Privacy Policy

4.5.1 Google data We access

Access only starts after You connect your Google account and approve the permissions on Google's consent screen. We request the following permissions, and no others:

• Email address and basic profile (userinfo.email)To identify the Google account You connected and show it in your settings.
• Gmail, read-only (gmail.readonly)To search and read the messages, threads and drafts that You ask the Second Brain to consult.
• Gmail, draft creation (gmail.compose)To create or modify an email draft after your explicit confirmation. This permission technically also allows a draft to be sent. Ember's AI agent can never send an email: it only prepares drafts. A message is sent only if You yourself click Send in Ember's email compose window, when that function is enabled; it then requires the additional permission gmail.send, requested only in that case. Otherwise You send the draft yourself from Gmail.
• Google Drive, read-only (drive.readonly)To search, list and read the metadata and content of the files You ask the Second Brain to consult, including Google Docs and Google Sheets documents.
• Google Drive, files created or opened with Ember (drive.file)To create or modify, after your explicit confirmation, a file, a Google Docs document or a Google Sheets spreadsheet.
• Google Calendar, read-only (calendar.readonly)To list your calendars and read the events that You ask the Second Brain to consult.
• Google Calendar, events You own (calendar.events.owned)To create or modify, after your explicit confirmation, an event in a calendar You own.

4.5.2 How We use Google data

Google data is used only to provide the features that You request in the Second Brain and that are visible in its interface: answering a question about your emails, files or schedule, preparing an email draft, creating an event or a document. The agent can only use a reviewed list of Google actions. Every action that creates or modifies something in your Google account (draft, event, file, document) is only carried out after You have confirmed the exact account, destination and content. Google data is read when You make a request; Ember does not read it in the background and does not build a copy of your mailbox, your Drive or your calendar.

4.5.3 Who receives Google data

We do not sell Google data. We do not share it with any third party, except the following subcontractors, only as necessary to provide the feature You requested:

• Composio (United States): technical connector that holds your Google authorization and relays our requests to Google APIs on your behalf.
• The generative artificial intelligence and routing providers listed in Article 4: the content that the Second Brain read (for example the text of an email or a file) is sent to them so they can write the answer that You asked for.
• Our hosting and database providers listed in Article 4, which store the conversation as described below.

We may also disclose Google data if the law requires it, to investigate a security issue or abuse, or with your explicit prior consent in the event of a merger or acquisition.

4.5.4 Limited Use commitments

Our use of Google user data complies with the Limited Use requirements of the Google API Services User Data Policy. In particular:

• We only use Google data to provide or improve the user-facing features of the Second Brain that are visible in its interface.
• We do not use Google data, nor any content obtained through Google APIs, to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models.
• We do not sell Google data and do not transfer it to advertising platforms, data brokers or other information resellers.
• We do not use Google data to serve advertising, including personalized, retargeted or interest-based advertising, nor for credit or lending decisions.
• Our team does not read Google data, except with your explicit agreement to view specific messages, files or other data, when necessary for security purposes (for example investigating a bug or abuse), when required by applicable law, or when the data is aggregated and used for internal operations in accordance with applicable law.

4.5.5 Storage, protection and retention

Ember does not keep a separate copy of your Gmail, Drive or Calendar data. The content returned by Google for a request (limited in size) is placed in the conversation in which You made the request, and is stored with that conversation in our database hosted in the European Union, as a technical state of the conversation, for as long as the conversation exists. The long-term memory of the Second Brain is built from the exchanges in your conversations (your messages and Ember’s replies, which may summarize Google data You asked for), never from the raw results returned by Google. Google data is protected as described in Article 7: encryption in transit, access limited to those whose duties require it, separation of environments. Secret links and authorization credentials returned by Google are removed from results before they are transmitted to the model. Authorization tokens are held by Composio and are never shown to You or to the model.

4.5.6 Disconnection and deletion

You can disconnect your Google account at any time from the Second Brain settings (Integrations, then Disconnect). Disconnection immediately blocks any new access to your account, deletes the connection at Composio and deletes the connection records kept by Ember. You can also revoke Ember's access from your Google account permissions page (https://myaccount.google.com/permissions). Deleting a conversation deletes the Google content it contains. Deleting your Ember account disconnects all your connected applications, including Google, and deletes your conversations and data as described in Article 10. You can also contact us at support@ember.do to request the deletion of your data.

Right of access

You can obtain confirmation that Personal Data concerning You is or is not being processed and, when it is, receive a copy of it, as well as information on the main characteristics of the processing (purposes, categories of Data, recipients, retention period).

Right to rectification

You may request correction or update of inaccurate or incomplete Data concerning You.

Right to erasure

You may request erasure of all or part of Your Personal Data, in the cases provided for by the GDPR.

Right to restriction

You may request restriction of the processing of Your Data in certain situations (contesting accuracy, unlawful processing, etc.).

Right to object

You may object, for reasons relating to Your particular situation, to processing based on Our legitimate interest.

Right to portability

You may receive the Personal Data that You have provided to Us, in a structured, commonly used and machine-readable format, or request their transmission to another data controller when technically feasible.

1. Total and irreversible deletion of Your Data

Account deletion results in the immediate and irreversible deletion of: Your identification information (email, profile), Your content and data entered on the Platform, Your settings and preferences, Your internal histories related to the use of the service, Your communications with support related to Your use of the Platform.

2. Retention limited to legal obligations

All Personal Data and content that You have entered on the Platform are permanently deleted when Your account is deleted. We only retain data strictly necessary to comply with Our legal obligations, including: billing data (retained for 10 years), data necessary for managing any litigation. This data is isolated, secured and not used for other purposes. No other Personal Data is retained after account deletion.

3. Immediate effects

Deleting Your account: immediately terminates Your access to the Platform, cannot be canceled or reversed.

11.1 Trackers used on the Website

When You browse the Website, We only use:

• 1. Cookies necessary for Website operationThey allow to: maintain your session, remember your language preferences, ensure the general security of the Website. These trackers are essential and do not require your consent.
• 2. Cookies intended to improve Website performanceThey optimize loading, stability and page display. They do not allow tracking your navigation outside the Website.
• 3. Website usage analysis with consentWith Your consent, We use Google Analytics, Ember internal measurement, and PostHog to understand pages and sections viewed, general interactions, active time, and entry into the Platform. This data is used only to improve the Website and product. It is not used for advertising.

11.2 Trackers used on the Platform

When You are connected to the Platform, We use essential technical cookies and, with Your consent, product usage measurement trackers.

• 1. Strictly necessary cookiesThese cookies are essential to ensure the Platform operates. They allow in particular to: maintain your user session, remember certain preferences (such as your language), ensure security and control access to features. These cookies do not require your consent as they are essential to the use of the Platform.
• 2. Platform usage measurement with consentWith Your consent, PostHog links usage events to Your account to understand journeys, active time, technical blockers, and abandonment. Session replay may be enabled in Second Brain, Lead Intelligence, and Deck Studio. Form fields, conversations, documents, prospect data, and slide content are masked or excluded. You can change Your choice at any time using the cookie settings button.

11.3 No advertising or tracking cookies

We do not use any cookies intended to: display personalized advertising, track your activity on other sites, establish a commercial profile.