E
EMBER by Andromeda
← Back to EMBER

Privacy Policy

Last Updated: 2026-07-01

1. Data Controller

Andromeda (trading as EMBER Restaurant Revenue Optimization)
Email: emberbyandromeda@gmail.com

2. Data We Collect

Onboarding Information

  • Full name (operator)
  • Restaurant/concept name
  • City/State/Location
  • WhatsApp Business number (with country code)
  • Email address

Business Data (for service delivery)

  • Google Business Profile access and analytics
  • Social media account access (Meta Business Manager, Instagram, Facebook)
  • Website CMS login credentials
  • Hosting/domain registrar access
  • Menu, pricing, hours, photos
  • Customer review data (Google, TripAdvisor, Yelp)

Usage & Analytics

  • Social media engagement metrics
  • Review response rates and sentiment
  • WhatsApp message logs (for audit trail and quality)
  • Service performance metrics (rankings, calls, direction requests)

Payment Data

Transaction records via Flutterwave (amount, date, currency, reference). Flutterwave collects card/bank details directly — we do not see or store full payment details.

3. How We Use Your Data

We use your data for: service delivery (GBP, SEO, reviews, social, WhatsApp, reports); communication (onboarding, audit, monthly reports); payment processing; improving our agent workflows and service quality (anonymized, aggregated); legal compliance (tax, anti-fraud). We do not sell your data. We do not use it for advertising unrelated to your service.

4. Who We Share Data With

Flutterwave (payment processing); Google (Business Profile, Maps, Search Console); Meta (Facebook, Instagram, WhatsApp Business API); TripAdvisor/Yelp (review management); n8n self-hosted (automation - no data leaves our server); Baileys self-hosted (WhatsApp automation - runs on our VPS); Professional advisors (accountant, legal) under confidentiality agreements. We do not sell your data.

5. Data Retention

Onboarding info: duration of contract + 6 years. Credentials: deleted within 30 days of termination. WhatsApp/message logs: 12 months rolling. Payment records: 6 years (tax compliance). Audit reports & deliverables: indefinite (yours to keep).

6. Your Rights (Global Baseline)

You may exercise: Access, Correction, Deletion, Restriction, Portability, Objection, Withdraw Consent. Email emberbyandromeda@gmail.com. We respond within 30 days.

7. Children

The Service is not directed to individuals under 13 (globally) or under 16 (UK/EU). We do not knowingly collect data from children.

8. International Transfers

Our VPS is located in Germany (European Union). Where subprocessors are outside your jurisdiction (e.g., Flutterwave in Nigeria, Meta in US), we rely on Standard Contractual Clauses (EU/UK), adequacy decisions where applicable, or your explicit consent via these Terms.

9. Cookies

See the separate Cookie Policy. We currently use only essential cookies required for security (Cloudflare Turnstile, to prevent spam on our contact form). We do not currently use analytics or third-party tracking cookies.

10. Contact

Data Protection Officer: emberbyandromeda@gmail.com
Andromeda Email: emberbyandromeda@gmail.com

For UK/EU users: You may also lodge a complaint with the ICO (UK) or your national DPA (EU).