Privacy Policy

This Privacy Policy explains how Adforn LLC, which provides the Amblash AI platform ("Amblash AI", "we", "us" and "our"), collects, uses, shares and protects personal information. Amblash AI is a SaaS (software as a service) platform of Adforn LLC and is not a separate legal entity. Our registered address is 1007 Orange St, Wilmington, DE 19801.

This policy applies to our public website at https://amblash.ai (the "Website") and to the Amblash AI application and the services we provide through it (together, the "Services"). It covers three groups of people: visitors to the Website; our customers and the people they invite to use the Services ("users"); and the business contacts that the Services find for our customers' campaigns ("prospects").

Words defined in our Terms of Service have the same meaning here.

1. Information We Collect

We collect only the information we need to provide and run the Services.

1.1 Information You Provide

Account information. When you create an account we collect your first and last name, your work email address, your company name and a password. Your company's website address is taken from the domain of your work email address.
Profile information. Any details you add to your profile, such as a profile photo.
Team information. When an Admin invites a colleague, we collect that colleague's email address and the permissions the Admin gives them.
Company and campaign information. The description of your business that the Services build from your company's website and that you may edit; your campaign descriptions and email sequences; and the names and email addresses of the people your emails are sent from.
Sending domain information. The domain your company registers for sending and the records used to verify it.
Billing information. Your plan, billing term, invoices and payment history. Your card details are entered on pages hosted by Stripe and are held by Stripe, not by us.
Messages to us. What you send us when you email hello@amblash.ai.

Information about prospects. To run our customers' campaigns, the Services find business contact information through our proprietary data pipeline. We process this information on behalf of the customer whose campaign it is for, and that customer is responsible for it as controller. For a prospect this may include their name, job title, employer, business email address, and the location of the person or their company. For a minority of prospects it may also include a personal email address or a mobile number. We also keep a record of the emails the Services write and send to each prospect, and of delivery events for those emails, such as a message that could not be delivered.

1.2 Information Collected Automatically

Sign in and device information. When you sign in, we record information about the browsers and devices on which your account is signed in, including a short description of the browser, its network (IP) address and when it was last used. You can see this list in your account.
Activity within the Services. Records of actions taken in your account, such as campaign activity, which the Services show you.
Cookies and analytics. The cookies described in our Cookie Policy, and the usage information that Google Analytics collects, as Section 5 explains.

2. How We Use Information

We use your information to:

create and run your account, and confirm your identity when you sign in or take a sensitive action;
provide the Services, including building your company description, finding prospects for your campaigns, having our proprietary AI engine write emails, and sending them through our email delivery infrastructure;
process payments and manage your subscription through Stripe;
send you emails that are needed to run your account, such as verification codes, password resets, invitations and notifications about your account and campaigns;
answer your questions and provide support;
understand how visitors and users move through the Website and the Services, so we can improve them;
protect the Services, our customers and prospects against fraud, abuse and security threats;
enforce our Terms of Service; and
comply with our legal obligations, including tax and accounting requirements.

We use information about prospects only to provide the Services to the customer whose campaign it is for, on that customer's behalf, and for the security and legal purposes listed above.

The Services decide which prospects qualify using fixed rules. They do not make any decision about a person that has legal effects on that person or that affects them in a similarly significant way.

3. How We Share Information

We do not sell your personal information. We may share information with:

Subprocessors. Amazon Web Services (AWS), which hosts our infrastructure; Stripe, which processes payments; and Google, which provides Google Analytics for our website. Our list of subprocessors is published at https://amblash.ai/subprocessors.
Your own company. Users of the same company account share one view of the company's campaigns, prospects and company description. An Admin can see who is on the company account.
Prospects. When a campaign sends an email, the email goes to the prospect in your company's name, from your company's sending domain.
Legal and safety recipients. Courts, regulators, law enforcement or other parties where the law requires it, or where we believe in good faith that disclosure is needed to protect the rights, property or safety of Amblash AI, our customers, prospects or the public.
A successor business. A buyer or successor if we are involved in a merger, acquisition, financing or sale of assets. That party will be bound by the commitments in this policy for the information it receives.
Anyone else, with your consent.

4. Cookies

We use cookies and similar technologies to:

keep you signed in to the Services and protect your account;
remember a small number of display choices within the application; and
measure how the Website and the Services are used, through Google Analytics.

Our Cookie Policy, at https://amblash.ai/cookie-policy, lists the cookies we use and explains how to control them.

5. Analytics and Experimentation

5.1 Google Analytics

The Website and the Amblash AI application both load Google Analytics, a measurement service provided by Google. It tells us, in aggregate, which pages are visited, how people move between them and where they have difficulty. Google Analytics uses cookies and collects information such as the pages you view, the time you spend on them, your browser and device type, and your approximate location derived from your IP address. Google processes this information under its own privacy policy, at https://policies.google.com/privacy. You can stop Google Analytics from collecting information about you as our Cookie Policy explains.

We do not currently ask for your consent before Google Analytics loads.

5.2 Product Analytics

We do not use any separate product analytics tool. Apart from Google Analytics, which also loads within the application as described above, we do not use any service to track how individual users use features of the Services. We do not run experiments that show different users different versions of the Services.

5.3 Session Recording

We do not use session recording. We do not record your screen, your mouse movements, your clicks or your keystrokes.

6. Data Retention

We do not delete your account records after a set period. Your company's records in the Services, including campaigns, prospects, activity records, analytics and your company description, are kept for as long as your company account exists. Where the Services let you remove a record, it is removed when you remove it.

When your company's account owner asks for the account to be deleted, the deletion runs at the end of the current paid period or 30 days after the request, whichever comes first. It removes the company account, every user's account on it, and the company's records, including its prospects, campaigns and sent email records, and it cannot be undone. We also withdraw the registration of your sending domain that we created with our email delivery infrastructure. Invoices and payment records are kept to meet tax and legal requirements, in line with the rules that apply to them, together with the matching records Stripe holds in its own systems.

Information that Google Analytics collects is kept by Google according to the retention settings of our Google Analytics account.

7. Your Rights

Depending on your location, you may have rights to:

know what personal information we hold about you and receive a copy of it;
correct information that is inaccurate or incomplete;
have your information deleted;
receive your information in a portable format;
object to, or ask us to restrict, how we use your information;
withdraw consent, where we rely on your consent, without affecting what we did before you withdrew it; and
complain to a data protection authority.

Many of these you can exercise yourself within the application: you can edit your profile, export your own account data, and, if you are the account owner, delete the company account. For anything else, email hello@amblash.ai. We will need to confirm your identity before we act on a request, and we will respond within the time the law requires. We will not treat you differently for exercising your rights.

If you are a user of a company account, some requests, such as removing you from the company, are for your company's Admin, and we may refer you to them.

7.1 California Residents

If you live in California, we honor the rights the California Consumer Privacy Act gives you. In the last 12 months we have collected the categories of information described in Section 1: identifiers (such as name, email address and IP address); professional or employment information (such as job title and employer); commercial information (such as plan and payment history); internet activity (such as pages viewed on the Website and in the application); and approximate location. We collected them from you, from your company's users, from our proprietary data pipeline and automatically, for the purposes in Section 2, and we disclosed them for business purposes to the recipients in Section 3.

You have the right to know what personal information we collect, use and disclose; to have it deleted; to have it corrected; and not to be discriminated against for exercising these rights. We do not sell personal information, and we do not use or disclose sensitive personal information for any purpose that would give you a right to limit it. You, or an agent you authorize, can make a request by emailing hello@amblash.ai. We will ask you, or your agent, for information to verify the request.

7.2 European Residents

If you are in the European Economic Area, the United Kingdom or Switzerland, we honor the rights the General Data Protection Regulation and the equivalent laws of the United Kingdom and Switzerland give you, including all the rights listed at the start of Section 7. We rely on these legal bases:

Contract, to provide the Services to you and manage your account and subscription;
Legitimate interests, to run and improve the Services, to measure use of the Website and the Services, and to keep them secure. You may object to processing based on legitimate interests;
Legal obligation, to keep tax and accounting records and to respond to lawful requests; and
Consent, where the law requires it.

For information about prospects, the customer whose campaign it is for is the controller and decides the legal basis for its use.

You have the right to complain to the data protection authority where you live or work, or where you believe a breach of your rights took place.

8. Security

We use technical and organizational measures designed to protect personal information from loss, misuse and unauthorized access. These include encrypted connections between your browser and the Services, and access to your company's data limited to your company's own users according to the permissions your Admin sets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You help protect your account by keeping your password private and signing out of devices you no longer use.

Our Security page, at https://amblash.ai/security, describes how we protect the Services in more detail. If a breach of security affects personal data we process on behalf of a customer, we will notify that customer as our Data Processing Agreement describes.

9. International Transfers

Adforn LLC is based in the United States. Personal information may be transferred to, and processed in, the United States and other countries where we or our service providers operate, whose data protection laws may differ from those where you live. Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on the standard contractual clauses approved by the European Commission, together with the United Kingdom's International Data Transfer Addendum or International Data Transfer Agreement, and the adaptations required under Swiss law.

10. Anti Spam and Unsolicited Messages

We send users the emails needed to run their account and their campaigns.

Our customers use the Services to send business emails in their own name, from their own verified domain. Each customer is responsible under our Terms of Service for complying with the laws on commercial email that apply to it, such as the CAN-SPAM Act in the United States and the equivalent laws of other countries, including having a lawful basis to contact each recipient and stopping outreach to anyone who asks.

We do not permit the Services to be used for spam, and we may suspend or terminate a customer who uses them that way.

11. Children

The Services are for businesses and are not directed at children. You must be at least 18 years old to use them. We do not knowingly collect personal information from anyone under 18. If you believe we have, please contact us at hello@amblash.ai and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy. We will post the updated policy on the Website with a new "Last Updated" date and an "Effective" date. For a material change, we will also email the account owner of each company account before it takes effect. The previous version applies until the new Effective date.

13. Contact

Questions and requests about this Privacy Policy, or about your personal information, can be sent to:

Adforn LLC (Amblash AI platform)
1007 Orange St, Wilmington, DE 19801
Email: hello@amblash.ai

Last Updated: September 2026

Effective: October 2026