We are responsible for account, contact and website information. When a business uploads information about its customers, we process it on that business’s behalf. Its privacy notice also applies.
Information we collect
- Account and contact details: your name, email, company, sign-in information and messages you send us.
- Workspace information: uploaded customer and activity records, prompts, conversations and results. These can include contact details, purchases, preferences and customer profiles.
- Usage information: pages visited, interactions, device and browser details, IP addresses and diagnostic information.
- Connected store information (Launch Studio): when you connect a Shopify store, we read its products (descriptions, collections, variant options such as size, SKUs and Shopify's product category), customer records without names or contact details, each customer's lifetime order count and lifetime spend as Shopify reports them, whether they are subscribed to your email marketing (not their email address), and the order history Shopify makes available, with line items, discounts (how many codes and what kind, never the code itself), refunds, sales channel and order tags. If you grant the optional returns permission, we also read returned quantities and the reason chosen, never return notes. We do not request customer names, email addresses, phone numbers, addresses or customer tags.
- Order history you upload (Launch Studio): you can add older orders from your own Shopify exports. Your browser reads the files and sends us only order and customer IDs, dates, line items (name, SKU, quantity, price), amounts and discounts, payment and fulfilment status, cancellation dates, the sales channel and order tags. Names, email addresses, postal addresses and phone numbers stay in your browser. We do not receive or keep the files; the uploaded orders are saved with your imported store data.
Google sign-in
If you sign in with Google, we receive your Google account identifier, name, email address and profile picture. We use these details to create and manage your Emli account and authenticate you. Supabase stores these account details and handles authentication. This does not give us your Google password or access to Gmail, Drive, calendars or contacts.
How we use information
We use information to provide Emli, answer enquiries, support customers, improve the service, prevent misuse and meet legal obligations. Workspace information helps us build customer profiles, estimate responses and recommend actions. Our AI providers process prompts and relevant customer or business information to produce these results.
When you analyse a product in Launch Studio, we turn each customer’s orders into a short behaviour summary: counts, timing, categories, products and spend bands. These summaries never include names, contact details or identifiers. Before anything is sent, we check every summary and refuse to proceed if it looks like it contains contact details or identifiers. Our AI provider, DeepInfra, embeds these summaries and estimates how likely groups of similar customers are to buy. The estimates are not checked against your store’s results unless we say so. To respond faster, our AI provider may briefly keep parts of recent requests in its own memory (short-lived caching for performance). It does not store them on disk, use them for training or share them.
Email-marketing status is used only to count how many likely buyers you can reach by email and to label your audience export. It is never sent to our AI provider. Order tags are kept only as a record of your store data and are never sent to our AI provider either.
Where UK or European data protection law applies, we rely on contract for account and service delivery, legitimate interests for support, security and service improvement, and legal obligations where applicable.
Cookies and analytics
We use cookies to keep you signed in, and PostHog to understand usage and investigate errors. PostHog uses cookies and similar technologies and records browsing sessions, including clicks, scrolling and visible page content. Form inputs are masked; ordinary page text and images, including displayed account or customer information, are not. Diagnostics can include browser logs and network request URLs.
Browser cookie controls may affect sign-in and do not necessarily stop analytics or session recording.
Storage and security
We and our providers store and process information in the United States, Europe and other countries where we operate. Protections can differ by country. Contact us for information about the arrangements applicable to your data.
We use access controls, authentication and encrypted connections to protect information. No service can guarantee absolute security.
Retention and deletion
We keep information according to the purpose it serves, our relationship with you, and legal, accounting and security needs. Requesting workspace deletion starts removal of its customer content. Your account and some operational records remain. Contact us to request account or personal information deletion. Some records may remain where needed for legal obligations, security or disputes.
Your Shopify connection, imported store data, saved launch briefs and analysis results are kept with your account so you can return after signing out. Shopify credentials and unfinished import progress are encrypted on the server. Refreshing keeps the previous import available until the new import completes. Disconnecting removes the connection, imported data, saved briefs and reports. Spending records for analyses (amounts, model, time and account, with no store or customer data) are kept for accounting.
Your rights
Depending on your location, you may request access, correction, deletion or a copy of your information, object to or restrict its use, and withdraw consent where processing relies on it. You may also complain to your local data protection authority. We may need to verify your identity. For information supplied by a business you buy from, contact that business first.
Send requests to hello@get-emli.com or write to Emli, Inc., 251 Little Falls Drive, Wilmington, DE 19808, USA.
Emli is intended for business users, not children. We may update this policy; the date above identifies the latest version.