Privacy notice

EMS is software a talent agency uses to run its roster: creators, brands, deals, invoices and meetings. Each agency is one organization in EMS.

The agency decides what goes in and what it's used for. For its creators' data, the agency is in charge of it (the controller) and Elusive Management (Joey Semaan)runs EMS on its behalf (the processor). If you're a creator, the agency that sent you an intake link is who you deal with first.

• Agency staff: your Discord name, avatar, email and Discord ID from sign-in, and your role in the organization.
• Creators: legal name, contact details, address, tax ID, payment details (bank, PayPal or wallet), social accounts and their public stats, and anything the creator writes in the intake form.
• The work:deals, invoices and their PDFs' contents, brands and their billing contacts, meetings, notes and the activity feed.
• An audit trail:who changed what, and when. Bank details and tax IDs on payee profiles, payment methods and invoices, and a creator's intake answers, are recorded as “changed”, never their values.

The browser keeps sign-in cookies only, plus a few on-device settings. No ads, no tracking, no analytics cookies.

The app, the database and its backups run on Railway, us-west2 (Oregon, USA). EMS's copy of your data is stored in the USA. Anything you connect (Notion pages, Outlook events, Discord posts and DMs) also sits with that service.

• Your agency's staff, by role.Owners see the whole organization. A talent manager sees only the creators assigned to them, and that creator's deals, invoices and meetings.
• No other agency. Every record is tied to one organization, and the database refuses a read or write across organizations.
• Joey, as the operator, for support only.He reads an agency's records only when that agency asks for help, and only that agency's. Anything that spans agencies is a count, never the records themselves.

EMS doesn't sell data, and nothing in your organization is used for any other agency's business.

These see some data when you use the feature they run. Nothing else is sent anywhere.

• Railway — hosting, the database and its backups.
• Discord — sign-in, and the two bots that post in your server and DM the people you set up.
• Microsoft — Outlook calendar, only if you connect it.
• Notion — creator brain pages, only if you connect it.
• Sentry — error reports, with legal names, addresses, emails, phone numbers, tax IDs, bank and payment details, invoice line items, brand contacts and tokens removed before a report leaves EMS. An error message itself can still name a creator or brand.
• Brandfetch and Hunter— a brand's name or domain, to find its logo or a contact, when you ask.
• Google Places — the address text you type, for autocomplete.
• YouTube and Twitch— a creator's channel, to read its public stats, or the stats the creator connects.

Exchange rates (Frankfurter, CoinGecko) and the top-bar weather (Google) are fetched without sending anything about you. The timezone search sends the place name you type to Photon (OpenStreetMap). Brand logos load in your browser from Brandfetch, or Google's favicon service. Push notifications go through your browser's push service, encrypted. Invoice PDFs load Google Fonts when they're made. Billing (Stripe) is off during the beta.

• Until you delete it. Edit or remove any record in EMS at any time.
• Erase a creator from their page: their personal details are blanked, including in the audit trail. Invoices stay, because the money records have to.
• Delete the organization from Settings → Privacy: it's removed 30 days later, and any owner can cancel until then. On day 30every record goes, audit trail included, except a deletion receipt: the organization's slug, who asked, and how many rows went.

Railway backs up the whole database every day (each kept 6 days) and every week (each kept 27 days). A backup holds every agency at once, so it can't restore one agency on its own: restoring rolls back everyone. A deleted record can stay in a backup for up to 27 days after it's gone. For a deleted organization that's up to 57 days after you ask, counting the 30-day grace period.

Your own copy is Settings → Privacy → Download all data: a zip of every record in your organization, one file per table. Take one whenever you want a copy you control.

• Get a copy: Settings → Privacy → Download all data (owners), or one creator's from their page.
• Correct it: edit the record.
• Delete it: erase a creator, or delete the organization.
• Creators: ask the agency first. If that doesn't work, write to joey@elusivemgmt.com.

A new version gets a new date at the top of this page. An owner sees “Updated terms” in Settings → Privacy and accepts it there.