Privacy Policy

Last updated: July 8, 2026

Cari is a product of Ember Development Studios, LLC(“we”, “us”). This policy explains what we collect, how we use it, and your choices. Questions: support@emberdevstudios.com.

Who this covers

We serve two groups: business owners who create an account to run their AI receptionist, and their customers who interact with that assistant by web chat or text message. This policy applies to both.

Information we collect

  • Account data (owners): name, email, and business profile details you provide.
  • Business content: services, prices, hours, and the FAQ/knowledge you enter to power the assistant.
  • Customer conversation data: messages sent to the assistant, and any name, phone number, or email a customer provides while chatting or texting, plus appointments and leads created from those conversations.
  • Technical data: IP address and basic request metadata, used for security and rate limiting.

How we use it

  • To operate the assistant — answer questions, capture leads, and book appointments on the business’s behalf.
  • To show the business owner their conversations, leads, appointments, and analytics.
  • To process subscription payments and provide support.
  • To secure the service and prevent abuse.

Service providers

We share data only with vendors that help us run the service, under their own security and privacy terms:

  • Supabase — authentication, database, and hosting.
  • Anthropic (Claude) — AI processing of conversation text to generate replies. Conversation content is sent to Anthropic to produce responses.
  • Stripe — subscription billing (we never store full card numbers).
  • Twilio — sending and receiving SMS where the SMS channel is enabled.

We do not sell personal information, and we do not share phone numbers with third parties for their own marketing.

SMS / text messaging

Where a business enables the text channel, customers who message the business’s number are communicating with an AI assistant on that business’s behalf. We collect the phone number and message content to respond, book, and follow up. Standard message & data rates may apply. Reply STOP at any time to opt out of further messages, or HELP for help. Phone numbers collected through the SMS channel are never sold or shared for third-party marketing. If a business separately collects phone numbers through a web form to send outbound or promotional texts, that collection requires express opt-in consent at the point of collection.

Data retention & your choices

  • Owners can edit or delete their business content at any time from the dashboard.
  • To access, export, or delete personal data, contact support@emberdevstudios.com.
  • California (CCPA) residents may request disclosure or deletion and may opt out of “sale” of personal information — we do not sell it.
  • EU/UK (GDPR) residents have rights of access, correction, deletion, and portability; contact us to exercise them.

Security

Access to business data is isolated per tenant and enforced at the database level. We use industry-standard encryption in transit and at rest via our providers.

Changes

We may update this policy; material changes will be reflected in the “Last updated” date above.

See also our Terms of Service. This template should be reviewed by legal counsel before production launch.