Privacy Policy

This Privacy Policy (the “Policy”) describes how Amplify (“we,” “us,” or “our”) collects, uses, and otherwise processes personal data. “Personal Data” means information that identifies, relates to, describes, or can reasonably be linked-directly or indirectly-to a particular person, including similar concepts such as “personal information” under applicable law. Data that does not identify someone on its own is still treated as Personal Data if it is combined with Personal Data and remains reasonably linkable to an individual. Please read this Policy before you download, install, access, or use the Product.

If you live in certain U.S. states, also review the U.S. State Residents Annex below. It adds disclosures and rights that may apply to you and serves as a Notice at Collection / Privacy Notice under the CCPA where relevant.

This Policy explains what we process, why, how it may be used or shared, the safeguards we use, and the choices you have.

We process Personal Data in connection with downloading, installing, activating, accessing, and using the Product and the website where it is offered (together, the “Product”). “You” means the person using the Product and, where applicable, the business or entity on whose behalf that person acts.

Personal Data you give us, or that we otherwise process for the Product, is held in our systems under this Policy. We do not share Personal Data with third parties except as described here or as required by law. You are not legally required to provide Personal Data, but without some of it certain features may not work and we may be unable to respond to some requests. By downloading, installing, accessing, or using the Product, you acknowledge that Personal Data may be collected, used, disclosed, and stored as described here. If you disagree, do not use the Product.

Under applicable privacy laws, we act as the “data controller” (or equivalent) for Personal Data processed in connection with the Product-we decide why and how that data is processed.

For questions about this Policy, our processing, or the Product, contact us at [email protected].

We process Personal Data when you download, install, access, or use the Product, and when you contact us about it.

The Product is not designed to collect Sensitive Data, and to our knowledge it does not. “Sensitive Data” means information treated as sensitive under applicable law (including special-category or highly sensitive personal information). Please do not send or upload Sensitive Data through the Product. Depending on jurisdiction, that may include racial or ethnic origin, religious beliefs, sexual orientation, health data, and certain financial data.

What we process depends on how you use the Product. The categories below describe the types of data, purposes, and-where relevant-legal bases. We may also process Personal Data to detect, investigate, prevent, or respond to fraud, misuse, infringement, identity theft, security incidents, unlawful conduct, or breaches of our Terms of Service; to protect the Product and our systems; and to establish, exercise, or defend legal claims. Where applicable, we rely on legitimate interests for that processing.

Depending on your use, we may process:

• Usage, performance, and troubleshooting data. How the Product works and is used-collected by us or by providers acting for us-such as features used, timestamps, session length, clickstream data, technical events, and error logs. We use this to evaluate performance, support development, fix issues, improve the Product, and maintain security, based on our legitimate interests in running and improving the Product.
• Support and correspondence data. If you contact us, we may process your contact details, message content, and other information you provide-to respond, support you, communicate about your request, and keep support records. We may retain communications for reference, improvement, and training. Where support is part of the Product, we rely on performing our contract with you; otherwise, on legitimate interests in recordkeeping and better support.
• Content you submit. We do not keep user content on our servers or upload it for storage. After processing finishes, output is provided to you and stays on your device. Where allowed, content may include Personal Data about other people (each a “Non-User”), such as names. Do not upload others’ Personal Data unless you have authority or required consent. Where Non-User Personal Data is processed through the Product, we rely on legitimate interests in providing a working Product.
• Online and device identifiers. Technical IDs tied to your device or use of the Product-including IP address, device IDs, browser IDs, Google advertising ID (GAID), and similar. For operating the Product, preserving functionality, security, or fraud prevention, we rely on legitimate interests. For marketing, targeted ads, or tracking technologies, we rely on your consent as described in this Policy.
• Search features. We may collect, use, and share information related to search queries with search partners and providers that help deliver search and results-such as search terms, past search behavior, results shown, your engagement with them, and search history. This often does not identify you alone; where it is Personal Data under law, we handle it under this Policy.

We use Personal Data and related information to:

• Operate, analyze, and improve the Product-monitoring performance, fixing issues, assessing usability, understanding experience, and building updates or new features.
• Personalize and market-including promotional activity and advertising so content and messages better match your interests and use of the Product.
• Secure and prevent misuse-protecting the Product, our systems, and users by detecting fraud, unauthorized activity, and other conduct that may violate our terms or law.
• Provide the Product-including sharing with search engines as needed to deliver search results.

The Product may use cookies and similar technologies when you access or use it. Depending on the interface, these may be stored on or linked to your device while you browse or use features. Cookies are typically small text files used in web environments.

We use them to support operation and usability-smoother navigation, enabling certain features, remembering preferences, and making interactions more efficient.

Depending on the laws that apply to you, you may have rights over Personal Data we process about you. Where required, we will honor those rights.

• Access. You may ask whether we process your Personal Data and, where applicable, request access to or a copy of it.
• Correction. You may ask us to correct inaccurate or incomplete Personal Data, erase it where the law allows, or restrict processing where that right exists.
• Deletion. You may request deletion of certain Personal Data we hold about you.
• Portability and objection. Where the law provides, you may object to certain processing and ask for your Personal Data in a portable format, or transfer to another party where technically feasible.

Where applicable, you may also appeal decisions and complain to a relevant authority.

To exercise these rights or ask a data-protection question, email [email protected]. U.S. state residents should also read the Annex below for extra disclosures and rights.

We use reasonable safeguards to protect Personal Data processed for the Product and to support confidentiality, integrity, and availability of our systems.

We consider the nature and sensitivity of the information and apply accepted technical, administrative, and organizational measures to reduce risks of unauthorized access, misuse, loss, alteration, or disclosure.

No transmission, storage method, or control is perfectly secure, so we cannot guarantee absolute security.

Unless this Policy says otherwise, we keep Personal Data only as long as needed for the purposes collected, or as allowed or required by law. We may keep it longer to meet legal, regulatory, tax, or accounting duties; maintain business records; resolve disputes; or establish, exercise, or defend legal claims.

In some cases you may request deletion. Unless law or a specific agreement requires retention, we are not obliged to keep Personal Data for a set period and may securely delete, anonymize, or restrict it once it is no longer needed for legitimate business purposes.

We disclose Personal Data only in limited cases-consistent with this Policy, needed for operations, or required by law.

• Providers, affiliates, and partners. Affiliates, subsidiaries, service providers, advertisers, search-feed or search-engine providers, and others who help us operate, support, maintain, market, manage, or improve the Product-and, where relevant, deliver search results.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganization, asset sale, or similar transaction involving us.
• Legal and protective disclosures. Where we believe disclosure is needed to comply with law or legal process, or to investigate unlawful activity, Product misuse, security incidents, or threats to rights or safety.
• Analytics providers. Partners who help measure and understand Product performance and use, including via aggregated or statistical reporting.

International transfers. Personal Data may be received by parties outside your country, including outside the EEA where applicable. We take steps so recipients have privacy and security obligations aligned with this Policy and applicable law. Where required, we use appropriate safeguards such as contractual protections and other lawful transfer mechanisms.

We may update this Policy to reflect Product changes, our practices, or legal requirements. Revised versions will be posted on our website and, unless we say otherwise, take effect when posted. Please review this Policy from time to time.

The Product is not intended for children under 16, and we do not knowingly collect Personal Data from children. If we learn that a child has provided Personal Data, we will delete it as soon as reasonably possible. If you believe a child has shared information with us, contact us promptly.

Questions or requests about this Policy, our privacy practices, or the Product: [email protected].

This Annex supplements the Policy for residents of certain U.S. states. It explains how we collect, use, disclose, and process Personal Data where those disclosures are required under U.S. state privacy laws.

Depending on state law, residents may have privacy rights for Personal Data processed in an individual or household context. Those rights usually do not apply when someone acts in a commercial or employment context, as a job applicant, as a beneficiary of someone acting in an employment context, or as a business representative, to the extent those situations are excluded by law.

Sensitive Data under applicable U.S. state laws may include Personal Data revealing racial, ethnic, or national origin; religious beliefs; medical history or health condition, diagnosis, or treatment; neural data; transgender or non-binary status; sex life or sexual orientation; crime-victim status; citizenship or immigration status; genetic or biometric data; Personal Data from a known child; and precise geolocation.

Personal Data generally means information linked or reasonably linkable to an identified or identifiable person. It usually excludes lawfully obtained public information, de-identified or aggregated data, and other information outside the scope of the relevant state law.

Certain state laws require clear notice of the categories of Personal Data we process, purposes, categories of third parties we disclose to, whether categories are sold or used for targeted advertising, parties involved in those activities, consumer rights, how to exercise and appeal them, and how to contact us. This Policy and the details below are intended to meet those requirements.

Categories we process. Section 3 describes the categories we collect or process for the Product and the purposes for which they are used. We do not use Personal Data for materially different, unrelated, or incompatible purposes, and we do not collect additional categories without notice and consent where required-unless otherwise allowed or required by law.

Sale and targeted advertising. Under some state laws, “sale” can include making Personal Data available to a third party for money or other valuable consideration, including for targeted ads. We do not “sell” Personal Data in the everyday sense of taking money directly for information about you. Depending on how “sale” is defined, however, our use of cookies and tracking technologies, third-party advertising, and related disclosures-including to analytics providers-may count as a “sale” or as use for targeted advertising. Categories involved may include unique identifiers (such as device ID and IP address), internet or network activity (such as engagement with our services), and geolocation derived from IP address.

Additional rights. Besides the rights in Section 5, residents of certain U.S. states may have further rights under applicable law, subject to legal limits, including:

• confirming whether we process your Personal Data and obtaining it in a portable, readily usable format where technically feasible;
• requesting correction of inaccurate Personal Data, deletion of Personal Data you provided or that we obtained about you, and in some cases a list of specific third parties to whom we disclosed Personal Data about you;
• where the law allows, opting out of certain processing-including “sale,” targeted advertising, and profiling that produces legal or similarly significant effects (we do not engage in profiling for legal or similarly significant decisions);
• appealing if we do not act on your request, and not receiving discriminatory treatment for exercising privacy rights.

More on California privacy rights: https://oag.ca.gov/privacy/ccpa.

Submit U.S. state privacy requests to [email protected].

Authorized agents may submit requests for another person where the law allows, with proof of authority. We may also require the individual to verify identity and confirm the agent’s authority.

We respond within the time required by law and may extend that period where permitted, with any required notice. If we decline a request, we will tell you, explain why, and-where applicable-how to appeal. We review appeals within the legally required timeframe. If an appeal is denied, you may contact the relevant regulator or Attorney General in your jurisdiction.