Privacy Policy

We collect the following categories of information:

• Account information: your name, email address, password (stored in hashed form), company name, and details you provide when you sign up, sign in with Google, or are invited to a workspace.
• Workspace content: the agents, prompts, knowledge base documents, workflows, message templates, campaigns and settings you create in the Services.
• Communications data: phone numbers, call audio and recordings, transcripts, call summaries, SMS, WhatsApp and email messages, and related metadata (such as timestamps, duration and delivery status) processed when your agents talk to or message your customers.
• Contact data: names, phone numbers, email addresses and other details of your customers or leads that you upload or that are collected during conversations.
• Integration data: information we receive when you connect third-party services, such as your Meta business portfolio and WhatsApp Business Account, Google or Microsoft Outlook calendars, and other integrations you enable.
• Billing information: your plan, invoices and payment status. Card details are collected and stored by our payment processor, Stripe; we do not store full card numbers.
• Usage and technical data: IP address, browser and device type, language preference, pages visited, log data and cookies used to keep you signed in and to operate the Services.

We use personal information to:

• Provide, operate and maintain the Services, including placing and receiving calls and sending and receiving messages on your behalf.
• Create and manage your account and workspaces, and authenticate you.
• Connect and run the integrations you enable, such as WhatsApp messaging and calendar booking.
• Process payments and manage subscriptions and usage-based billing.
• Provide customer support and send service-related notices, such as security alerts and billing messages.
• Monitor, secure and improve the Services, and detect and prevent fraud, abuse and violations of our terms.
• Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use it for third-party advertising.

When you connect WhatsApp through Meta's Embedded Signup, you authorize Ambrax to access your WhatsApp Business Account through Meta's APIs. We access your business portfolio ID and name, business verification status, WhatsApp Business Account ID, phone numbers and their display names and verification status, business profile details, message templates and their approval status, and the messages sent to and from your connected numbers, including their delivery status.

We use this data only to connect your WhatsApp numbers, send and receive messages on your behalf, run the messaging agents you configure, manage your message templates, and show you delivery and conversation history. WhatsApp messaging is delivered through Twilio, our WhatsApp Business Solution Provider.

We do not sell data obtained through Meta's platform, do not use it for advertising, and do not share it with third parties except the service providers needed to deliver the Services. You can disconnect your WhatsApp Business Account at any time from the Integrations page, or remove our app from your Meta business settings, and request deletion of the related data as described in the Data deletion section below.

If you connect a Google account, we access only the calendar data needed to check your availability and to create, update or cancel events that your agents book. Ambrax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train AI models, and we do not transfer it to others except as needed to provide the Services, for security, or to comply with law.

The Services use AI models to understand speech, generate replies, transcribe and summarize conversations, and analyze sentiment. To do this, conversation content is sent to AI and voice providers acting on our behalf. We do not use your workspace content or your customers' conversations to train our own models, and we select providers whose terms restrict them from using API data to train their models.

We share personal information only as follows:

• Service providers that process data on our behalf, including cloud hosting and storage (Amazon Web Services), telephony and messaging (Twilio, Telnyx, Meta/WhatsApp), voice AI (ElevenLabs), language models (OpenAI, OpenRouter), payments (Stripe), email delivery (Postmark), customer support (Intercom), and calendar and automation integrations you choose to connect (Google, Microsoft, Zapier).
• Other users of your workspace, according to the roles and permissions set by your workspace administrators.
• Legal and safety: when required by law, legal process or a government request, or to protect the rights, property or safety of Ambrax, our users or others.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Privacy Policy.
• With your consent or at your direction.

When businesses use the Services to talk to or message their own customers, that business decides what information is collected and how it is used, and Ambrax processes it on the business's behalf. If you are a customer of a business that uses Ambrax and have questions about your data, please contact that business directly. We will assist them in responding to your request.

We keep personal information for as long as your account is active or as needed to provide the Services. Workspace administrators can delete conversations, recordings, contacts and other content at any time. When an account is closed, we delete or anonymize its data within a reasonable period, unless we must keep certain records (such as invoices) to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements.

You can request deletion of your personal information, including any data we received from Meta, WhatsApp or Google, at any time:

• Delete specific content, such as conversations, contacts or knowledge base documents, directly in the dashboard.
• Disconnect WhatsApp or calendar integrations from the Integrations page. This stops further access to those accounts.
• Email privacy@ambrax.ai from the address associated with your account with the subject "Data deletion request". We will confirm your request and complete the deletion within 30 days, except for records we are legally required to keep.

We use technical and organizational measures to protect personal information, including encryption in transit, access controls based on roles and permissions, and restricted access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We and our service providers may process information in countries other than the one where you live. When we transfer personal information internationally, we take steps to ensure it remains protected as described in this Privacy Policy and as required by applicable law.

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at privacy@ambrax.ai. We may need to verify your identity before responding. You may also have the right to complain to your local data protection authority.

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use essential cookies to keep you signed in, remember your language preference and secure the Services. Our support and payment providers may set their own cookies when you use their features. You can control cookies through your browser settings, but disabling essential cookies may stop parts of the Services from working.

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, for material changes, notify you by email or through the Services.

If you have questions about this Privacy Policy or our data practices, contact us at privacy@ambrax.ai.