Privacy Policy

EmmanuelReach AI (“EmmanuelReach”, “the platform”, “we”, “us”) is an artificial intelligence advertising, marketing, communications and growth platform operated by Emmanuel Global Solutions SARL.

This policy explains what personal data the platform handles, why it handles it, who it is shared with, how long it is kept, and how you can exercise your rights over it. It applies to the EmmanuelReach AI website, web application and connected integrations.

EmmanuelReach is a platform businesses use to run their own marketing, which means two distinct relationships exist at the same time. Which one applies determines who is responsible for a given piece of data.

• Your account data. Your name, email address, organization membership, billing records and use of the platform. For this data EmmanuelReach is the controller: we determine why it is collected and how it is used, and this policy describes that directly.
• Contact and audience data you upload. The personal data of people your business markets to or communicates with. For this data your organization is the controller and EmmanuelReach acts as a processor, handling it on your instructions. If you upload contacts, you are responsible for having a lawful basis to hold and contact them, and for honouring their rights. The platform provides tools — consent records, suppression lists, export and deletion — but cannot supply a lawful basis on your behalf.

The platform collects the following categories of information.

• Account information. Name, email address, password credentials (stored only as a cryptographic hash by our authentication provider), profile details, language preference and the organization you belong to.
• Business information. Company name, sector, location, website, business description, brand assets and any details you enter when creating or scanning a business profile.
• Contact data you upload. Names, email addresses, phone numbers, tags, consent status and any custom fields in the audiences you import or create.
• Campaign content. Email, SMS and WhatsApp message content, templates, subject lines, schedules, targeting rules and the results of sending them — delivery, bounce, open, click, unsubscribe and complaint events.
• Support correspondence. Messages you send us and our replies.

Where you connect a third-party account to EmmanuelReach, the platform receives information from that provider so it can perform the tasks you ask of it.

• Connected social media and business accounts. Account identifiers, page or profile names, and the permissions you granted.
• OAuth permissions. Where you authorise EmmanuelReach through a provider’s consent screen, we receive an access token scoped to the permissions shown on that screen. We request the narrowest scopes that allow the feature you enabled to function, and we do not use a token for a purpose outside the feature you connected it for.
• Advertising account information. Advertising account identifiers, campaign structures, budgets, creatives and performance metrics for accounts you connect.
• Analytics information. Aggregate traffic, audience and conversion measurements from analytics properties you connect.

Access tokens are held as credentials, not as ordinary profile fields, and are never displayed back to you in full. You can disconnect an integration at any time; disconnecting revokes the platform’s further use of that token.

The platform uses artificial intelligence models to draft copy, generate images and video, analyse business information and produce recommendations. To do this, the prompts and the business or campaign context you supply are sent to the AI provider serving that request.

Generated content is stored in your workspace so you can review, edit, approve or discard it. AI output can be inaccurate and should be reviewed before publication — see our Terms of Service.

Subscription plans, credit balances, invoices and transaction records are held by the platform. Card and payment instrument details are handled by our payment provider and are not stored on EmmanuelReach systems. We receive confirmation of a payment’s outcome and the limited identifiers needed to reconcile it to your account.

The platform sets cookies and equivalent browser storage that are necessary for it to work: keeping you signed in, maintaining your session, remembering your language and interface preferences, and protecting against abuse.

We also record technical information generated automatically when you use the service — IP address, browser and device type, pages requested, timestamps and error diagnostics — for security, fraud prevention, rate limiting and debugging.

• To provide, operate and maintain the platform and your account.
• To carry out the tasks you initiate: generating content, running campaigns, sending messages, analysing a business, managing advertising.
• To process payments, manage subscriptions and meter credit usage.
• To provide support and respond to your requests.
• To secure the service — authentication, abuse detection, rate limiting and investigating misuse.
• To improve reliability and performance through aggregated, operational analysis.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal data. We do not use the contact data you upload to market our own services to your contacts.

EmmanuelReach relies on third-party providers to deliver parts of the service. Each receives only the data needed for its function, and each processes it on our instructions or under its own terms as an independent controller where that provider requires it.

• Meta (Facebook, Instagram, WhatsApp). Where you connect a Meta account or use WhatsApp messaging, message content, recipient phone numbers, message templates, delivery status and the account identifiers you connected are exchanged with Meta so the message can be delivered and its status reported. Data obtained through Meta integrations is used only to operate the feature you connected, and is deleted on request — see our Data Deletion page.
• Google. Authentication (Google sign-in), infrastructure and, where you connect them, advertising, analytics, business profile and mapping services. Sign-in shares your name, email address and profile image with the platform.
• TikTok. Where you connect a TikTok advertising or business account, account identifiers, campaign data and performance metrics are exchanged so campaigns can be created, managed and reported.
• Brevo. Email and SMS delivery. Recipient addresses, phone numbers, message content and delivery events are processed to send your campaigns and report their outcome.
• HeyGen. Avatar and video generation. Scripts, prompts and generation parameters you submit are processed to render video.
• AI providers. Anthropic, Google and other model providers process the prompts and context needed to produce the output you requested.
• Hosting, storage and payments. Cloud hosting, database, file storage and payment processing providers that operate the underlying infrastructure.

Access to the platform requires authentication, and permissions are enforced on the server for every request rather than only in the interface. Data is encrypted in transit. Credentials and access tokens are held in a dedicated secret store rather than alongside ordinary application records, and are never written to logs.

No system can be guaranteed completely secure. If a breach affecting your personal data occurs, we will notify affected users and any regulator to whom notification is required, as the law obliges.

• Account data is retained while your account is active.
• Contact and campaign data is retained until you delete it or close your account.
• Billing and transaction records are retained for the period required by applicable accounting and tax law, even after account closure.
• Security and audit logs are retained for a limited period for fraud prevention and incident investigation.

When a retention period ends, data is deleted or irreversibly anonymised.

Subject to the law applicable to you, you may have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to certain processing, to receive your data in a portable format, and to withdraw consent where processing relies on it.

To exercise any of these rights, contact cherufusche@gmail.com. We will ask for enough information to confirm your identity before acting, and we will never ask you for your password.

If you are a contact of a business using EmmanuelReach rather than an account holder, your request is usually best directed to that business, which controls your data. Tell us if you cannot identify them and we will help route your request.

You can request deletion of your account and the data associated with it, including data obtained through connected integrations. Full instructions, including the route for users who connected through Facebook or another Meta service, are on our Data Deletion page.

EmmanuelReach and its service providers operate infrastructure in multiple countries, so your data may be processed outside the country where you live. Where data is transferred across borders, we rely on the transfer mechanisms available under applicable law and on the contractual commitments of the providers involved.

The platform is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the platform changes or the law requires. The date at the top records the latest revision. Where a change materially affects how your personal data is handled, we will give notice through the platform or by email before it takes effect.

EmmanuelReach AI is operated by Emmanuel Global Solutions SARL. For any question about this policy, or to exercise a right described in it, contact cherufusche@gmail.com.