Privacy Policy

1. Who We Are

Amplyfy Technologies Inc. is a C Corporation registered in the State of Delaware, United States. When we say “Amplyfy,” “we,” “us,” or “our,” we mean Amplyfy Technologies Inc.

We operate the website amplyfy.ai and the Amplyfy platform (collectively, the “Service”).

2. Information We Collect

2.1 Information You Provide

• Account information — name, email address, and password when you create an account, or information received from third-party sign-in providers (e.g., Google OAuth).
• Profile information — biography, location, social links, and other details you add to your Amplyfy profile or AmpLink page.
• Content and files — files you upload to AmpDrive, songs, artwork and photos you upload to a release, lyrics you add or confirm, posts you create or that Amp drafts and you approve, your conversations with Amp (our AI assistant), photos and documents you send Amp, images Amp creates for you, reference images you provide for image generation, documents you ask Amp to save, the answers you give about yourself and your music, and any other content you submit through the Service.
• Payment information — billing details processed securely by Stripe. We do not store your full credit card number on our servers.
• Communications — messages you send through the platform's chat features or to our support team.

2.2 Information Collected Automatically

• Usage data — pages visited, features used, timestamps, and interactions within the Service.
• Device and browser data — IP address, browser type, operating system, and device identifiers.
• Location data — approximate location derived from your IP address. If you use AmpMap, you may voluntarily provide more precise location information.
• Cookies — we use essential cookies to keep you signed in and functional cookies to remember your preferences. We also use optional analytics (PostHog and Google Analytics) and error-monitoring (Sentry) cookies. In the EU/EEA, the UK and Switzerland these only run after you accept them. Elsewhere they are on by default and you can turn them off anytime under Cookie settings; if your browser sends a Global Privacy Control signal, we treat it as turning them off. We use your approximate country (from your IP address) only to decide which of these applies.
• AmpLink visit counts — when someone opens an AmpLink page or taps a link on it, we add it to that page's daily totals (visits, unique visitors, taps per link), which only the page's owner sees. We set no cookie and store nothing on the visitor's device, and we don't store IP addresses. To count a visitor once a day we keep a code made from their IP address and browser with a random value that we delete every day, so nobody can be followed from one day to the next. We do this in our legitimate interest in showing artists how their page is doing.

3. How We Use Your Information

• Provide, maintain, and improve the Service.
• Personalize your experience, including powering Amp's responses, the work Amp does on your releases, and Amp's memory of you and your music.
• Process payments and manage subscriptions.
• Send transactional emails (account verification, password resets, billing receipts).
• Protect the security and integrity of the Service, including fraud prevention.
• Investigate content reports, enforce our Terms, and prevent illegal, infringing, or harmful use of the Service.
• Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We share information only in these circumstances:

• Service providers — trusted third parties that help us operate the Service (e.g., Supabase for database and authentication, Stripe for payments, Cloudflare for file storage, OpenAI for AI features, Stream for chat, Modal for song analysis, and Trigger.dev for background processing).
• Posting to your social accounts — when you connect Instagram, TikTok, YouTube or a Facebook Page, the connection is held by Upload-Post (Tonvi Tech SL, Málaga, Spain; its servers are in the EU). We send it only the posts and Stories you approve (the file, the caption and the time) to publish on those accounts, and read back whether they went live and how they did (views, likes and similar stats), plus daily totals for those accounts (such as followers and views). We don't read posts you made outside Amplyfy. Upload-Post processes this for us under a data processing agreement; you can disconnect an account at any time, and deleting your Amplyfy account deletes your Upload-Post profile and its connections.
• With your consent — when you choose to make content public (e.g., AmpLink pages, files placed in the public AmpMap folder, and files shared through a link). AmpMap artist profiles themselves require sign-in.
• Legal requirements — when required by law, regulation, or valid legal process.
• Safety and legal compliance — with Cloudflare, legal advisers, law enforcement, or other appropriate recipients when reasonably necessary to investigate a content report, protect users, enforce our Terms, or comply with law.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

When content is reported, authorized personnel may review the reported content, related metadata, and relevant account information to investigate and take appropriate action. Report copyright infringement, illegal content, or other legal concerns to legal@amplyfy.ai.

5. AI and Your Data

Amp, our AI assistant, processes your conversations, the songs and files in your releases, and what you tell it about yourself, so it can respond to you and do the work you ask for, such as drafting videos, covers, captions and post plans. Amp remembers useful details about you and your music across conversations. You can see and remove what Amp remembers, one item at a time, under “How Amplyfy knows you” (amplyfy.ai/amp/about-you), and you can delete your conversations with Amp. Amp only publishes, spends money or permanently changes something after you approve it.

We do not use your personal conversations to train third-party AI models. Conversations are sent to our AI providers (e.g., OpenAI) to generate responses, subject to their data processing agreements with us.

Song analysis (Deep Listen). When you upload a song to a release on a plan that includes it, we analyse it to find its tempo, beats, sections, key, chords, loudness, style and mood, and to write down the lyrics we hear as a draft for you to check. The analysis runs on GPU servers we rent from Modal, using open-source models that run on our own Modal account; no third-party AI service receives your audio. Modal's servers may be in the United States or other regions. Your audio is fetched for the analysis through a short-lived private link and deleted from Modal when the analysis finishes. It is never used to train any model. The results and the lyrics are stored with the song in your release, and you can edit or replace the lyrics at any time.

Song analysis is built on open-source models, with thanks to their authors: Demucs (Meta, MIT), Qwen3-ASR and Qwen3-ForcedAligner (Qwen, Apache-2.0), Whisper (OpenAI, MIT) via faster-whisper (SYSTRAN, MIT), Mel-Band RoFormer vocals model (Kimberley Jensen, MIT), Beat This! (CP JKU, MIT), All-In-One music structure analyzer (Kim & Nam, MIT), S-KEY (Deezer, MIT), MOSS-Music (OpenMOSS, Apache-2.0), and PANNs (Kong et al., 2020; weights CC BY 4.0) with the AudioSet ontology and labels (Google, CC BY 4.0 / CC BY-SA 4.0).

Images Amp creates for you are automatically saved to the AmpDrive folder labelled AI Creations when storage is available. Documents you ask Amp to save are stored in AmpDrive: in AI Creations, or in the Documents folder of a release when the conversation is about that release. Photos and documents you send Amp in a chat are also kept in AmpDrive, so you can find, download or delete them later. Reference images you provide for image generation are stored temporarily so they can be processed for the requested generation and are deleted after processing. If a request is interrupted before processing, you can review and delete any remaining reference file from AmpDrive.

6. Data Storage and Security

Your data is stored on servers in the United States using industry-standard security practices, including encryption in transit (TLS) and at rest. File storage is provided by Cloudflare R2. While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Content reports and related records may be retained for longer when reasonably necessary to investigate abuse, preserve evidence, resolve disputes, or comply with law.

8. Your Rights

All Users

• Access, update, or delete your account and personal data.
• Export your data from AmpDrive.
• Delete your AI conversation history.

European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time.

Our legal basis for processing your data is: (a) performance of our contract with you (providing the Service), (b) your consent, and (c) our legitimate interests (improving the Service, preventing fraud).

To exercise any of these rights, contact us at privacy@amplyfy.ai. We will respond within 30 days.

California Users (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used, (b) request deletion of your personal information, (c) opt out of the sale or sharing of personal information (we do not sell your data; you can turn off optional analytics under Cookie settings, and we honor Global Privacy Control signals), and (d) non-discrimination for exercising your rights.

9. International Data Transfers

Your data may be transferred to and processed in the United States. For users in the EEA/UK, we rely on Standard Contractual Clauses and other appropriate safeguards approved by the European Commission to ensure adequate protection of your data during transfer.

10. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: