Privacy Notice

Emma Agent is operated by M.A. GUARDADO LLC. For the personal data described in this notice, M.A. GUARDADO LLC is the data controller. Contact: dbc.miguel@gmail.com.

Account data — name, email and login credentials — to create and secure your account (legal basis: performance of the contract).

Content you provide — website pages you ask us to read, documents you upload, typed questions and answers, and your assistant’s configuration — to build, train and run your assistant (legal basis: performance of the contract).

Chat conversations — questions visitors ask your assistant and the answers given — to provide the service and let you review performance (legal basis: performance of the contract and legitimate interests).

Usage and technical data — IP address, device and browser identifiers, and logs — for security, fraud prevention and product improvement (legal basis: legitimate interests).

Support messages — messages you send through the contact form, with your name and email — to answer you (legal basis: legitimate interests).

Payment data is collected and processed by Paddle (our Merchant of Record) for the sale, subscription management, tax compliance and invoicing; we do not store your card details.

Service providers that help us run Emma Agent: cloud hosting and database, and AI processing providers that generate your assistant’s answers. Paddle, as Merchant of Record, for payments, subscriptions, tax and invoicing. Professional advisers (legal, accounting) where needed, and authorities where the law requires it.

We keep your data while your account is active. When data is no longer needed — for example after you delete your account — we delete or anonymise it within a reasonable period, unless the law requires us to keep it longer.

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

We use only essential storage: session tokens to keep you signed in and a small preference (your language choice) stored in your browser. We do not use advertising or marketing cookies. You can clear these in your browser settings, but sign-in will stop working.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. California residents have the rights granted by the CCPA/CPRA, including the right to know, delete and correct, and the right not to be discriminated against; we do not sell or share your personal data for cross-context advertising. To exercise any right, email dbc.miguel@gmail.com — we respond within one month.

We are based in the United States and our service providers may process data in other countries. Where data leaves the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

If we change this notice we will update the date above. Questions or requests: dbc.miguel@gmail.com — M.A. GUARDADO LLC.