PLACEHOLDER — AI-DRAFTED, NOT ATTORNEY REVIEWED. Replace with lawyer-reviewed wording before public launch or onboarding the first paid non-Eminence tenant. Update with actual sub-processor list and retention windows once finalized.
Privacy Policy
This Privacy Policy describes how Eminence Services LLC ("we", "us") handles personal information in connection with Service Agent OS (the "Service").
1. Information We Collect
Account information. Name, email, phone, password hash, role, profile photo if provided, and the tenant organization you belong to.
Customer Data. Information you and your team enter into the Service — contacts, projects, photos, notes, estimates, invoices, payments, communications. Customer Data may include personal information about your clients, vendors, and employees.
Usage data. Pages viewed, actions taken, IP address, user agent, device type, timestamps. Used to operate the Service, debug, secure it, and improve it.
Integration data. When you connect Google Drive, Calendar, Gmail, or similar, we receive only the scopes you authorize and use them only as documented in the integration's UI.
2. How We Use Information
- Provide, maintain, and improve the Service.
- Authenticate users and protect against fraud and abuse.
- Send transactional and service-related communications.
- Comply with legal obligations.
- Generate de-identified, aggregated metrics for product
analytics and AI quality measurement.
- Power AI features (see AI Disclosure).
We do not sell personal information. We do not use Customer Data to train third-party AI models without your prior written consent.
3. Sub-processors
We use the following categories of sub-processors and may add or change them on notice: hosting (Vercel), database (Neon), transactional email (Resend), file storage (Vercel Blob), AI providers (Anthropic), error monitoring, payment processing. A current list is available on request.
4. Sharing
We share information with (a) sub-processors under written agreements, (b) other users in your tenant as needed for the Service to function, (c) authorities when legally required, and (d) acquirers in a corporate transaction subject to equivalent protections.
5. Retention
We retain Customer Data for the duration of your subscription plus 30 days for export, after which we may delete it. Backups may persist for up to 90 days. Audit logs and security records may be retained longer where required for legal or security purposes.
6. Your Choices
You can update account information from Settings, export your data, and request deletion. Tenant administrators control role and access for their team. For requests under GDPR, CCPA, or similar laws, contact us at privacy@eminence.business.
7. Security
We use TLS in transit, encryption at rest where supported by our infrastructure providers, role-based access, and tenant-isolated databases. No system is perfectly secure; we will notify affected parties of a confirmed breach as required by law.
8. Children
The Service is not directed to children under 13 (or 16 where applicable), and we do not knowingly collect their personal information.
9. International Transfers
Information may be processed in the United States and other countries where our sub-processors operate. By using the Service you consent to such transfers.
10. Changes
We may update this Policy. Material changes will be announced and require re-acceptance on next login.
11. Contact
privacy@eminence.business