Scope and roles
This Privacy Policy applies to the Karis website, applications, and creator campaign services provided by Ampliftai Inc., doing business as Karis (collectively, the Services). In this policy, “Karis,” “Ampliftai,” “we,” and “us” refer to Ampliftai Inc.
Ampliftai Inc. is generally the controller responsible for account, website, security, support, and billing information. When a customer organization submits creator, campaign, or communication data, that organization determines why the data is used and Ampliftai Inc. processes it to provide the Services. An order form or data processing agreement controls if it conflicts with this policy.
Information we collect
Information you and your organization provide
- Account and workspace data: name, email address, profile details, organization, role, invitations, preferences, and authentication identifiers.
- Campaign and creator data: campaign briefs, budgets, policies, creator profiles, contact details, notes, deal terms, deliverables, reviews, approvals, and payment-status records.
- Communications and files: messages, drafts, attachments, feedback, support requests, and other content submitted through the Services.
- Billing data: plan, Credit activity, transaction references, billing contact details, and subscription status. Payment-card details are handled by our payment provider rather than stored in full by Karis.
Information from other sources
We may receive information from connected accounts, customer-authorized service providers, public creator profiles and websites, creator-data providers, authentication providers, and payment providers. Customers are responsible for having an appropriate basis to provide personal information to Karis and to contact creators through the Services.
Information collected automatically
We collect limited technical and activity data such as IP address, browser and device type, timestamps, requested pages, authentication events, workspace selections, feature interactions, error reports, and security logs.
Google and Gmail data
If you connect a Google account, Karis receives the account identity and authorization data needed for sign-in or the features you enable. If you connect Gmail, the Services may access mailbox messages, headers, participants, attachments, labels, drafts, sent-mail state, and synchronization cursors as needed to find and maintain campaign conversations, route replies, prepare drafts, send authorized messages, and preserve workflow history.
Karis's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine-learning models.
Connecting Gmail does not by itself authorize an email send. Messages are sent only through user actions or workflow settings configured by the customer, including any auto-send setting the customer deliberately enables. You can disconnect a mailbox in Karis or revoke access in your Google Account. Revocation stops new access; information already stored is handled under the retention section below.
How we use information
We use information to:
- provide, synchronize, secure, maintain, and support the Services;
- authenticate users and enforce organization membership and permissions;
- source and organize creator information, generate drafts and recommendations, route messages, and operate customer-authorized workflows;
- record approvals, evidence, usage, Credits, billing events, and audit history;
- diagnose errors, prevent fraud or abuse, and improve reliability and usability;
- communicate about service, security, support, billing, and material policy changes; and
- comply with law and protect the rights and safety of Karis, customers, creators, and others.
We may create aggregated or de-identified information that cannot reasonably be linked to an individual and use it for analytics, capacity planning, and service improvement.
Data retention
We retain information while an account or workspace is active and for as long as reasonably needed to provide the Services, preserve requested campaign and communication history, resolve disputes, enforce agreements, maintain security records, and meet legal or financial obligations. Retention periods vary by data type and customer configuration.
After deletion, information may remain for a limited period in backups or security records before being overwritten, unless law requires longer retention. We may retain de-identified information that can no longer reasonably identify a person.
Security
We use technical and organizational safeguards designed to protect information, including encrypted transport, access controls, tenant separation, restricted service credentials, audit records, and operational monitoring. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Please report suspected unauthorized access promptly.
International transfers
Karis and its service providers may process information in countries other than the one where you live. Where required, we use contractual or other lawful transfer mechanisms and require appropriate protection for the information. Customers may contact us for information relevant to their transfer assessment or data processing agreement.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; restrict or object to certain processing; withdraw consent; or complain to a data protection authority. These rights may be subject to legal exceptions.
If your information belongs to a customer workspace, contact that organization first because it controls the campaign data. Workspace administrators can manage members and connected services. You may also email hello@amplift.ai. We may verify your identity and authority before completing a request.
Children
The Services are intended for business users and are not directed to children under 18. We do not knowingly collect personal information from children through account registration. If you believe a child has provided information to Karis, contact us so we can investigate and take appropriate action.
Changes and contact
We may update this policy as the Services or legal requirements change. We will update the date above and provide additional notice when a change is material. Questions, security reports, and privacy requests can be sent to hello@amplift.ai.
For the rules governing your use of Karis, see our Terms of Service.