Privacy Policy
This Privacy Policy explains what personal data Amten.ai ("Amten.ai", "we", "us") collects when you use Amten.ai: the app, its public pages (the guides, the research library, pricing and the free course) and the installed app (the "Service"), how we use it, who we share it with, and the choices and rights you have.
We collect what we need to run the Service, and we do not sell your personal data.
What we collect
- Account data: when you sign in through our sign-in provider, your email address and, if you give it, your name and profile picture, plus an identifier for your sign-in account.
- How you use the Service: the stories you open and when, the stories and companies you follow, the questions you ask and the branches you build, your settings and preferences, and requests you make to us (for example for access or credits).
- Credits and payments: your plan, credits granted, charged and remaining (the credits ledger), and records of purchases. Card details are entered with our payment provider and never reach us; we receive confirmation of the payment and its amount.
- Device and notifications: if you turn on notifications, your browser's push subscription (an address at your browser's push service and its encryption keys) and how many notifications we sent you each day.
- Logs and security: technical information such as IP address, browser type, the requests made and errors, kept to run, secure and fix the Service and to limit abuse.
- The free course: when you download it, that you asked for it and how many times you downloaded it, kept with your account's email.
- Product counts: we count, in aggregate, how many visits the home page gets, how many visitors play the example story, start and complete a sign-up (with the section of the page it started from), and how many accounts read, follow and build their first story. These are first-party counts kept by day; no name, email address, IP address or cookie is stored with them. To count a "first" only once, we keep a one-way, keyed hash of the account, which we delete when you ask us to erase your account.
What we do not collect
- We do not ask for or hold brokerage account details, holdings in your real accounts, card numbers, bank details or government identifiers.
- We do not use third-party advertising trackers, and we do not sell or rent your personal data.
- We do not knowingly collect data from anyone under 18.
How we use it
- To provide the Service: signing you in, showing and pricing stories, keeping what you follow and opened, charging and showing credits, and sending notifications you turned on.
- To answer your questions, by researching and composing stories and branches (see section 4).
- To communicate with you about your account, access, credits and changes to the Service or these policies.
- To keep the Service secure, prevent fraud and abuse, enforce our Terms of Use, and meet legal obligations.
- To understand and improve the Service, using usage measured in aggregate (for example how many people read a story).
Where a law such as the GDPR applies, we rely on performing our contract with you, our legitimate interests in running and securing the Service, your consent (for example for notifications, which you can withdraw at any time), and legal obligations.
AI processing
To produce stories, readings, branches and answers, we send the questions you ask, and the public data and story content needed to answer them, to AI model providers. They process this on our behalf under their own terms and data-processing commitments. We do not send your email address or name with a question.
Stories and branches are composed from public sources and may be shown to other readers; they do not name the person who asked. Please do not include personal or confidential information in questions.
Service providers we share data with
We share personal data only with providers that help us run the Service, under contracts that limit their use of it, or when the law requires it:
- Hosting: Railway, which runs our servers.
- Databases: Turso, and Neon (Postgres), which store account, credits and usage records.
- Sign-in: Clerk, which handles sign-in and holds your sign-in account.
- Email: Resend, which delivers account and service email.
- Payments: Stripe, when buying credits is available, which processes payments.
- AI model providers, which process questions and story data as described in section 4.
- Market and research data vendors, which receive requests for public data (such as a ticker), not your personal data.
We may also disclose data if required by law or a valid legal request, to protect the rights, safety or property of Amten.ai, our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.
How long we keep it
We keep account and usage data while your account is open. When you ask us to erase your account, we delete your workspace (what you follow, opened, asked and set), your notification subscriptions, the keyed hash behind the first-use counts, and your administrator role if any, and we stop processing your data. We keep, for as long as the law requires, the credits ledger and payment records (financial records), a record that your access was closed (holding a hash of your email so the account is not recreated by accident), and a record of which Terms of Use version you accepted and when. Logs are kept for a limited period. Backups roll over on their own schedule.
Security
We protect data with measures such as encryption in transit, encrypted storage of secrets, access controls and per-person workspaces. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal data, we will tell you where the law requires it.
Your rights and choices
Depending on where you live, laws such as the GDPR in Europe and the UK and the CCPA in California may give you rights to:
- access the personal data we hold about you and receive a copy;
- correct data that is inaccurate;
- delete your data (erasure), subject to the records we must keep (section 7);
- object to or restrict certain processing, and withdraw consent you gave;
- receive your data in a portable form;
- know what categories of data we collect and share, and not be discriminated against for using your rights.
To use any of these rights, email privacy@amten.ai from the address on your account. We will verify the request and answer within the time the law sets. You can turn notifications off at any time in Account and credits. You may also complain to your local data protection authority.
Children
The Service is not for anyone under 18. If you believe a person under 18 has given us personal data, contact privacy@amten.ai and we will delete it.
International transfers
We and our providers may process data in the United States and other countries whose data protection laws may differ from yours. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.
Changes to this policy
We may update this policy. Each version carries a version number and an effective date, and we will tell you about material changes in the Service or by email before they take effect.
Contact
Questions or requests about privacy: privacy@amten.ai.
See also the Terms of Use.