Privacy Policy

Effective: May 4th, 2026

Amrani Ventures LLC (“Embed Workflow®,” “we,” “us,” or “our”) provides an application integration platform and related services (“Services”). This Privacy Policy (“Privacy Policy”) details Embed Workflow®’s policies and practices regarding its collection and use of your personal information and sets forth your privacy rights.

This Privacy Policy addresses activities on the Embed Workflow® platform, altogether this website, and any other website or web-based system provided by Embed Workflow® (the “Website”). Through the Website you are able to access links to other websites which are not under the control of Embed Workflow®. We have no control over the nature, content and availability of those sites. This Privacy Policy does not cover the links within the Website that link to such other websites. We encourage you to read the privacy statements on the other websites you may visit.

The Information We Collect and How We Use It

To Provide the Embed Workflow® Platform

Embed Workflow® collects personal information about you in order to:

  1. identify you each time you visit our Website or wish to have a Service provided;
  2. process orders or applications submitted by you;
  3. improve our Services and Website;
  4. customize your experience;
  5. carry out research on the demographics, interests and behavior of our customers.

Depending on the Service, personal information we collect may include:

  • first name;
  • last name;
  • email address;
  • credit card number; and
  • billing address.

We process your personal information under the following legal bases as applicable under the General Data Protection Regulation (GDPR) and other data protection laws:

  1. Contract performance — to provide and maintain our Services, process your account registration, manage subscriptions, and deliver the functionality you request;
  2. Consent — where you have given us explicit consent, such as for marketing communications or optional data collection. You may withdraw consent at any time by contacting us;
  3. Legitimate interest — for purposes such as improving our Services, conducting research on customer demographics, ensuring the security of our platform, and communicating service updates; and
  4. Legal obligation — where we are required to process your data to comply with applicable laws or regulations.

Google User Data and Third-Party Data Sharing

When you connect your Google account to Embed Workflow®, we access and use your Google user data as follows:

Data We Access:

  • Your email address and basic profile information for account identification
  • Gmail sending capabilities to send emails on your behalf through our platform

How We Use Google User Data:

  • We use your Gmail access solely to send emails that you compose and authorize through our platform
  • Your Google user data is used only to provide the email sending functionality you request
  • We do not read, store, or access your existing Gmail messages or email content

Data Sharing and Disclosure: We do not sell, rent, or share your Google user data with third parties, except in the following limited circumstances:

  • Service Providers: We may share data with trusted third-party service providers who assist in operating our platform, but only to the extent necessary to provide our Services and under strict confidentiality agreements
  • Legal Requirements: We may disclose your information if required by law, court order, or government regulation
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

Data Storage and Security:

  • Google user data is encrypted and stored securely
  • We implement industry-standard security measures to protect your Google account information
  • We do not expose user credentials and access them only as necessary to provide our Services

Your Control:

  • You can revoke our access to your Google account at any time through your Google Account settings
  • You can request deletion of your Google user data by contacting us at contact@embedworkflow.com
  • We will delete your Google user data upon account termination or access revocation

Our use of Google user data is governed by Google’s privacy policies and our commitment to protecting your privacy.

Aggregated Service Data

In an ongoing effort to better understand and serve Embed Workflow®’s customers, at times Embed Workflow® conducts research on its customer demographics, interests and behavior based on the personal information and other information provided to us. This research may be compiled and analyzed on an aggregate basis. This aggregate information does not identify you personally and is not considered to be personal information

Through the Embed Workflow® Website

As is true of most other websites, the Website collects certain information automatically and stores it in log files. The information may include (i) internet protocol (“IP”) addresses, (ii) the region or general location where your computer or device is accessing the internet, (iii) browser and system information, and (iv) other actions performed by you on the Website. We use this information to help us design our Website to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our Website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences. We do not link IP addresses to your name or email address.

The Website also uses cookies. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Most web browsers automatically accept cookies. If you prefer, you may change your browser’s settings so that it will not automatically accept cookies. If you set your browser’s settings to block cookies, you may not be able to take full advantage of the Website. Cookies are specific to the server that created them and cannot be accessed by other servers, which means they cannot be used to track your movements around the internet. While cookies do identify a user’s computer, they do not personally identify customers or passwords.

Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. When determining retention periods, we consider: - Length of time needed to provide our Services - Types of products and services requested or provided - Contract requirements and legal obligations - Statute of limitations under applicable law

When we no longer need personal information, we securely delete or destroy it.

Children’s Privacy

Our Services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn we have collected personal information of a child under 13, we will delete such information promptly. If you believe we might have any information from or about a child under 13, please contact us at contact@embedworkflow.com.

Data Breach Notification

In the event of a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal information, we will: 1. Assess the risk to your rights and freedoms 2. Notify relevant supervisory authorities within 72 hours, if required by law 3. Notify affected users without undue delay when the breach is likely to result in a high risk to their rights and freedoms

Data Privacy Framework Principles

We comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework Program (DPF Program), and to view our certification, please visit https://www.dataprivacyframework.gov/ .

In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you are an EU individual, where we transfer your personal data to third- party service providers who perform services for us or on our behalf, we are responsible for the processing of that data by them and shall remain liable if they process your personal data in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.

Pursuant to the DPF Program, EU individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States in reliance on the DPF Program should direct their query to contact@embedworkflow.com . If requested to remove data, we will respond within a reasonable timeframe. We will provide also an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to contact@embedworkflow.com .

In compliance with the DPF Principles, we commit to resolve DPF Principles- related complaints about your privacy and our collection or use of your personal information. European Union individuals with inquiries or complaints regarding our handling of personal data in reliance on the DPF should first contact us at: contact@embedworkflow.com .

We have further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by us, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction for more information on this process.

With respect to personal data received or transferred pursuant to the DPF Program, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

California Privacy Rights

If you are a California resident, you have specific rights under California law: - Right to know what personal information we collect - Right to delete your personal information - Right to opt-out of the sale of personal information (note: we do not sell personal information) - Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at contact@embedworkflow.com.

International Data Transfers

We may transfer your personal information to countries other than your country of residence. When we do, we ensure appropriate safeguards are in place, including: - Standard contractual clauses approved by relevant authorities - Implementation of appropriate security measures - Verification that receiving countries provide adequate data protection

Individual Rights

Under applicable data protection laws, including the GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you;
  • Right to rectification — request correction of inaccurate or incomplete personal data;
  • Right to erasure — request deletion of your personal data, subject to legal retention requirements;
  • Right to restrict processing — request that we limit how we use your personal data in certain circumstances;
  • Right to data portability — request your personal data in a structured, commonly used, machine-readable format, or request that we transfer it to another provider;
  • Right to object — object to our processing of your personal data based on legitimate interests or for direct marketing purposes; and
  • Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@embedworkflow.com. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

Your Choices About Your Information

You can contact us directly at contact@embedworkflow.com to review, correct, and delete the information about you that Embed Workflow® keeps on file, or to change your notification preferences.

Security of Your Information

We maintain physical, technical and administrative safeguards to protect your information. When you submit sensitive information via the Website, your information is protected both online and offline.

Wherever we collect sensitive information (such as credit card data and Login Credentials), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the Website.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. The computers/servers in which we store personal information and encrypted Login Credentials are kept in a secure environment. Only employees who need access to the information to perform a specific job (for example, billing or customer service) are granted access to personal information. In addition, we commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.

Changes and Updates to the Privacy Policy

Embed Workflow® reserves the right to amend the Privacy Policy at any time, for any reason, without notice to you, other than the posting of the amended Privacy Policy on this Website. Changes to this Privacy Policy are effective when they are posted on this page. When we change the policy in a material manner we will let you know by updating the “Effective Date” at the top of this page.

Contact Information

If you have any questions or comments about this Privacy Policy, please contact:

Embed Workflow® Email: contact@embedworkflow.com