Privacy

Who we are

Amp is a service of Entelligage Inc., 440 N Barranca Ave #4815, Covina, CA 91723 ("we"). It turns a web address into a draft online store of merchandise, and lets approved account holders edit and publish that store. Questions or requests: support@ampmybrand.ai.

What this page covers

This page explains what personal information we collect through the Amp website, why, who receives it, how long we keep it and what you can ask us to do. It covers visitors, account holders and people who buy from an Amp store. It is written to match what the service does today; if that changes, we change this page first.

What we collect, and when

• If you create a free preview: the web address or addresses you enter. We do not ask for your name or email to create a preview. We also use your network address to limit previews, page and image loads, photo removal, uploads and checkouts, and we count failed sign-ins against the account email for a short time; the network address is held in short-lived rate-limit records (up to two days), and the record of a preview being created also keeps it.
• From the web pages you point us at: the text on the page, links to social profiles, and, where we are allowed to and the setting is on, a small number of logo and photograph candidates. Every image we fetch is checked with an automated image-safety service before we keep it. If you give us the address of a public social profile, we read it like any other page. Photographs are kept for up to 7 days and the whole preview is removed after 14 days unless a store owner has claimed it.
• If you have an account (by invitation): your email address and a password, stored only as a salted hash we cannot reverse. We also keep when you signed in, your role, and the store and product details you create. Sign-in attempts and changes you make are written to a security log (see Security and audit records).
• If you own a site and confirm that with us: to prove control we may read a DNS record, a tag on your page, or the public bio of a social profile you name, and we keep only a hashed one-time code.
• If you chat with the in-app support assistant: your messages and its replies, stored with our database and in the assistant's saved conversation state.
• If you buy from an Amp store: your name, email address, delivery address and, if you give one, phone number, collected by our payment provider, Stripe, and passed to us to fulfil the order. We never receive or store your card number.
• Our servers log technical details of requests (time, page, response) for up to 30 days to keep the service running and secure.

Cookies

We use only the cookies the service needs to work. eg_access and eg_refresh keep you signed in (HttpOnly, sent only over HTTPS and only to this site; the first lasts 15 minutes, and a sign-in unused for 7 days ends, or when you close your browser). preview_claim carries a preview you are claiming through sign-in for 30 minutes. We do not use advertising or analytics cookies or trackers and we do not load third-party scripts or fonts in your browser. Because of this we show no cookie banner. Stripe's hosted checkout page, where you pay, sets its own cookies under its own policy.

How we use it, and who helps us

We use information to build and show previews and stores, to run accounts, to take payment, to make and ship orders, to keep the service secure and prevent abuse, and to answer you. We do not sell personal information and we do not use it for advertising. Companies that process it for us:

• Microsoft Azure: hosting, storage, databases, email delivery for order confirmations, image-safety scanning, and AI models in Azure. We store your data in the continental United States. Our AI providers may process content outside the United States.
• Tavily: reads the web addresses you give us and returns their text.
• Anthropic (Claude, hosted in Microsoft Azure AI Foundry): reads reduced page text to describe a brand's style, reads the support assistant's messages, and, where image generation from a logo is switched on, reviews the generated images and the logo for quality.
• Langfuse: where tracing is switched on, records the support assistant's runs for debugging.
• Google (Gemini): makes artwork from style words, colours and motifs, not your brand name. Where image generation from a logo is switched on for a preview, the scanned logo and brand text are also sent to an image model (Google Gemini or Azure OpenAI).
• Stripe: payment, tax calculation and the shopper details you enter at checkout.
• Printful: prints and ships orders and makes product mockups; receives the recipient's name, address, phone, email, the items and the artwork.
• SendGrid (Twilio): sends our account and order emails, such as email confirmation, password reset, the notice that a store is live and order confirmations; receives the recipient's email address and the message content.

This list may change as we add or replace providers; we will update this page when it does.

We do not use customer content (uploads, logos, store content) to train AI models. If this changes we will update this notice and ask for your permission before using your content.

Each handles the information under its own terms and policy. None of our AI providers train their models on your content under the plans we use. Providers may retain content for a limited period to detect abuse.

Counting visits to a shop

When you open a published Amp shop, we count the visit for the shop owner, so they can see how many people looked at the shop and its products. We use no cookie and no browser storage for this, and nothing is stored on your device. To tell one visitor from another on the same UTC day, we compute a pseudonymous salted hash from the shop, your network address and your browser details. The salt is random, is held only in short-lived memory storage for about 36 hours, and changes with each UTC day, so, once the day's salt is discarded, the hash cannot practically be linked back to your address, or to a visit on another day or to another shop. Your network address and browser details are used only while the visit is counted: they are not stored or logged, and not shared with anyone else. To limit how many requests one source can send, we also hold a keyed token derived from your network address (not the address itself) for about two minutes. The country of a visit is supplied by our network edge, from your network address, and nothing finer than the country is kept. The shop owner sees only totals and a country table in which small groups are combined, never an individual visitor.

The hashes are kept only to avoid counting the same visitor twice in a day. A daily clean-up deletes every hash made on a UTC day that is more than two days old, so each hash is deleted at about 01:30 UTC on the third day after the day it was made. A hash therefore lives for at most about three days and two hours. If a clean-up run fails, deletion waits for the next run. The daily totals (visits, product views, unique visitors and country counts) contain no hash and are kept.

Photos of people

Photographs on a preview come only from the page you point us at (previews also show artwork we generate). If you are in a photograph on a preview page, you can remove all photographs from that preview with one click on the preview page, with no sign-in. For anything else, write to support@ampmybrand.ai. A site owner can ask us to take a preview or store down at any time at the same address.

Security and audit records

Information is stored on Azure services with access limited by role. Passwords are hashed; access to our own systems uses managed identities. Every change made through the service is recorded in an audit log with who did it, when, and the network address and browser details seen at the time. Audit records are kept without an expiry because they are how we show and investigate what happened; for that reason they are not erased when an account is deleted (see our data deletion page).

How long we keep things

• Previews: 14 days (brand photographs 7 days) unless claimed; claimed previews stay with the store.
• Accounts, stores, products: without an expiry today. See the deletion page for what you can ask us to do.
• Orders and shopper details: kept as long as needed for tax and accounting, at least 7 years.
• Audit and security records: without an expiry.
• Visitor hashes used to count shop visits: deleted at about 01:30 UTC on the third day after the day they were made, so a hash lives for at most about three days and two hours. Daily visit totals, which hold no hash: without an expiry today.
• Server logs: 30 days. Database backups: the PostgreSQL database for 7 days; the Cosmos DB database in automatic backups taken every 4 hours and kept for 7 days, stored in a second region; uploaded image files have no separate backup. Order and support mail records: 12 months.

Social connections

Today, links to social profiles on a store are ordinary links; we do not connect to any social account.

Your rights

We honour access, correction and deletion requests from everyone, wherever you live. California and other US state privacy laws apply as relevant. You can ask to see the personal information we hold about you, correct it, have it deleted, or object to how we use it. To ask, write to support@ampmybrand.ai. We respond to requests within the time required by applicable law. We may need to confirm you control the email address on the account. There is no automatic data export; we will send you the information we hold, by email. If you are unhappy with an answer you can complain to the privacy regulator where you live.

Children

Amp is not directed at children, and an account holder must be at least 18. A store for a youth team, club or school is managed by an adult, such as a coach, administrator or parent, who is the account holder. Shoppers are the adults who buy. We do not knowingly collect personal information from children; if we learn we have, we delete it. Team names and logos may appear in a store, but a store must not publish a child's name or photo without the consent of a parent or guardian.

Changes and contact

We will update this page and its date when our practices change. Contact: Entelligage Inc., 440 N Barranca Ave #4815, Covina, CA 91723, support@ampmybrand.ai.