Privacy Policy

Important: This page is an informational draft for product transparency. It is not legal advice and has not been reviewed by counsel. Final launch copy must be confirmed by the Owner.

Amber AI (“we”) processes account data, organization metadata, operational analytics, and encrypted vault secrets to provide the Amber AI Business OS (Headquarters, vault, billing, and related dashboard features).

Data we collect

Account information (name, email), organization membership and roles, product usage metrics, content or brief metadata you create in Headquarters, billing/subscription records, and credentials you choose to store in the vault (encrypted at rest).

How we use data

To operate the platform, authenticate users, enforce role-based access, generate recommendations and briefs, process subscriptions, secure the service, and respond to support requests. We do not sell personal data.

Data retention

Account and organization data are retained while your account is active. After deletion or contract end, we aim to remove or anonymize personal data within a reasonable period unless law or dispute resolution requires longer retention. Vault secrets are retained until you delete them or the organization is closed. Operational logs may be kept for security and audit purposes for a limited window.

Subprocessors

We may use infrastructure and service providers (for example hosting, database, email, and payment processors) to run the product. Those providers process data only as needed to deliver their services under our configuration. A current subprocessor list will be published or provided on request when the production stack is finalized.

Security

Vault secrets use AES-256-GCM when the vault master key is configured. Access is restricted by organization role (RBAC). See Security in Headquarters (signed-in) and the User Guide · Security section. We do not use vault credentials to train third-party models unless you explicitly configure a provider integration that requires them.

Cookies

Essential cookies support authentication and core features. See our Cookie Policy.

Governing law (placeholder)

Pending Owner confirmation, these privacy practices are intended to be interpreted under the laws of the United States. Specific state or venue terms will be added after legal review.

Your choices

You may update profile details in /dashboard/profile, manage org members (Admin+) at /dashboard/users, and delete vault entries you no longer need. Privacy requests can also be sent by email.

Contact

Privacy requests: privacy@amber.ai
General: /contact · /support