Privacy · Emersa Labs

Who we are

Emersa Ltd, trading as Emersa Labs, is the controller of any personal data this site handles. Company No. 15179283, registered in England and Wales. Registered office: Unit 213, 566 Cable Street, London E1W 3HB, United Kingdom.

Questions about this policy go to privacy@emersa.io.

The short version

No cookies are set, by us or by anyone else.
No analytics, no advertising, no tracking pixels and no third-party scripts run on this site.
The contact form sends your message to us by email. That is the only time this site handles personal data.
We never store your IP address.

What stays in your browser

The site keeps a few small things in your browser's own storage. They never leave your device and we cannot read them:

em-theme (local storage): whether you chose the dark or the light theme.
em-tour (local storage): how far you got on the guided tour, so you can pick it up where you left off.
em-colo (session storage): the three-letter code of the Cloudflare data centre that served you, kept for the readouts on the development pages. It is forgotten when you close the tab.

Clearing your browser's site data for emersa.io removes them.

The contact form

When you write to us through the contact form we receive your name, your email address, the company you name if any, the topic you pick and your message. We use them to answer you and for nothing else. Our lawful basis is our legitimate interest in replying to people who contact us and, where you ask about a product, the steps needed before a contract.

The form is handled by a small program on Cloudflare's network and delivered to our inbox by Postmark. Both act as our processors:

Cloudflare, Inc. hosts the site and runs the form handler. The handler keeps a daily count of messages and a short-lived rate limit so the form cannot be abused; neither records who you are.
Postmark (ActiveCampaign, LLC) delivers the email. Postmark is based in the United States; the transfer is covered by the safeguards UK law requires for transfers outside the UK, which Postmark sets out in its data processing agreement.

We keep your message for as long as we need it to deal with your enquiry, and delete it when the conversation is over or when you ask us to.

Hosting and logs

Cloudflare serves every page from its network. To do that it processes your IP address for the duration of the request, as any host must, under its own security measures. We keep no visitor logs ourselves: our own metrics count requests by route and outcome only, never by person.

Voice features: not yet enabled

This site is designed to be guided by a synthetic being, Emily. Today she follows a script: nothing you do while she talks is recorded or sent anywhere. A later version of the site will let you talk with her. When that arrives it will work like this, and this policy will be updated first:

Microphone. Used only after you tap Start talking, only while a conversation is open, and switched off the moment you end it.
Memory. What you say and what Emily replies, kept so she can pick the conversation up next time. Nothing is stored before you give consent.
Consent. A single clear step before the microphone or memory is used, with a text-only alternative that stores nothing.
What you remember about me, and Forget me. A panel that shows everything held about you and a button that erases all of it in one go.

None of this is switched on today.

Your rights

Under the UK General Data Protection Regulation you can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable form. Write to privacy@emersa.io and we will reply within one month.

If you are not happy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Children

This site is not aimed at children and we do not knowingly collect personal data from them.

Changes

We update this page when the site changes what it collects, and the date at the top moves with it. The voice features described above will not be switched on before this policy says so.