Privacy Policy

This policy explains how SMOKE Intelligence Services ("SMOKE", "we", "us") handles information in connection with Ember, our consent-based, read-only threat-monitoring service for creators. It covers this website (ember.smoke-intelligenceservices.com) and the Ember application, including any data we access from Google and YouTube API Services.

1. Who we are

Ember is operated by SMOKE Intelligence Services, and we are the data controller for the information described here. Reach us with any question, request, or complaint:

• Email: services@smoke-is.com
• Web: smoke-is.com

2. Data we access and collect

Ember monitors only the accounts you connect and consent to, and only your own accounts. We do not monitor anyone else's.

Connected-account data

This is the core of the service. When you connect an account, Ember reads the activity coming into it so each item can be scored and shown to you. Depending on the platform, that includes:

• The comments, replies, and mentions directed at your own channel, videos, or posts.
• The display name and account or channel identifier of whoever left each item, so we can track an actor over time and recognize the same person across the platforms you have connected.
• The identifier and title of the video, post, or item the activity relates to, and when it happened.
• Your own channel or account identity, such as the channel ID and name, which we need to set up and organize monitoring.

Ember asks for read-only permission. It never posts, edits, deletes, or otherwise acts on your accounts.

Account & sign-in data

If you sign in with Google, we receive basic profile information (your name, email address, and Google account identifier) to authenticate you and route you to your workspace. We also keep the account, contact, and configuration details you give us during onboarding. Billing runs through a payment processor, and we do not store full card numbers.

Operational data

We keep limited security and audit logs, such as sign-in events and a tamper-evident record of access, so we can run the service securely.

3. Google & YouTube data

Ember uses YouTube API Services. When you connect a YouTube channel, you authorize Ember through Google's official sign-in, and Ember uses the YouTube Data API with read-only scope to read the comments and mentions coming into your own channel, along with the commenter and video identifiers described above.

By using the YouTube-connected features you agree to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

4. How we use it

We use this data only to run the features you see in Ember:

• Pull in the comments and mentions arriving on your connected accounts.
• Score each item for threat type and severity, on a 0 to 5 scale, using our private AI.
• Track the actors behind threats over time and link them across your connected platforms.
• Alert you to critical items and escalating behavior, through the dashboard, Slack, Discord, email, or SMS.
• When you ask us to, put together an exportable evidence record you can take to counsel, law enforcement, or a court for a restraining order.

We do not use this data for advertising, to build marketing profiles, or for anything unrelated to the monitoring features you signed up for.

5. Private-AI processing

All threat scoring and analysis runs on our own infrastructure. Your content, and any Google or YouTube data, is never sent to a public or third-party AI service such as ChatGPT. Suspected illegal material is isolated and is not passed onward.

6. Storage & retention

• Connected-account credentials and tokens are encrypted with AES-256 and stored on our own infrastructure.
• Authorized YouTube API data is refreshed or deleted at least every 30 days. After 30 calendar days we either re-fetch it from YouTube or delete it, in line with the YouTube API Services Developer Policies.
• We keep the scored metadata and actor records needed to give you continuity of monitoring, plus any evidence you have asked us to preserve, only for as long as the purpose you consented to requires. You can ask us to delete these at any time (see Section 8).
• When your engagement ends, we export your data and evidence trail to you and then delete it from our systems, except for the limited records we have to keep to meet a legal obligation.

7. How we share it

We treat your data, and any Google user data, as confidential, and we do not sell it. To be specific:

• We do not share it with advertising platforms, ad networks, or data brokers, and we do not use it for advertising, retargeting, or any credit, lending, or eligibility decision.
• We do not send it to public or third-party AI services.
• We share it only in these cases: with you and the team members or managers you designate; with a small set of service providers, such as secure hosting and alert delivery, who process it under confidentiality solely to run Ember; at your direction, as an evidence export for your counsel or law enforcement; and where the law requires it or where it is needed to protect against imminent harm.

8. Revoking access & deleting your data

You control the access you grant, and you can withdraw it whenever you want:

• Revoke in Google. Remove Ember's access from your Google Account security settings at any time. Once you revoke, Ember can no longer read your data, and we delete anything we still hold on the next refresh cycle, within 30 days at the latest. If you also email us to ask, we delete it within 7 days.
• Ask us directly. Email services@smoke-is.com to disconnect an account or delete your data. When you request deletion, or when you revoke Ember's authorization, we delete the associated Google and YouTube data as soon as we can, and within 7 days.
• Ongoing refresh. Separately from any request, stored authorized YouTube data is refreshed or deleted at least every 30 days.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or object to the processing of your personal data. We honor these requests for every user. To make one, email services@smoke-is.com. You can also complain to your local data-protection authority.

10. Security

We protect data with encryption in transit and at rest (AES-256 for stored credentials), strict access controls, and a tamper-evident audit trail on every use. No system is perfectly secure, but protecting this data is the core of our business, not an afterthought.

11. Cookies

This marketing site uses only essential cookies. The Ember application uses a session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

12. Children

Ember is a professional service for creators and the people who represent them. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

13. Changes & contact

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and for material changes we will notify active clients. Data is processed in the United States.

Questions or requests: services@smoke-is.com. SMOKE Intelligence Services.