Privacy Notice

Last updated: 25 August 2026

Amphora is an AI-assisted calendar service. This notice explains what personal data we process, why we process it, and the choices available to you.

Who we are

Amphora is the controller of personal data processed through the service. Questions or data-rights requests can be sent to amphorahq@gmail.com.

Data we process

• Account data: email addresses, authentication records, account preferences, and subscription status.
• Calendar and project data: calendars, events, project and calendar details, contacts included in event information, and changes you make or approve.
• Content you provide: forwarded emails, messages, files, schedules, and the prompts and responses used with Amphora's AI features.
• Connected-service data: data you authorise Amphora to read from services such as Google Calendar, together with identifiers and tokens needed to maintain the connection.
• Technical and usage data: IP address, device and browser information, session cookies, request metadata, diagnostic logs, performance measurements, and error reports.
• Payment data: billing status and transaction identifiers. Payment-card details are handled by our payment processor rather than stored by Amphora.

How and why we use data

We process data to provide and secure the service, synchronise calendars, extract useful information from content you submit, answer your requests, process payments, provide support, diagnose faults, monitor performance, prevent abuse, and meet legal obligations.

Our legal bases are performance of our contract with you, our legitimate interests in operating and improving a secure service, compliance with legal obligations, and consent where consent is required. You may disconnect an optional integration or withdraw consent at any time, without affecting processing that already occurred lawfully.

AI processing and automated decisions

Amphora uses AI service providers to process content for user-facing features such as extracting schedules and answering calendar questions. AI output may be incomplete or incorrect. Calendar mutations proposed by Amphora's conversational AI require user approval. Amphora does not use solely automated decisions that produce legal or similarly significant effects.

Google user data

When you connect a Google service, Amphora accesses only the data covered by the permissions shown during Google's consent flow and uses it to provide the connected feature. Amphora does not sell Google user data or use it to train general-purpose AI models.

Amphora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Operational logging

Authorised administrators may use Google Cloud Logging and connected analysis tools, including ChatGPT, to investigate errors, security events, and service performance. These tools may process limited personal data present in operational logs. Access is restricted to operational purposes and governed by account permissions.

Who receives data

We share data only as needed with service providers supporting cloud hosting and storage, AI processing, email delivery and intake, payments, error monitoring, customer support, and authorised operational analysis. We may also disclose data when required by law, to protect rights or safety, or in connection with a business transfer subject to appropriate safeguards.

Some providers may process data outside the United Kingdom. Where required, we rely on adequacy regulations or approved contractual safeguards for international transfers.

Retention and security

We retain account and service data while your account is active and afterwards only for as long as reasonably necessary for the purposes described above, including backups, security, dispute resolution, and legal requirements. Retention periods vary according to the type and sensitivity of the data. Operational logs are generally kept for shorter periods than core account records.

We use technical and organisational safeguards designed to protect personal data. No online service can guarantee absolute security.

Your rights

Depending on applicable law, you may have rights to access, correct, erase, restrict, or receive a copy of your personal data, and to object to certain processing. You may also withdraw consent where processing relies on consent. Contact us to exercise these rights.

If you are in the UK, you may complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

Cookies

Amphora uses cookies and similar storage that are necessary to authenticate users, maintain sessions, protect the service, and remember essential settings.

Changes to this notice

We may update this notice as the service or legal requirements change. Material changes will be communicated through the service or by another appropriate method, and the date above will be updated.