1. Who This Policy Covers
This policy applies to personal information about:
- Customer users: people who use Amber on behalf of a brand that subscribes to Amber, including account administrators and billing contacts.
- Partners: people at a brand's suppliers, factories, agents, inspection companies, freight forwarders, customs brokers, and other businesses in its supply chain who use Amber after being invited by a brand. Partners use Amber under the Partner Terms at amber.ai/legal/partner-terms.
- Prospects and contacts: people who request a demo, contact us, or otherwise communicate with us about Amber.
- Website visitors: people who visit amber.ai.
2. Information Our Customers Put Into Amber
Brands use Amber to manage their products, suppliers, purchase orders, documents, and shipments. The information a brand puts into Amber, connects to Amber, or generates in Amber, including information about its employees and Partners, is "Customer Data".
We process Customer Data on behalf of the brand, as its service provider, under our agreement with that brand and our Data Processing Addendum at amber.ai/legal/dpa. The brand, not Amber, decides how that information is used, and the brand's own privacy policy applies to it. If you are a Partner or other individual and have a question or request about Customer Data, please contact the brand you work with. If you contact us, we will direct your request to that brand.
3. Information We Collect
Information you give us.
- Account information: name, business email address, job title, company, and log-in details.
- Billing information: billing contact, billing address, and tax information. Payment card details are collected and stored by our payment processor, Stripe, and are not stored by Amber. If you pay by invoice, payment is processed through our banking provider.
- Communications: information you provide when you request a demo, contact support, sign up for product updates, or otherwise communicate with us.
- Calls and meetings: when you join a call or meeting with Amber, we may record it and create notes and transcripts using meeting assistant tools. We tell participants at the start of a call when it is being recorded.
Information we collect automatically.
- Usage and device information: IP address, browser and device type, operating system, approximate location derived from IP address, pages and features used, and dates and times of access.
- Log and security information: records of log-ins, actions in the Services, and security events.
Information from third parties.
- Sign-in providers: if you sign in with Google or Microsoft, we receive your name, email address, and profile picture from that provider.
- Your organization: if a brand or Partner invites you to Amber, we receive your name and email address from them.
We do not collect sensitive personal information about you for our own purposes. Log-in credentials are used only to authenticate you and secure your account.
4. How We Use Information
We use personal information to:
- provide, operate, and support Amber, including creating and managing accounts;
- process payments and send invoices and billing notices;
- communicate with you about your account, security, changes to our terms, and support requests;
- send product updates if you sign up for them, which you can unsubscribe from at any time;
- respond to demo requests and inquiries;
- understand how Amber is used so we can improve it;
- create aggregate performance ratings of Partner businesses, as described in the Partner Terms, which do not include personal information about individuals;
- secure Amber and prevent fraud and abuse; and
- comply with legal obligations and enforce our agreements.
We do not use personal information for targeted advertising, and we do not sell personal information.
5. How We Share Information
We share personal information only as follows:
- Service providers that help us operate Amber, such as cloud hosting, AI model providers, payment processing, email delivery, meeting recording and transcription, bug reporting, and customer support tools. Our current providers that process Customer Data are listed at amber.ai/legal/subprocessors. Service providers may use personal information only to provide services to us.
- Within your organization and the businesses you work with: your name, contact details, and activity may be visible to others in the account you belong to, and to the brands and Partners you work with in Amber.
- Integrations you or your organization enable, such as accounting, commerce, and email platforms, as directed by the account.
- Legal and safety: when we believe disclosure is required by law or legal process, or needed to protect the rights, property, or safety of Amber, our customers, or others.
- Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
We do not sell personal information and do not share it for cross-context behavioral advertising.
6. AI Features
Amber's AI features use models from third-party providers, which are listed at amber.ai/legal/subprocessors. We use these providers under commercial terms that do not permit them to use the information we send them to train their models. We do not use Customer Data to train AI models that are made available to other customers.
7. Google and Microsoft Account Data
When a user connects a Google or Microsoft account to Amber, Amber accesses data from that account only to provide the features the user has enabled, such as reading email messages to surface relevant purchase order and supplier information, and sending email messages on the user's behalf. This data is Customer Data.
Amber's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Amber does not use Google or Microsoft user data for advertising, does not sell it, does not use it to create aggregated or benchmark data, and does not use it to develop, improve, or train generalized or foundational AI models. People at Amber may access this data only where needed for security, to comply with law, to provide support the user requests, or with the user's explicit consent.
Amber completes the Cloud Application Security Assessment (CASA) Tier 2, the independent security assessment Google requires for applications that access restricted Google user data.
You can revoke Amber's access at any time in the security settings of your Google or Microsoft account, or by disconnecting the account in Amber.
8. Cookies
Amber uses only cookies and similar technologies that are necessary to operate the website and the Services, such as keeping you signed in, securing your session, and protecting against abuse. We do not use analytics cookies, advertising cookies, or tracking pixels. You can control cookies through your browser settings, but disabling necessary cookies may prevent parts of Amber from working. More detail is in our Cookie Policy at amber.ai/cookies.
9. How Long We Keep Information
We keep personal information for as long as needed for the purposes in this policy:
- Account information: while the account is active, and for a reasonable period afterward to handle questions, disputes, and legal requirements.
- Billing records: as long as required for tax and accounting purposes.
- Communications and prospect information: for as long as it is relevant to our relationship, after which we delete it.
- Usage, log, and security information: for as long as needed for security, troubleshooting, and improving Amber.
Customer Data is kept and deleted under our agreement with the relevant brand.
10. Security
We use administrative, technical, and physical safeguards designed to protect personal information, as described at amber.ai/security. No system is completely secure, and we cannot guarantee the security of information transmitted to or stored in Amber.
11. International Users
Amber is based in the United States, and personal information is hosted in the United States. Amber is used by people around the world, including Partners outside the United States. If you use Amber from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
12. Your Choices and Rights
Choices. You can update your account information in your account settings, and unsubscribe from product updates using the link in any such email. We will still send you messages about your account, security, and our terms.
Rights. Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to appeal our decision on your request. We will not discriminate against you for exercising these rights.
How to make a request. Email legal@amber.ai. We will verify your request using information associated with your account or our records before responding. You may use an authorized agent, who must provide proof of authorization. If we deny your request, you may appeal by replying to our decision, and if your appeal is denied you may contact your state attorney general.
If your request concerns Customer Data, we will refer you to the brand that controls it, as explained in Section 2.
13. Children
Amber is a business service and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
14. Changes to This Policy
We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date. If we make a material change, we will notify account holders by email or in Amber before it takes effect.
15. Contact Us
Amber Tech Inc.
2261 Market Street, Suite 85864
San Francisco, CA 94114, United States