AmplifAI

Privacy Policy

Last updated: March 13, 2026

1. Introduction

AmplifAI TMRW ("we", "our", "us") is an AI-powered social media analytics platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

  • Email address
  • Full name (optional)
  • Profile avatar (optional)
  • Password (hashed, never stored in plain text)

Organization Data

  • Organization name and settings
  • Team member roles (owner, admin, editor, viewer)

Connected Social Media Accounts

When you connect a social media platform, we collect data via official platform APIs using OAuth authorization:

  • Facebook & Instagram — Page insights, post metrics, audience demographics, Stories, Reels, follower counts
  • X (Twitter) — Tweet metrics (likes, reposts, replies, impressions), profile metrics
  • YouTube — Video views, watch time, subscriber changes, traffic sources, audience demographics
  • TikTok — Follower count, video views, likes, comments, shares

Social Listening Data

  • Public mentions matching your configured queries
  • Author metadata (public username, follower count)
  • Sentiment analysis results
  • Geographic and topical data from public posts

3. How We Use Your Information

  • Display analytics dashboards and reports
  • Generate AI-powered insights and recommendations
  • Track social media performance across platforms
  • Monitor brand mentions and sentiment
  • Provide competitor benchmarking (using public data only)
  • Send scheduled reports and notifications
  • Improve and maintain the service

4. Data Storage & Security

Your data is stored securely using Supabase infrastructure with row-level security policies. OAuth access tokens are encrypted. All data is transmitted over HTTPS/TLS encryption.

  • Database hosted on Supabase with row-level security (RLS)
  • OAuth tokens encrypted at rest
  • Passwords hashed using industry-standard algorithms
  • All API communications encrypted via TLS
  • Role-based access control within organizations

5. Third-Party Services

We integrate with the following third-party services:

  • Supabase — Authentication, database, and storage
  • OpenAI — AI-powered analytics insights generation
  • Meta, X, Google, TikTok APIs — Social media data retrieval
  • Vercel — Application hosting and deployment

6. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

  • With team members within your organization based on their assigned role
  • With third-party service providers necessary to operate the platform (as listed above)
  • When required by law or legal process
  • To protect our rights, safety, or property

7. Data Retention

We retain your data for as long as your account is active. Social media metrics are stored historically to provide trend analysis. When you disconnect a social account, we stop collecting new data for that account. When you delete your account, we remove all associated personal data within 30 days.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Disconnect any social media account at any time
  • Export your data
  • Withdraw consent for data processing

9. Cookies

We use essential cookies for authentication and session management (e.g., OAuth state verification). We do not use third-party tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at privacy@amplifai.com.