Skip to main content
Ambi

Legal

Privacy Policy

Last updated: March 27, 2026

Ambi ("we", "us", or "our") operates the Ambi platform — a marketing management tool for agencies. This Privacy Policy explains how we collect, use, store, and protect information when you use our website (ambi.so) and application (app.ambi.so).

By using Ambi, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google.

Business & Agency Data

Information you provide about your agency and clients: business name, brand colors, brand voice settings, client names, and content briefs.

Content You Create

Reviews, case studies, captions, post drafts, image templates, and any other content you input or generate through the platform.

Third-Party OAuth Tokens

When you connect external platforms (Facebook Pages, Instagram, LinkedIn, Twitter/X, Google, Canva, Notion, ClickUp, Slack), we store the access tokens provided by those platforms. These tokens are used solely to perform actions you explicitly authorize (e.g., publishing posts, syncing reviews).

Usage Data

We collect information about how you interact with Ambi: pages visited, features used, actions taken, and error logs. This is used to improve the product.

Technical Data

IP address, browser type, operating system, and device identifiers collected automatically when you access the service.

2. How We Use Your Information

  • Provide, operate, and improve the Ambi platform
  • Authenticate your identity and manage your account
  • Connect to third-party platforms on your behalf (publishing posts, fetching reviews)
  • Generate AI-assisted content based on your inputs
  • Send product updates, account notifications, and (if opted in) email digests
  • Diagnose issues and fix bugs
  • Comply with legal obligations

3. Third-Party Integrations

Ambi integrates with the following third-party platforms on your behalf. We access these services only with your explicit authorization:

  • Meta (Facebook & Instagram) — to publish posts to Facebook Pages and Instagram Business accounts
  • LinkedIn — to publish posts to LinkedIn Pages
  • Twitter/X — to publish posts to Twitter accounts
  • Google — for authentication and Google OAuth sign-in
  • Canva — to open and edit content in Canva
  • Notion — to push content tasks to Notion databases
  • ClickUp — to push content tasks to ClickUp lists
  • Slack — to send team notifications via webhook

Each integration uses only the minimum permissions required. You can disconnect any integration at any time from your Connections page, which will immediately revoke Ambi's access to that platform.

4. Data Sharing

We do not sell your personal data or your clients' data to any third party.

We may share data with:

  • Infrastructure providers — hosting, database, and storage services under data processing agreements
  • AI providers — your content inputs are sent to AI inference services to generate responses. Inputs are not used to train shared models.
  • Legal authorities — if required by law or to protect our rights

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete all associated data (posts, clients, brand settings, integration tokens) within 30 days.

You can request data deletion at any time by emailing hello@ambi.so or by using the "Delete Account" option in your account settings.

6. Data Security

We use industry-standard security measures including HTTPS encryption in transit, industry-standard password hashing, secure credential storage, and access controls limiting who can view your data. However, no system is 100% secure. We encourage you to use a strong, unique password.

7. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of the data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request permanent deletion of your account and data
  • Portability — request your data in a machine-readable format
  • Objection — object to certain types of data processing

To exercise any of these rights, contact us at hello@ambi.so.

8. Cookies

Ambi uses only essential cookies necessary for authentication and session management. We do not use advertising or tracking cookies.

9. Children's Privacy

Ambi is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Continued use of Ambi after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

Ambi
Vietnam
Email: hello@ambi.so