Privacy Policy
Last updated: 27 June 2026
1. Who we are
EmberSoul Labs (“we”, “us”, “our”) is a technology company registered in Malaysia. We develop and operate cloud software products including EmberCore ERP (operations platform) and EmberOS (AI marketing platform).
Website: https://embersoullabs.com
Privacy contact: support@embersoullabs.com
2. What this policy covers
This policy explains how we collect, use, store, and protect personal data when you:
- visit our website;
- contact us by email;
- register for or use our products (when available); or
- interact with us as a business customer, user, or partner.
We prepare this policy with reference to Malaysia’s Personal Data Protection Act 2010 (PDPA).
3. Data we collect
Website & contact: name, email address, message content, and technical data such as IP address and browser type when you contact us or browse our site.
EmberOS (AI marketing): account details, workspace and organisation membership, campaign briefs, uploaded video/images/audio, generated copy and creatives, review decisions, export packages, usage and billing metadata, and Client Portal review tokens when agency customers invite their clients.
Business data processed for customers: our B2B products may store personal data that our business customers enter about their own customers (e.g. order recipients, or end-client emails for video review via EmberOS Client Portal). In those cases the business customer is typically the data user; we process that data on their instructions as a service provider.
Technical & diagnostics: device identifiers, crash logs, usage metrics, and security audit logs to keep services reliable and secure.
4. How we use data
- Provide, maintain, and improve our products and website;
- Respond to enquiries and provide support;
- Authenticate users and enforce access controls;
- Send service-related communications;
- Run AI-assisted marketing workflows (analysis, copywriting, rendering) that you initiate;
- Process subscription and usage-based billing via Stripe;
- Comply with law and protect against fraud or abuse.
We do not sell personal data.
5. AI processing (EmberOS)
When you use EmberOS, content you upload (such as product videos, images, and audio) and related campaign text may be processed by automated and AI systems to generate marketing outputs (e.g. short-form video clips, captions, subtitles, and platform-specific copy).
This processing may involve sending excerpts of your content (e.g. video frames, transcribed speech, and text prompts) to third-party AI providers. Outputs are provided for your review; you are responsible for verifying accuracy, legality, and platform compliance before publication.
You represent that you have the rights and lawful basis to upload and process all content you submit, including personal data and likenesses of individuals shown in your materials.
6. Service providers
We use trusted third-party providers to operate our services. Depending on the product, this may include:
- Supabase — authentication, database, and file storage;
- OpenAI — vision, language, speech, and related AI features in EmberOS;
- Vercel — web application hosting;
- Railway (or similar) — background video processing workers;
- Upstash — job queues and rate limiting;
- Stripe — subscription and payment processing (we do not store full payment card numbers);
- Google Firebase / Google Cloud — used by some products such as EmberCore ERP;
- Email and analytics providers as needed.
Data may be processed in Malaysia and other countries where these providers operate (including the United States). Where required under PDPA, we rely on appropriate safeguards such as contractual protections and your consent to use the Services.
7. Security & retention
We use encryption in transit, access controls, and tenant isolation where applicable. No system is 100% secure. We retain data only as long as needed for the purposes above or as required by law.
8. Your rights
Subject to PDPA and applicable law, you may request access, correction, or withdrawal of consent where processing is consent-based. Email support@embersoullabs.com. We aim to respond within 21 days.
If you are an end customer of a business using our products, please contact that business first.
Complaints may be lodged with the Personal Data Protection Department (PDPC), Malaysia.
9. Cookies
Our website may use essential cookies for basic functionality and language preference. EmberOS uses authentication cookies and similar session storage required to keep you signed in and secure your workspace. We do not use non-essential advertising cookies in EmberOS at this time.
10. Children
Our services are directed at businesses and adults. We do not knowingly collect data from children under 18.
11. Changes
We may update this policy and will post the revised version with a new “Last updated” date.
12. Contact
EmberSoul Labs
Johor Bahru, Malaysia
support@embersoullabs.com