan, transaction records (card details are handled by our payment processor, not stored by us) | Process payments |
We do not ask for or store your Fanvue password, and we request only the Fanvue permissions the Service needs.
We do not sell your personal information, and we do not use one Creator's data to serve another Creator.
Where the GDPR applies, we process data on these bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (where required, e.g., certain communications), and legal obligation (e.g., record-keeping).
We share information only with service providers that help us operate, under contract and only as needed:
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of users and the public. We do not send your data to any recipient you have not authorized.
We keep account and configuration data for as long as your account is active. Message context is retained only as long as needed to provide continuity, and is purged on request or on account closure. Backups and diagnostic logs are retained for a limited period and then deleted or de-identified. When you disconnect Fanvue, we stop processing new messages for that account.
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. Creators can exercise these rights in-app or by emailing [SUPPORT EMAIL]. We respond within the timeframe required by applicable law.
You can request deletion of your account and associated data at any time by emailing [SUPPORT EMAIL] or using the in-app delete option. On a valid request we delete or de-identify your personal data and stored message context promptly, except where limited retention is required by law or for security. Disconnecting your Fanvue account also revokes our access token immediately.
We use technical and organizational measures to protect your data, including encryption in transit, hashed passwords, access tokens stored securely and never logged in plain text, and internal access limited to staff who need it. No system is perfectly secure, but we work to protect your information and to isolate each Creator's data from every other Creator's.
We may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.
The Service is strictly for adults (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
Our dashboard uses only the cookies necessary to keep you signed in and to operate the Service. We do not use third-party advertising cookies.
We may update this policy from time to time. We will post the new effective date at the top and, for material changes, notify you by a reasonable means.
[LEGAL ENTITY NAME]
Email: [SUPPORT EMAIL]
Address: [BUSINESS ADDRESS, optional]