Providers that process data for us
Each of these handles personal information on Ember's behalf, under contract, only to provide the service described.
| Provider | What they do |
|---|---|
| Cloudflare | Effectively all our infrastructure — compute, storage, databases, CDN, DNS, sign-in email delivery, domain registration, and the AI Gateway that routes model traffic. Your site content and account data live here. |
| Stripe | Payments, subscriptions, invoices. Holds your card details; we never see them. |
| PostHog | Product analytics, session replay, error tracking. |
| Advertising measurement Google Ads, OpenAI Ads | Attributes visits, registrations, and paid subscriptions to Ember campaigns. While their production measurement tags are enabled, these services receive page and conversion events and subscription value and currency. They also receive campaign parameters and a Google or OpenAI ad-click identifier when a visit comes from an Ember ad. They do not receive your prompts, site content, or payment-card details for this purpose. |
| AI model providers DeepSeek, Anthropic, OpenAI, Google, xAI (SpaceXAI), Cerebras, Cloudflare Workers AI | Generate the responses and site content you ask for, reached through Cloudflare AI Gateway. Your prompts and the relevant parts of your site are sent to them — so don't paste secrets or other people's sensitive information into the chat. |
| Firecrawl | Fetches and reads web pages when you ask the agent to research or import. |
| ImageGPT | Generates images from the prompt you give. |
Sources we read on your behalf
These are not processors — we don't hand them your information. When you ask Ember to import from a source, we send only your query and read back what is already public:
- Google Places — a business name or address you gave us, to fetch that listing's public details and photos.
- Instagram — a handle you gave us, to fetch that profile's public posts and bio.
- Any URL you ask the agent to read, fetched through Firecrawl above.
Google is separately our sign-in provider, if you choose Google sign-in.
Changes to this list
We update this page when a provider is added, removed, or changes what it does for us, and revise the date at the top. If a change is material to how your information is handled, we'll give notice on the same terms as a change to the Privacy Policy itself.
We do not sell your personal information or use your prompts, site content, or account data for cross-context behavioural advertising. Google Ads and OpenAI Ads receive the limited production advertising-measurement data described above so we can attribute and measure our own campaigns; an ad-click identifier is present only when a visit comes from an Ember ad.