Protecting data across every collaboration and platform

Eminify is a digital product and AI engineering studio operating from the United States, Nigeria, India and Kenya. We deliver AI agents, custom bot chats, workflow automation, and full-stack product engineering services for clients across regulated and emerging industries.

This Privacy Policy explains how we collect, use, and safeguard information related to inquiries, engagements, and ongoing platform operations.

We collect personal and business information that you voluntarily provide when contacting us, subscribing to updates, or participating in product engagements.

• Contact details such as name, email address, phone number, and company information
• Project context including goals, timelines, datasets, technology preferences, and documentation
• Usage information from our websites, portals, support tools, and chatbot interfaces collected via analytics cookies and session logs
• Credentials, API keys, or database schemas shared for integration purposes, stored only within secure secrets management systems
• Training or evaluation data provided to customize AI agent skills or RAG (Retrieval-Augmented Generation) databases

We process data solely to deliver contracted services, support platform operations, and maintain transparent communication with stakeholders.

• Responding to inquiries, proposals, and support requests
• Configuring project environments, automation workflows, AI agent skills, and integrations
• Monitoring quality, security incidents, and performance of deployed features
• Sharing progress updates, billing details, and strategic recommendations
• Improving our internal delivery playbooks and automation templates using anonymized metadata, strictly ensuring that client-specific proprietary data or model weights are never utilized for cross-client training

We rely on one or more of the following legal grounds depending on the engagement and geography: (a) consent, (b) performance of a contract, (c) legitimate business interests balanced with privacy rights, and (d) compliance with legal obligations such as taxation and regulatory reporting.

We do not sell personal data. We may share information with vetted subprocessors strictly necessary for delivery—such as cloud infrastructure providers, large language model (LLM) API hosts, analytics platforms, communications tools, or specialist partners—with contractual guarantees on confidentiality, data handling, and breach notification.

Where clients request integrations with their own vendors, we process data under their direction and adhere to any security checks or vendor onboarding workflows they define.

Project teams may span multiple regions. When personal or corporate data moves across borders, we implement safeguards such as Standard Contractual Clauses, NDPR-compliant agreements, and encryption-in-transit protection to meet GDPR, CCPA, and other applicable regulations.

We retain project records and client datasets only for as long as they are required to deliver the engagement, satisfy contractual obligations, or comply with law. Backup archives are purged on a scheduled basis, and credentials shared for development are removed immediately after project completion or revocation requests.

Our security posture includes access controls, environment segregation, encrypted storage, and auditing of privileged activity. Security incidents are documented, triaged, and communicated to affected stakeholders in line with our incident response policy.

For AI and automation projects, we utilize zero-data-retention (ZDR) APIs where possible, apply local PII-masking filters to inputs, and isolate vector databases to ensure your company data is not retained by third-party model providers.

You are responsible for safeguarding credentials issued to your team. Please notify us immediately if a compromise is suspected so we can coordinate remediation.

Depending on your jurisdiction, you may request access to, correction of, or deletion of personal data we hold. You may also object to processing, request portability, or withdraw consent where processing is based on consent.

Submit requests to the contact details below, and we will respond within thirty (30) days. For identity verification, we may request additional information before fulfilling requests.

Our services are designed for business stakeholders and are not directed to children under the age of sixteen (16). We do not knowingly collect personal data from children. If you believe a minor has provided information, contact us so we can delete it promptly.

We may update this Privacy Policy to reflect new regulations, security practices, or service offerings. The effective date will be revised accordingly, and significant changes will be communicated through our standard client channels.