Privacy Policy for Amplify Events

1. Our Role in Processing Personal Information

Our role depends on the type of user and the type of information involved.

Vendors

If you are a Vendor using Amplify Events for your business, we generally act as the data controller for personal information related to:

• your account registration and profile
• subscription billing and account administration
• customer support communications
• platform security, fraud prevention, and abuse monitoring
• internal analytics and service improvement
• direct communications we send to you about the Service

End-Clients and Other Individuals Whose Data Is Submitted by Vendors

If a Vendor uses Amplify Events to collect or manage personal information relating to its leads, clients, event guests, or other contacts, the Vendor is generally the data controller, and Amplify Events acts as a data processor or service provider on that Vendor’s behalf.

This may include information submitted through:

• lead capture forms
• questionnaires
• contracts
• quotes and invoices
• event planning tools
• timelines
• music planning tools
• notes and communications stored by the Vendor

If you are an End-Client or other individual whose information was collected by a Vendor through Amplify Events, please contact that Vendor directly regarding questions about how your information is collected, used, or disclosed.

2. Information We Collect

We may collect the following categories of personal information.

Account and Profile Information

When a Vendor creates or manages an account, we may collect:

• name
• email address
• phone number
• company or business name
• login credentials
• account preferences and settings

Billing and Transaction Information

We may collect billing and transaction-related information, such as:

• billing address
• subscription plan details
• invoice and quote records
• payment status
• limited payment-related information

We use Stripe to process subscription payments and other payment-related transactions. We do not store full payment card numbers on our own servers unless expressly stated otherwise. Stripe handles payment information in accordance with its own privacy and security practices.

Client, Lead, and Event Information

Vendors may use the Service to collect or store information such as:

• names
• email addresses
• phone numbers
• event dates
• venue names and physical addresses
• event requirements and planning details
• timeline information
• music preferences and planning selections
• notes, requests, and communications
• contract, quote, and invoice data

Uploaded Content and Documents

We may collect files, documents, attachments, images, and other content uploaded to the Service by Vendors or their clients.

Support and Communications

If you contact us, we may collect:

• your name
• contact information
• the contents of your message
• related account or technical details needed to assist you

We may use Mailgun and Google services to send operational emails, notices, authentication-related messages, and support-related communications.

Automatically Collected Information

When you use the Service, we may automatically collect certain technical and usage information, including:

• IP address
• browser type and version
• device type
• operating system
• referring URLs
• pages viewed
• actions taken in the Service
• access times and dates
• log data
• cookie or similar technology data

We use Google Analytics to help us understand how users interact with the Service, improve performance, and analyze usage trends. Google Analytics may use cookies and similar technologies to collect information about your use of the Service. Google requires websites using Google Analytics to disclose that use and how it collects and processes data.

3. How We Use Personal Information

We may use personal information for the following purposes:

• to provide, operate, maintain, and improve the Service
• to create and manage user accounts
• to process subscriptions, billing, quotes, and invoices
• to enable Vendors to manage leads, clients, contracts, timelines, event details, and music planning
• to provide customer support and respond to inquiries
• to send administrative, technical, security, and service-related communications
• to monitor usage, troubleshoot issues, and improve functionality and user experience
• to detect, investigate, and prevent fraud, unauthorized access, abuse, and security incidents
• to comply with legal obligations
• to enforce our terms, agreements, and policies
• to develop new features and services

4. AI-Assisted Features

Amplify Events may offer AI-assisted features, including contract drafting or similar content-generation tools.

If you use these features, the information you submit for that purpose may be processed by third-party AI service providers solely to generate the requested output. This may include names, dates, event details, contract terms, or other information you choose to provide.

We use AI-assisted features to help generate drafts and suggestions. You are responsible for reviewing all AI-generated content before using, sending, signing, or relying on it.

AI-generated content provided through the Service is for convenience only and does not constitute legal advice. Unless clearly stated otherwise, users should avoid submitting highly sensitive personal information into AI prompts unless necessary for the feature being used.

5. Legal Bases for Processing

Where applicable under privacy law, we process personal information on one or more of the following legal bases:

• to perform a contract or take steps at your request before entering into a contract
• to comply with legal obligations
• for our legitimate interests, such as operating and improving the Service, securing the platform, and preventing fraud
• with your consent, where required by law

Where a Vendor uses Amplify Events to process End-Client data, the Vendor is responsible for ensuring that it has an appropriate legal basis or valid consent for that processing.

6. How We Share Personal Information

We do not sell personal information.

We may share personal information in the following circumstances:

Service Providers

We may share information with third-party service providers that help us operate the Service, such as providers of:

• hosting and infrastructure
• cloud storage
• payment processing
• analytics
• customer support tools
• email delivery
• security and fraud prevention
• document generation
• AI processing

Our current service providers may include:

• Stripe for payment processing and billing-related services
• Google for certain infrastructure, business, and communication tools
• Mailgun for email delivery
• Google Analytics for product and website analytics

These providers are authorized to use personal information only as needed to provide services to us or on our behalf, subject to their contractual and legal obligations. Stripe offers a data processing agreement, Google Analytics offers data processing terms and privacy controls, and Mailgun provides privacy and compliance documentation for its services.

With Vendors

If you are an End-Client or other contact interacting with a Vendor through Amplify Events, your information may be accessible to that Vendor and to authorized persons acting on the Vendor’s behalf.

Legal and Compliance Purposes

We may disclose information where required or permitted by law, including:

• to comply with legal obligations
• to respond to lawful requests from public authorities
• to protect our rights, property, systems, users, or the public
• to investigate fraud, security incidents, or violations of our agreements

Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction.

7. International Data Transfers

Your personal information may be stored, processed, or accessed in countries other than your province, state, or country of residence, including by our service providers.

For example, some of our service providers, including Stripe, Google, and Mailgun, may process or access data from outside your local jurisdiction. These providers publish their own privacy and international transfer information.

As a result, your information may be subject to the laws of other jurisdictions, which may differ from those in your home jurisdiction. Where required, we take reasonable steps to ensure appropriate safeguards are in place for such transfers.

8. Cookies and Similar Technologies

We may use cookies and similar technologies to:

• keep users signed in
• remember preferences
• analyze usage and performance
• improve functionality
• maintain security

We use Google Analytics cookies and similar technologies to understand how visitors engage with our website and Service. Google states that Google Analytics uses cookies to collect information and report website usage statistics to site operators. Users may also be able to opt out of certain Google Analytics data collection through browser controls or Google’s opt-out tools.

You may be able to control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Service.

If required by law, we will provide additional cookie disclosures or obtain consent for certain non-essential cookies and similar technologies.

9. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including to:

• provide the Service
• maintain business and financial records
• comply with legal, tax, accounting, and regulatory obligations
• resolve disputes
• enforce our agreements
• protect against fraud or misuse

In general:

• Vendor account information is retained for as long as the account remains active and for a reasonable period thereafter
• billing and transaction records may be retained as required by applicable law
• support communications may be retained for recordkeeping and service improvement
• Vendor-submitted End-Client data is retained according to the Vendor's instructions, subject to legal and operational requirements

We may also retain backup or archived copies for a limited period as part of our routine business continuity and disaster recovery processes.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Our service providers also maintain their own security programs. Stripe, for example, publishes security information regarding encryption and protection of payment data, and Google Analytics provides data controls and privacy configuration options.

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorized access to your account.

11. Your Privacy Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to:

• access personal information we hold about you
• correct inaccurate or incomplete personal information
• request deletion of personal information
• object to or request restriction of certain processing
• withdraw consent where processing is based on consent
• request portability of certain personal information, where applicable

To exercise rights relating to information for which Amplify Events acts as the data controller, please contact us using the details below.

If you are an End-Client and your information was submitted to Amplify Events by a Vendor, you should contact that Vendor directly first. We may assist the Vendor in responding to your request where required.

We may need to verify your identity before processing certain requests.

12. Vendor Responsibilities

Vendors are responsible for:

• ensuring they have the right to collect, use, and upload personal information to the Service
• providing any notices required by applicable privacy laws
• obtaining any consents required by law
• ensuring that their use of Amplify Events complies with applicable laws and regulations

13. Children's Privacy

The Service is intended for business and professional use and is not directed to children. We do not knowingly collect personal information directly from children through the Service.

If you believe a child has provided personal information to us in a manner not permitted by law, please contact us so we can take appropriate steps.

14. Third-Party Services

The Service may integrate with or link to third-party services, websites, or tools. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing information to them.

This includes third-party providers such as Stripe, Google, and Mailgun, which may process information in accordance with their own privacy notices and contractual terms.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page.

If we make material changes, we may also provide additional notice where required by law, such as by posting a notice in the Service or contacting account holders directly.