Privacy Policy

1. Who we are

EMME is an AI-powered business assistant for service businesses (such as barbershops and salons). It answers customer questions and manages bookings on behalf of the business through messaging channels such as Instagram Direct Messages and WhatsApp. This policy explains what data we collect, why, and the rights you have.

EMME is developed and operated by Elian Shehi Vladimir (sole proprietor), Kastriotet, 1029 Tirana, Albania. For any legal or privacy matter, use the contact details in section 7 below.

2. What we collect

• Business data: business name, address, phone, opening hours, services and prices, staff schedules.
• Customer data: name, phone number or messaging identifier, and the content of messages exchanged with the assistant.
• Booking data: appointment times, services booked, and booking status.
• Technical data: message identifiers and delivery status needed to operate the service reliably.

3. How we use it

• To answer customer questions using the business's own services, prices and opening hours.
• To create, change and cancel bookings at the customer's request.
• To show the business its own appointments, customers and conversation history in its dashboard.

We do not sell personal data and we do not share it with third parties for advertising. Message content is processed only to operate the assistant for the business the customer is speaking with.

4. Where data is stored

Data is stored in a hosted PostgreSQL database (Supabase, EU region) protected by row-level security so each business can only access its own records. Access tokens for messaging channels are stored server-side and are never exposed to the browser.

5. Data retention and deletion

Conversation and booking data are kept while the business account is active. A business can request deletion of its account and all associated data at any time, and a customer can ask the business (or us) to delete their personal data. We honor deletion requests within 30 days. Meta users can also remove our app via Instagram's “Apps and websites” settings, which we process through the data deletion callback required by Meta.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us using the details below and we will respond within 30 days.

7. Contact

Questions or deletion requests: contactsh2automation@gmail.com