Privacy Policy
What Ema Paper keeps about you, why, who else sees it, and how to have it removed.
1. What we collect
Your account: the Google account's identifier, email address, name and picture, as Google gives them at sign-in.
Your content: the files you upload, the markdown and figure crops parsed from them, the documents, notes and workspace files you keep, your conversations with the agent, and the memories it keeps of you.
Your usage: for every model call, the model, the token counts and the credits it cost, kept with the parse or conversation it belongs to, and the record of each credit reserved and spent.
Your subscription: its plan, state and period, as the payment service reports them. Card and bank details are entered at Dodo Payments and never reach us.
Technical records: one session cookie, and server logs with the time, route and outcome of requests. Prompts, documents and model answers are never written to a log.
2. What we use it for
To run the service: parse, store and show your documents, run the agent, meter your credits and bill a paid plan. To keep the service safe: spot abuse and resolve failures. To answer you when you write to us. Nothing else: no advertising, no profiling, no sale of data.
3. Who else receives it
The model providers: the pages, text and messages you parse or discuss are sent to the provider of the model that runs, through the operator's own Kano Proxy account, under that provider's terms for API use.
Dodo Payments, through Kano Pay, for checkout, invoices, tax and the customer portal: your email address and the subscription, never your documents.
Google, for sign-in.
No one else, except where the law requires it.
4. How long we keep it
Your results, documents, notes and conversations stay as long as your account exists, on every plan. The source file of a parse made through the API or the connector is deleted when its job ends; a document in your library keeps its original, so it can be parsed again. Usage and credit records are kept as the billing record of the account.
To delete your account and everything in it, write to the support address below. What you delete also leaves our backups as those rotate.
5. Cookies
One cookie, for the session that keeps you signed in. Your theme and language choices are stored in your browser.
6. Security
Transport is encrypted. API keys are stored hashed. Each user's files live in their own directory, and the agent's shell runs in an isolated virtual machine over that user's files only. Prompts and completions are kept out of logs by design.
7. Your rights
You can see and download what you keep here at any time, and ask us to correct or delete it. Where the law gives you further rights over your data, you have them here too; write to the support address to exercise any of them.
8. Changes to this policy
We may revise this policy. The date at the top says when it last changed.