AMBI PRIVACY NOTICE

CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you as required by applicable data protection laws (such as by notifying you within the Services or posting notice of such changes on the Services) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

COLLECTION AND USE OF INFORMATION

When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services and to maintain our business relationship, as a matter of our legitimate interests, including by enhancing the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service and protecting our rights and the rights of our employees, users or other individuals. To the extent the laws in your jurisdiction do not recognize the legal basis of legitimate interest or another legal basis specified below for a particular purpose, you consent to the processing of your personal data for that purpose by consenting to the processing in this Privacy Notice.

Information You Provide to Us

Some features of the Services may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

• Contact information, such as your phone number and email address. We use this information to create and maintain your account and provide the Services, as required to perform our contract with you to provide the Services. We also use this information to send you marketing communications that we think may be of interest to you, with your consent where legally required.
• Account information, such as username, profile details, language, account ID, and security questions that you select and the answers you provide and other information you add to your account or profile. You may create or access your account using email registration or by signing in with a third-party provider such as Google or Apple. We use this information to provide the Services, as required to perform our contract with you. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Recordings and user content, such as audio recordings, transcripts, speaker labels, summaries, prompts, notes, uploaded files, photos, documents and messages you choose to provide / upload when using the Services, together with related metadata such as file names and timestamps, submitted by you through our recording, chat, capture and content-creation features, as required to perform our contract with you.
• Any information you choose to input into our AI-powered tools (“Input”), which we use to generate and output new information or content (“Output”) — such as transcripts, summaries, answers, action items, labels, extracted fields, search results, memory items — as a part of the Services, as required to perform our contract with you.
• Memory and personalization information, such as information you save or ask us to remember, or that the Services derive from your interactions, including preferences, recurring context, profile details, extracted facts and personalization signals, which we use to personalize Outputs, maintain context and organize information, as required to perform our contract with you and in our legitimate interests to provide and improve the Services.
• Tasks, reminders and proactive engagement information, such as task titles, due dates, statuses, source references, reminder rules, notification settings, completion history, and records of proactive prompts (for example, “Heads Up,” “Suggested” and “Need You” interactions), which we use to provide task management, reminders and proactive features, as required to perform our contract with you.
• Sharing and collaboration information, such as recipient information, sharing links, access controls, when you choose to share recordings, summaries, links or other content with third parties (including those that do not have a registered account for the Services), as required to perform our contract with you.
• Actions taken on your behalf in other services, such as the content, recipients, destination account, action parameters, confirmation records, status, timestamps and action logs generated when you ask Ambi to take an external action (for example, sending an email, modifying a calendar event, creating a document, creating a task, saving a file or sending a message), which we use to perform, secure and troubleshoot the action, as required to perform our contract with you.
• Any other information you choose to include in communications with us, for example, when contacting our customer support team, as required to perform our contract with you.

Please note that we take your privacy seriously. We do not use your user content, private recordings, transcripts, prompts, files, messages, summaries, memory items, connector-derived content, other private content, Input or Output to train, optimize or develop the Services. However, your data will be shared with our third party providers that support the App (including integrated AI model and automatic speech recognition (“ASR”) providers), in order to enable us to provide you with the Services, including to process your Inputs to generate Outputs and to detect your voice and the contents of your voice recording.

Information Collected Automatically

We also automatically collect certain information about your interactions with the Services, to personalize the Services for you, tailor your experience with the Services, run analytics, and better understand user interactions with the Services. Such information includes:

• Device information, such as your mobile device model, app version, operating system and unique device identifier.
• Other information regarding your interaction with the Services, such as feature use, clicks, and error and crash logs.

Information Collected from Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

• Information we receive when you choose to sign in to or access the Services through a third-party provider, such as Google or Apple, which we use to maintain your account and login information, as required to perform our contract with you. These providers process authentication data under their own terms and provide us with your sign-in information such as your name, email address and additional account information you authorize.
• Information we receive when you choose to connect third-party services with the Services (“connectors”), such as Google Calendar, Gmail, Google Drive, Google Docs, Google Sheets, Slack and Lark and any other third party connector we may make available within the Services from time to time, which we use to perform our contract with you to provide the connected features you request. We do not use connector-derived data to take external actions that you have not specifically requested. Depending on the level of permission that you approve, we may receive full access to your third party account and data stored within that third party account, including calendar event details, message content, document content, message metadata, permission scopes, document or storage metadata, and other content or data that Google or other relevant third parties share with us about your account and use of third party products and services. Certain connector integrations may be facilitated by a third-party integration provider. Connector-derived data is treated as user account data and retained while your account remains active, unless you delete the relevant data or delete your account. After you disconnect a connector, we will stop accessing new data from that connector, but information already imported may remain in your account until deleted pursuant to our retention policy and applicable law. For example, for Google data, you can disconnect through your Google account permissions; after disconnection, we will stop accessing new Google data and delete previously obtained Google data within 30 days unless retention is required by law. You can also revoke connector access by clicking on “Settings” in the App or through the third-party platform; revocation stops future access where supported.

Ambi’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Any information we receive from sources other than directly from you will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, “Third-Party Websites and Links”.

Deidentified Information

Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”) (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

DISCLOSURE OF YOUR INFORMATION

We may disclose your information for legitimate purposes subject to this Privacy Notice, including:

• Vendors or other service providers who help us provide the Services, in order to perform our contract with you, including cloud storage providers, as well as third-party AI model and ASR providers that process your information to enable us to provide you with the Service (as explained above).

  Our third-party AI model providers and ASR providers process Google user data only to provide the requested transcription, summarization, AI assistant, and related user-facing features, and are not permitted to use Google user data to train or improve their own models.

• Our affiliates or others within our corporate group, as a matter of our legitimate interests to efficiently provide the Services.
• Third-party integrations at your direction and instruction, such as the calendar, email, storage, document or messaging services you choose to connect, to perform our contract with you.
• Other users or recipients, but only when you choose to share summaries, links or other content, or otherwise make information visible to others, to perform our contract with you and in our legitimate interests to provide you with access to the Services.
• Professional advisors, such as auditors, law firms or accounting firms, as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations.
• Third parties in connection with or anticipation of an asset sale, merger, acquisition, or other business transaction, including in the context of a bankruptcy proceeding or other restructuring matter, as a matter of our legitimate interests to run a successful and efficient business.
• For legal and security reasons, as required by law, including to cooperate with law enforcement, judicial orders and regulatory inquiries, to detect and prevent fraudulent or illegal activity, to exercise or defend legal claims and to ensure the safety and security of our business, employees and users, and to enforce our terms or other agreements.

THIRD-PARTY WEBSITES AND MATERIALS

We may provide links to third-party websites or platforms and display or make available content, data, applications or materials from third parties. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms, or the accuracy, completeness or reliability of third-party materials. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

MINORS

Our Services are not intended for minors, and we do not seek or knowingly collect any personal information about minors. By minors, we mean users under the age of 18 years. If we become aware that we have unknowingly collected information about a minor, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a minor who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

DATA SECURITY AND RETENTION

We have implemented commercially reasonable security measures designed to protect your personal information from unauthorized access, use or disclosure. However, despite our efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We do not keep your data for longer than is necessary to fulfil the relevant purpose described in this Privacy Notice, to maintain your account, comply with legal obligations, resolve disputes, enforce our agreement with you, protect security and to support legitimate business purposes.

For further details on how long we keep your data, please refer to the time periods set out below.

DATA TRANSFERS

We are based in the United States and our servers are located in the United States. Please be aware that the information we collect from you may be transferred to, stored and processed in the United States or other countries outside your country of residence, where our support and engineering teams are located.

By acknowledging our Privacy Notice, you consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country where we have databases or affiliates and, in particular, to the jurisdictions specified in this section.

PRIVACY RIGHTS

Depending on where you live, you may have certain rights in relation to your personal information. However, please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law.

• Access / Know: You may have the right to request access to the personal information we hold about you and to obtain details about what personal information we have collected about you, including the categories of personal information, the categories of sources from which the information was collected, the business or commercial purposes for collecting personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. You may also request to obtain a list of specific third parties, other than natural persons, to which we have disclosed your personal information.
• Deletion / Erasure: You may have the right to request that we delete personal information we hold about you.
• Correction: You may have the right to request that we correct inaccurate personal information we hold about you.
• Portability: You may have the right to receive a copy of the personal information we hold about you in a portable and, to the extent technically feasible, readily usable format, and to request that we transfer it to a third party.
• Restriction of Processing: You may have the right to require us to stop, suspend or restrict our processing of personal information we hold about you.
• Objection: You may have the right to object to our processing of your personal information.
• Opt-Out of Marketing: You may opt out of marketing at any time by using the unsubscribe / opt-out instructions provided in our communications to you. If you opt out, we may still send you transactional or administrative messages, such as emails about your account.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.

Submitting a Request

To make a request described in this section, please email us at support@ambi.ai.

We will not retaliate or discriminate against you for exercising any of these rights. Further information may be needed to verify your identity before exercising these rights, such as your registered email address, account login, in-app request, account ID or device ID. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. If we deny your request, you may have the right to appeal our decision by contacting us at support@ambi.ai with the subject line “Privacy Appeal,” or through the methods described in the section below, “How to Contact Us”.

When you submit a request or launch an appeal, we will limit our collection of your information to only what is necessary to securely fulfil your request or process your appeal. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal. You may also have the right to complain to your local data protection authority about how we process your personal data.

CALIFORNIA RESIDENTS

This section applies to you if you are a resident of California and we process personal information about you that is subject to the California Consumer Privacy Act (“CCPA”). For purposes of this section, references to “personal information” shall include “sensitive personal information” as defined under the CCPA.

Processing of Personal Information

In the preceding 12 months, we collected and disclosed to service providers (as described in the Disclosure of your Information section above) the following categories of personal information and sensitive personal information (denoted by *):

• Identifiers, such as e-mail address and device identifiers
• Internet or other similar network activity such as app and website usage, pages viewed, clicks, crash logs and device status.
• Audio, electronic, visual, thermal, olfactory, or similar information such as recordings, transcripts, summaries, prompts, files and speaker labels
• Inferences drawn from other personal information such as preferences, personalization, memory items and usage-derived settings
• Account access credentials* such as account log-in credentials in combination with any required security or access code
• The contents of an individual’s private messages, files or recordings where processed to provide the requested Services*

The categories of sources from which we collect your personal information and the specific purposes for which we collect and disclose your personal information, are described in the sections above, Collection of Your Information, Use of Your Information and Disclosure of Your Information, respectively.

We only use and disclose sensitive personal information for purposes specified in the CCPA or otherwise in line with your consent, and we do not use or disclose sensitive personal information for purposes of inferring characteristics about you. The criteria we use to determine how long to retain your personal information is described in the section above, Retention of Your Information.

In the past 12 months, we have not sold or shared personal information of California residents within the meaning of “sold” and “share” in the CCPA. And we have no knowledge of any sale or sharing of personal information of users under 16 years of age.

California Rights

In addition to the rights described in the section above, Privacy Rights, that are applicable to California residents, you may also have the following rights under California law.

HOW TO CONTACT US

Should you have any questions about our privacy practices or this Privacy Notice, please email us at support@ambi.ai or contact us at 8 The Green, Dover, Kent County, Delaware 19901, United States.