Privacy Policy

This Privacy Policy describes how Emotos, Inc. ("Emotos," "we," "our," or "us") collects, uses, and shares information about you when you use our platform, APIs, CLI tools, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and being transparent about our data practices.

We collect information in the following ways:

Account Information — When you create an account, we collect your name, email address, and password. We may also collect your organization name and billing information if you subscribe to a paid plan.

Usage Data — We automatically collect certain technical information about your use of the Services, including IP addresses, browser types, operating systems, referring URLs, pages visited, and time spent on pages. This data is used to improve the Services and is not linked to your identity unless necessary for security purposes.

Agent & Integration Data — When you register AI agents or connect integrations, we collect configuration data, policy definitions, and metadata related to those agents. We also collect audit logs of agent activity as required by our security and compliance features.

Communications — If you contact us via email, support channels, or other means, we collect the content of those communications to assist you and improve our Services.

We use the information we collect for the following purposes:

• Providing and maintaining the Services, including processing transactions and sending technical notices
• Personalizing your experience and delivering relevant content
• Monitoring, analyzing, and improving the Services, including detecting and preventing fraud or abuse
• Enforcing our Terms of Service and security policies
• Sending you communications related to your account, updates, and promotional offers (where permitted by law)
• Complying with legal obligations and responding to lawful requests
• Generating anonymized and aggregated analytics data to understand how the Services are used

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers — We may share information with third-party vendors and service providers that perform services on our behalf, such as cloud hosting, payment processing, and analytics. These providers are bound by confidentiality agreements and may only use your information to perform their designated services.

Legal Requirements — We may disclose your information if required by law, regulation, or legal process, such as a court order or government request.

Business Transfers — If Emotos is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

With Your Consent — We may share your information with third parties when you have given us explicit consent to do so.

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it. These measures include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Role-based access controls and principle of least privilege for internal systems
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• Cryptographically signed audit logs for all agent activity

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee that your information will be completely secure at all times. In the event of a security breach, we will notify affected users in accordance with applicable law.

We retain your personal information for as long as necessary to provide the Services and comply with legal obligations. Specific retention periods include:

• Account data: Retained for the duration of your account plus 30 days after deletion
• Audit logs: Retained according to your plan (30 days for Free, 90 days for Pro, 365 days for Business)
• Usage analytics: Retained in anonymized form for up to 24 months
• Support communications: Retained for up to 3 years

When your data is no longer needed, we securely delete or anonymize it in accordance with our internal data lifecycle policies.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request that we correct any inaccurate personal information
• Deletion — Request the deletion of your personal information, subject to certain legal exceptions
• Portability — Request your data in a structured, machine-readable format
• Opt-out — Opt out of marketing communications at any time by clicking "Unsubscribe" or contacting us

To exercise any of these rights, please contact us at privacy@emotos.ai. We will respond to your request within 30 days. If you are located in the European Union, you may also have the right to lodge a complaint with your local data protection authority.

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. The types of cookies we use include:

Essential Cookies — Required for the Services to function. These cannot be disabled.

Analytics Cookies — Help us understand how visitors interact with the Services. The data collected is anonymized and aggregated.

Preference Cookies — Remember your settings and preferences to provide a personalized experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services. For more details, see our Cookie Policy linked in the footer.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child under 18, please contact us immediately at privacy@emotos.ai so that we can delete that information.

Emotos is based in the United States, and our Services are operated from servers located in the U.S. If you access the Services from outside the United States, your information may be transferred to and processed in the United States.

For users in the European Economic Area (EEA), we ensure that such transfers are carried out in accordance with applicable data protection laws, including through the use of Standard Contractual Clauses where required.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify you of material changes via email or in-app notification.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Emotos, Inc. privacy@emotos.ai

We are committed to resolving any privacy-related concerns promptly and transparently.