Draft for launch — last updated July 7, 2026. Please have counsel review before going live.
Data Processing Addendum
This summary describes how Emberel processes personal data on your behalf. Business customers who need a signed DPA can request one at [email protected].
Roles
For your account data you are the controller and Emberel is the processor, processing personal data only to provide the service and per your instructions.
Subprocessors
- Cloudflare — hosting, D1 database, R2 storage, analytics.
- Stripe — payment processing.
- Twilio — SMS delivery.
- Google — calendar/tasks sync (only when you connect it).
Security
Encryption in transit and at rest, least-privilege access, and per-user row-level data isolation. Sensitive tokens are field-encrypted.
Data subject rights
We support access, export, correction, and deletion. Account holders can self-serve export and deletion from settings.
International transfers
Data is processed on Cloudflare’s global network with appropriate safeguards for cross-border transfers.