Privacy policy
How we collect, use and protect your data. The short version: it's yours, we don't sell it, and it's never used to train shared AI models.
What we collect
Information you give us directly — name, email, company, and the content you or your team put into your workspace (CRM records, tasks, documents, and similar). Usage telemetry (pages viewed, features used) via PostHog, to improve the product. If your workspace admin turns on team activity monitoring, app-usage time and active windows — never message content, file content, or keystrokes, and never without that admin's explicit consent (enforced in the API — capture is blocked until consent is recorded). If you chat with Ami, our AI assistant, we store that conversation history. We never collect your workspace's customer data for our own purposes.
How we use it
To run the service, bill you, communicate with you about your account, and improve the product. We do not sell your data. We do not use your workspace data to train shared AI models — Ami runs against the AI provider your workspace is configured for (for example Anthropic, OpenAI, Google Gemini, or others), and that provider processes your prompts only to return a response, per its own data-processing terms.
How long we keep it
Workspace and account data: for the life of your subscription, plus 30 days — deleted manually on request once you cancel or ask us to (email privacy [at] amdital.com). Access and activity-monitoring logs: 90 days, deleted automatically on a nightly schedule. Ami conversation history and audit logs: 1 year, same automatic nightly deletion. Billing records: 7 years (tax law requires this — we can't delete these early). Data you export: deleted manually 30 days after export. The full policy, including which categories are automatic vs. manual, is public in our data retention policy.
Who we share it with
Our application, database and file storage run on a dedicated cloud hosting provider, not a shared cloud data warehouse. The processors we use for specific jobs: Stripe (billing), Maileroo (transactional email), PostHog (product analytics), and New Relic (error tracking and performance monitoring). If your workspace enables an integration you control — like syncing attendance from GreytHR — that data flows only because you turned it on, and only for that purpose. We don't sell access to any of this, and we don't hand it to anyone outside this list.
Cookies (marketing site)
On this marketing site we use PostHog and Google Analytics (loaded through Google Tag Manager). Before you choose in the cookie banner, both run without cookies: Google Analytics receives cookieless measurement pings with every analytics and advertising consent signal set to denied, and PostHog counts page views only, in memory, without writing cookies or local storage. If you accept, both may set cookies, and PostHog also records clicks, form submissions, page performance, errors and browser console messages, and may record your session with form inputs masked. If you reject, neither loads on later pages or visits. If they were already running on the open page, PostHog stops capturing immediately and, if Google Tag Manager had loaded, the page reloads without it. Rejecting also deletes the Google Analytics and PostHog cookies and PostHog storage set during an earlier accept, where your browser lets this site remove them; PostHog keeps only a flag recording that you opted out. We store your banner choice on your device so we can honour it, and you can change your choice at any time via Cookie settings in the footer. If your browser blocks this site from storing data, your choice applies only to the open page: PostHog stops capturing, but Google Tag Manager is not reloaded away, so Google Analytics keeps sending cookieless pings until you leave the page, and the banner asks again on your next visit. When you start a free trial, our server records the signup with a random identifier and no cookie. Our product dashboard (once you're a customer) only uses PostHog and does not run ad-tracking pixels.
Your rights
You can ask us to export your workspace data (the Settings → Privacy page shows the current status and how to request it), ask what we hold about you, correct it, or ask us to delete it. Under GDPR this includes access, correction, erasure, and portability, regardless of where you're located. We respond to requests within 30 days. Contact privacy [at] amdital.com.
Security
Workspace data is scoped to your workspace by the application on every query (database row-level security backs this up on some access paths but does not cover all of them), traffic is encrypted in transit, and access to production requires authentication through our own JWT-based auth system — we don't rely on a third-party auth provider. We are not currently SOC 2, ISO 27001, or HIPAA certified; if that's a hard requirement for your organisation, talk to us before you sign up. Full detail on our security page.
Last updated: October 9, 2026. For questions, contact privacy [at] amdital.com.