Privacy Policy

1. About Emitii

Emitii is an AI-powered work assistant and communication platform operated by Gurzu Inc. ("Gurzu", "we", "us"). Emitii lets organizations run their work in one place and connect messaging channels, including WhatsApp, so their teams can receive, manage, and reply to customer conversations, with AI assistance such as suggested replies, summaries, and search.

Emitii is not owned, sponsored, or endorsed by Meta Platforms, Inc. WhatsApp is a trademark of Meta.

2. Our role

Each organization ("workspace") that connects its own WhatsApp Business account controls its customers' data and the purposes it is used for. Gurzu operates the platform, secures the accounts, and processes data on the workspace's behalf to provide the service.

3. Information we collect

• Account / workspace data: names, emails, user and workspace identifiers, authentication data, roles and permissions.
• Channel / Meta connection data: OAuth or system-user access tokens, WhatsApp Business Account (WABA) and phone number identifiers, and the access permissions a workspace grants.
• Customer communications: messages, attachments, and metadata (sender id, timestamps, conversation history) exchanged through connected channels.
• AI interaction data: prompts, drafts, and outputs generated when a workspace uses Emitii's AI features on its own conversations and content.
• Technical / usage data: IP address, device and browser info, log and analytics data used for security and reliability.

4. How we obtain information

From authorized users and workspace administrators; from Meta APIs and webhooks for connected channels; from AI/LLM service providers that return generated content; and automatically through service and security logs.

5. How we use information

To authenticate users; create and manage workspaces; connect and operate messaging channels; deliver, route, and store messages; power AI features (drafting, summarizing, search) for the workspace's own use; detect and prevent abuse; provide support; comply with law; and improve reliability and security.

6. Meta Platform Data

For data received from Meta ("Platform Data"), Gurzu commits that we do not:

• sell Platform Data;
• use it for our own advertising or share it with data brokers;
• use customer messages to train our own or any third party's general-purpose or public AI models.

AI features that process message content do so only to provide the service to the workspace that owns the conversation (for example, drafting a reply that a human then reviews and sends). To power these features we may send content to vetted AI/LLM providers (see Section 7) under contractual confidentiality and no-training terms. Access to Platform Data is limited to authorized workspace users and the service providers necessary to run Emitii.

7. How information is shared

• Within the workspace: with members who have the appropriate role.
• With Meta and connected providers: to deliver messages and operate channels.
• With service providers (sub-processors): infrastructure/hosting, and AI/LLM providers that process content to generate features, all under contractual data-protection and no-training obligations.
• For legal reasons: when required by law or to protect rights and safety.
• In corporate transactions: to a successor entity, subject to this policy.

We do not disclose customer conversations publicly.

8. Data retention

• Access tokens: until they expire, the channel is disconnected, or deletion is requested.
• Webhook delivery records: up to 30 days.
• Operational logs: up to 90 days.
• Security / audit records: up to 12 months.
• Backups: up to 90 days before being overwritten.

Message and workspace content is retained while the workspace is active and deleted per Section 10 on request or account closure.

9. Channel disconnection

A workspace can disconnect a channel at any time. This stops new data requests and revokes or removes stored tokens for that channel. Previously stored data remains subject to the retention periods above unless separately deleted.

10. Data deletion

Users and workspaces may request deletion of their data at https://emitii.com/data-deletion or by emailing info@emitii.com. We may verify identity first. Deletion is normally completed within 30 days, unless a longer period is legally required.

11. Information security

We use authentication, role-based permissions, workspace isolation, encryption of sensitive data in transit and at rest, restricted access tokens, webhook signature verification, and logging. No internet service can guarantee absolute security.

12. International processing

Gurzu and its providers may process data in countries other than yours, using reasonable contractual, technical, and organizational safeguards.

13. Your privacy rights

Subject to law, you may request access, correction, deletion, restriction, objection, a copy of your data, or withdrawal of consent by emailing info@emitii.com.

14. Customer (end-user) requests

If you are a customer of a business that uses Emitii, contact that business directly for data requests. You may also contact us at info@emitii.com and we will coordinate with the workspace administrator.

15. Children

Emitii is not intended for anyone under 13, or the minimum age in your jurisdiction. We do not knowingly create accounts for children.

16. Changes to this policy

We may update this policy and will revise the "Last updated" date above.

17. Contact

Gurzu Inc., info@emitii.com, https://gurzu.com/