Privacy Policy

Amara helps small businesses spot buyer emails that need a reply and prepares draft responses. This policy explains what data we handle, why, and your rights under the UK GDPR and the Data Protection Act 2018.

Who we are

Amara is the data controller for your account information and a data processor for the business data you connect. Contact: [privacy contact email to confirm].

What we collect

• Account details: name, email address and team role.
• Connected service data you authorise: emails from Microsoft 365 and Gmail; orders, products and customers from Shopify; contacts and deals from Attio.
• Activity in Amara: card decisions, the Ledger, outcome checks and settings.
• Basic technical data needed to run the service securely.

How we use it

• To find buyer emails, rank them and prepare draft replies.
• To answer your questions in Ask Amara and measure outcomes.
• To keep the service secure and fix problems.

Our lawful bases are performance of our contract with you and our legitimate interest in running a secure service. We do not sell your data or use it for advertising.

What Amara never does

Amara never sends emails, makes payments, deletes anything or changes prices. Approved replies are only saved to your own drafts folder. Connections use read-only access wherever the provider allows it.

AI processing

Email content is sent to AI models to sort emails and write drafts. It is processed only to provide the service and is not used to train public models.

Storage and security

Connection keys are stored encrypted. Access within your team is limited by role. Our default is to host data in the UK [hosting location to confirm].

Retention

We keep your data while your account is active. When you disconnect a service, we delete its access key. When you close your account, we delete your data within 30 days, unless we are required by law to keep it.

Your rights

You can ask to access, correct, delete, restrict or export your data, and you can object to our processing. To do so, contact us. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

We will tell you about important changes to this policy before they take effect.