Privacy Policy

Amplify ("Amplify," "we," "us," or "our") provides an AI workspace for commerce operators: catalog and listing automation, sales and inventory analysis, purchase-order planning, and human-approved agent workflows. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to www.use-amplify.com, the Amplify application at app.use-amplify.com, our free listing-audit tools, and any related services (together, the "Services").

By using the Services, you agree to the collection and use of information as described in this policy. If you use Amplify on behalf of a company, you represent that you are authorized to accept this policy on its behalf.

We collect three broad categories of information:

• —Account information — name, work email address, company name, and authentication credentials when you create an account or join our waitlist.
• —Connected business data — data you choose to connect or upload so the Services can do their job: product catalogs, item masters, supplier invoices and price lists, product images, pricing, inventory and stock snapshots, sales and order history, returns data, marketplace templates, ERP exports, and approval logs.
• —Integration credentials — OAuth tokens and API keys for platforms you connect (for example Shopify, Amazon, Noon, Namshi, or your ERP). These are encrypted at rest and used only to perform the syncs and workflows you configure.
• —Usage and device data — application logs, browser and device information, IP address, and product analytics that show us which features are used and where errors occur.
• —Public listing data — when you run our free audit tool on a URL, we fetch and analyze the publicly available product data at that URL. We may retain aggregate audit statistics; we do not associate them with you unless you are signed in.

We use the information we collect to:

• —Provide, maintain, and improve listing generation, catalog enrichment, inventory analysis, forecasting, purchase-order drafting, and approval workflows.
• —Sync product and operational data between your connected platforms according to workflows you approve.
• —Generate recommendations — listing fixes, replenishment plans, pricing observations, and other operational actions — that always remain subject to your review and approval before anything is written to a live channel.
• —Measure the impact of approved changes on sales, returns, stock cover, and related business metrics.
• —Send service communications such as approval requests, run summaries, security notices, and (if you opted in) product updates. You can opt out of non-essential email at any time.
• —Secure the Services: detect and prevent fraud, abuse, and unauthorized access, and debug failures.

Parts of the Services use large language models and other machine-learning systems to enrich product data, analyze listings, classify return reasons, and draft recommendations. Where we use third-party AI providers (such as Anthropic), your data is sent to them solely to generate the requested output, under agreements that prohibit them from using it to train their models.

AI-generated output is always presented for human review inside Amplify. Nothing an agent prepares is published to a marketplace, ERP, or any external system without an explicit approval from your team.

Amplify connects to third-party platforms only when you authorize the connection, and accesses only the scopes you grant. You can disconnect an integration at any time from your settings or by contacting us.

We rely on a small set of infrastructure providers (cloud hosting, managed databases, error monitoring, email delivery, and AI inference) to operate the Services. Each provider processes data only on our instructions and under contractual confidentiality and security obligations.

We do not sell or rent your personal information or your business data. We do not share your marketplace or catalog data with third parties for their own marketing, advertising, or model-training purposes.

We implement technical and organizational measures designed to protect your data:

• —All data in transit is encrypted with TLS/HTTPS.
• —Integration credentials and API tokens are encrypted at rest.
• —Production database access is restricted to authorized personnel, logged, and monitored.
• —Agent actions are approval-gated and recorded in an audit trail with before/after context and rollback notes.
• —We review our infrastructure and dependencies for vulnerabilities on an ongoing basis.

We retain your data for as long as your account is active or as needed to provide the Services. Connected business data is retained so that runs, approvals, and audit trails remain reproducible. When you delete your account or disconnect an integration, we delete or de-identify the associated data within 30 days, except where retention is required for legal, security, dispute-resolution, or bookkeeping purposes.

Backups are retained on a rolling schedule and expire automatically.

Depending on where you are located (including under the GDPR and the California Consumer Privacy Act), you may have the right to:

• —Access a copy of the personal data we hold about you.
• —Correct inaccurate or incomplete data.
• —Delete your personal data ("right to be forgotten").
• —Export your data in a machine-readable format (data portability).
• —Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• —Disconnect any third-party integration at any time.
• —Not be discriminated against for exercising any of these rights.

Amplify is operated from the United States, and data may be processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses for transfers of personal data out of the EEA, the UK, or Switzerland.

We use essential cookies for authentication and session management, and first-party analytics to understand product usage. We do not use third-party advertising or cross-site tracking cookies. Your browser settings can block cookies entirely, though signed-in features will not work without essential cookies.

The Services are business tools intended for users 16 and older. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated policy on this page, update the "last updated" date, and — for material changes — notify account holders by email before the changes take effect.