Privacy Policy

Information we handle

• Account and profile information, such as your name, email address, role, and organization.
• Workspace content, including client records, project details, messages, support requests, contracts, approvals, campaign registrations, and file links.
• Operational information needed to secure and maintain the service, such as authentication events, delivery status, and basic device or browser information.
• Billing and transaction information. Payment card details are handled by Stripe and are not stored directly by Amplify OS.

Google Drive

Google Drive access is optional. Amplify OS requests the narrow drive.file permission, which lets the service open only files you select or use with Amplify OS. It does not grant general access to everything in your Drive.

We store an encrypted authorization credential so the selected file can remain available to your workflow. You can disconnect Google Drive from Amplify OS at any time. When you disconnect, Amplify OS attempts to revoke the credential and removes its stored copy. You can also remove access from your Google Account security settings.

If you connect Meta Ads, Amplify OS uses read-only advertising access to retrieve the ad accounts and campaigns you select and import reporting measurements such as spend, impressions, and clicks. Advertising credentials are encrypted, kept server-side, scoped to your workspace, and removable from workspace settings. Amplify OS does not use this connection to create, edit, pause, or publish advertisements.

Amplify OS's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How information is used

• Provide the workspace, client portal, file review, approval, billing, campaign, and notification features you request.
• Authenticate users, enforce organization and role boundaries, prevent misuse, and maintain an audit history.
• Operate support, diagnose failures, improve reliability, and communicate service-related information.
• Run AI-assisted features only when a user invokes them. Content supplied to an AI-supported workflow is used to produce the requested result, not to sell personal information.

Service providers and sharing

We use service providers to host the application and database, deliver email and notifications, process payments, connect Google services, and provide optional AI features. They receive information only as needed to perform those services. Workspace administrators may also control who can access information inside their organization.

We do not sell personal information. We may disclose information when required by law or when necessary to protect users, the service, or the public.

Retention, security, and your choices

We retain information while an account or workspace is active and as reasonably needed for security, dispute resolution, legal obligations, and service continuity. We use access controls, tenant separation, encryption for sensitive integration credentials, and other safeguards appropriate to the information handled.

You may request access, correction, export, or deletion of your personal information. Workspace members should first contact their workspace owner because that organization may control the underlying client and project records. You may also contact Amplify OS through the support page.

Children and policy changes

Amplify OS is a business service and is not directed to children under 13. We may update this policy as the service changes and will post the revised effective date here.