Privacy Policy
Last Updated: 2026-07-01
1. Data Controller
Andromeda Inc. (trading as EMBER Restaurant Revenue Optimization)
Email: privacy@ember-revival.com
2. Data We Collect
Onboarding Information
- Full name (operator)
- Restaurant/concept name
- City/State/Location
- WhatsApp Business number (with country code)
- Email address
Business Data (for service delivery)
- Google Business Profile access and analytics
- Social media account access (Meta Business Manager, Instagram, Facebook)
- Website CMS login credentials
- Hosting/domain registrar access
- Menu, pricing, hours, photos
- Customer review data (Google, TripAdvisor, Yelp)
Usage & Analytics
- Website traffic data (via self-hosted Umami — no Google Analytics)
- Social media engagement metrics
- Review response rates and sentiment
- WhatsApp message logs (for audit trail and quality)
- Service performance metrics (rankings, calls, direction requests)
Payment Data
Transaction records via Flutterwave (amount, date, currency, reference). Flutterwave collects card/bank details directly — we do not see or store full payment details.
3. How We Use Your Data
We use your data for: service delivery (GBP, SEO, reviews, social, WhatsApp, reports); communication (onboarding, audit, monthly reports); payment processing; improving our agent workflows and service quality (anonymized, aggregated); legal compliance (tax, anti-fraud). We do not sell your data. We do not use it for advertising unrelated to your service.
4. Who We Share Data With
Flutterwave (payment processing); Google (Business Profile, Maps, Search Console); Meta (Facebook, Instagram, WhatsApp Business API); TripAdvisor/Yelp (review management); Umami self-hosted (analytics - no data leaves our server); n8n self-hosted (automation - no data leaves our server); Baileys self-hosted (WhatsApp automation - runs on our VPS); Professional advisors (accountant, legal) under confidentiality agreements. We do not sell your data.
5. Data Retention
Onboarding info: duration of contract + 6 years. Credentials: deleted within 30 days of termination. WhatsApp/message logs: 12 months rolling. Analytics: 24 months rolling. Payment records: 6 years (tax compliance). Audit reports & deliverables: indefinite (yours to keep).
6. Your Rights (Global Baseline)
You may exercise: Access, Correction, Deletion, Restriction, Portability, Objection, Withdraw Consent. Email privacy@ember-revival.com. We respond within 30 days.
7. Children
The Service is not directed to individuals under 13 (globally) or under 16 (UK/EU). We do not knowingly collect data from children.
8. International Transfers
Our VPS is located in [your VPS region]. Where subprocessors are outside your jurisdiction (e.g., Flutterwave in Nigeria, Meta in US), we rely on Standard Contractual Clauses (EU/UK), adequacy decisions where applicable, or your explicit consent via these Terms.
9. Cookies
See the separate Cookie Policy. We use only essential and analytics cookies (self-hosted Umami — no third-party tracking cookies).
10. Contact
Data Protection Officer: privacy@ember-revival.com
Andromeda Inc. Email: privacy@ember-revival.com
For UK/EU users: You may also lodge a complaint with the ICO (UK) or your national DPA (EU).