emberel
Launch status: app, email, AI, voice, photo/OCR, Google sync, billing, and MCP are ready. SMS is waiting on carrier A2P approval.
Effective July 15, 2026 · Emberel is operated by Sounds & Sirens LLC, Mount Vernon, NY 10552, United States · [email protected]

Data Processing Addendum

This page is a plain-language summary, not a signed data processing addendum. Business customers who need a negotiated or signed DPA may contact [email protected].

Roles

For ordinary consumer accounts, Emberel generally determines how account and service data is handled and acts as the controller or business under applicable privacy law. If a business customer submits personal data for Emberel to process solely on that customer's documented instructions, the business may act as controller and Emberel as processor for that data, as defined in a signed agreement.

Processing purpose and duration

Emberel processes data to provide capture, storage, search, reminder delivery, AI parsing, transcription, OCR, synchronization, billing, support, and security features. Processing continues for the account term and applicable deletion and retention periods described in the Privacy Policy.

Security measures

Measures include TLS in transit, provider-managed encryption at rest, salted password hashing, field-level encryption for sensitive integration tokens, least-privilege administrative access, application-enforced per-user data scoping, authentication and request controls, logging, and documented retention and deletion routines.

Subprocessors

  • Cloudflare: application hosting, D1 database, R2 storage, email, security, and Workers AI.
  • Stripe: payment and subscription processing.
  • Twilio: SMS and WhatsApp delivery when enabled.
  • Google/Firebase: optional Google sign-in, Calendar and Tasks synchronization, and mobile push delivery.

Requests, deletion, and incidents

Emberel supports access, correction, export, deletion, and integration disconnection. For processor data governed by a signed DPA, Emberel will reasonably assist the customer with verified data-subject requests, security incidents, deletion, and legally required assessments according to that agreement.

International processing

Service providers may process data in the United States and other countries where they operate. Any required transfer mechanism and additional safeguards should be stated in the signed DPA applicable to the customer.

Contact

Sounds & Sirens LLC
Mount Vernon, NY 10552, United States
[email protected]