Privacy Policy
Last updated: 6 October 2026. Added a section on Amplifier Connector, our free email tool, and our Google API Limited Use statement.
Amplifier Consulting Limited (“Amplifier”, “we”, “us”, “our”) is the data controller for personal information about you when you use the Amplifier service. This policy explains what we collect, how we use it, who we share it with, and the rights you have. We want you to read this, so we have kept it short.
Who we are
- Company: Amplifier Consulting Limited
- Registered in: England and Wales
- Company number: 17038769
- Registered office: Office 2.05, Clockwise, Old Town Hall, 30 Tweedy Road, Bromley, BR1 3FE
- ICO registration: C1913003
- Contact: hello@weareamplifier.co.uk
What we collect
Account information. Your name, email address, and authentication tokens when you create an account.
Connected channel data. When you connect a channel (Gmail, Outlook, Slack, Teams, Telegram, SMS, WhatsApp, Google Chat), we access the messages, contacts, calendar events, and metadata needed to provide the service. You control which channels are connected. You can disconnect any channel at any time.
Derived data. We analyse your sent messages to build a writing-style profile, track commitments you make to others, and classify inbound messages as Decision, Info, or Noise. These are stored against your account and used only for your Brief, your drafts, and your classifications.
Usage data. Which features you use, how often, and what actions you take. We use this to improve the product. It is not tied to your message content.
Payment information. Processed by Stripe. We do not store your card details.
Why we collect it
- To provide the service. Ingesting messages, drafting replies, writing your daily Brief, categorising conversations. Without this data, there is no product.
- To improve the service. Aggregate, anonymised usage patterns inform product decisions.
- To comply with our legal obligations. Tax, accounting, and regulatory record-keeping.
- To communicate with you. Service updates, security alerts, and billing notices.
Legal bases for processing (UK GDPR)
- Contract (Article 6(1)(b)) — to provide the service you subscribed to.
- Legitimate interests (Article 6(1)(f)) — to improve the product and prevent abuse. Balanced against your rights; you can object.
- Consent (Article 6(1)(a)) — for optional features like marketing communications. You can withdraw consent at any time.
- Legal obligation (Article 6(1)(c)) — for tax and compliance records.
Who we share it with
Amplifier uses a small set of trusted third parties to operate. Each has a data processing agreement with us and processes your data only on our instructions. The full list is maintained at Subprocessors.
We do not sell your data. We do not share it with advertisers. We do not use it to train third-party AI models. If we ever change any of these positions, we will tell you in advance and give you the right to object and delete.
AI models and your data
Amplifier uses AI to categorise and draft. The platform default runs inference through Google Gemini via paid API with zero data retention. On Team and Business tiers, you can bring your own model key (Anthropic, OpenAI, or Google) and route through your own contract with that provider.
In no case is your data used to train any AI model.
Amplifier Connector
Amplifier Connector is a free tool that connects your email accounts to an AI assistant, such as Claude, on your own computer. It works differently from the Amplifier service described above, so it has its own section. In short: your email never reaches us.
It runs on your computer, not ours. The connector has no Amplifier server behind it. Your email travels directly between Google (or your email provider) and your computer. Amplifier never receives, stores or sees your messages, your contacts, your sign-in tokens or your passwords, and no Amplifier employee can read them.
What it can access. For Gmail, the connector asks Google for two permissions: read-only access to your email (gmail.readonly) and your email address (userinfo.email). It uses your email address only to label the mailbox so you can tell your accounts apart. It reads messages, threads and their details only when your AI assistant asks it to, for example when you ask the assistant to search your inbox. It cannot send, draft, label, archive or delete anything. For other providers it connects over IMAP with the details you enter, and reads your inbox in the same read-only way.
Where your credentials are kept. Sign-in tokens and IMAP passwords are encrypted with AES-256-GCM and stored in a folder called .amplifier-connector in your home folder. On a Mac that folder is readable only by your user account. The encryption key is created on your computer and never leaves it.
Who sees your email. Only you and the AI assistant you connect the connector to. When you ask your assistant a question about your email, the relevant messages are passed to that assistant so it can answer. That assistant is provided by a company you have chosen, such as Anthropic for Claude, and its handling of your data is governed by your agreement with that company. We do not sell, share or transfer your email data to anyone, and we do not use it for advertising or to train AI models.
No tracking. The connector does not collect analytics, usage data or crash reports, and does not send any information to Amplifier.
Removing it. Uninstalling the connector and deleting the folder .amplifier-connector in your home folder removes every stored credential. You can also revoke the connector's access to your Google account at myaccount.google.com/permissions.
If you sign up for updates. Downloading the connector from our website may ask for your email address so we can send you updates about Amplifier. That is separate from the connector itself: we keep only the address you give us, use it only to send you updates you agreed to, and you can unsubscribe from any email.
Google API Services: Limited Use
Amplifier's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This applies to Amplifier Connector and to the Amplifier service.
Where we store it
All application data is stored in the EU (Netherlands), on Railway infrastructure in the Amsterdam region. The UK and EU have mutual adequacy decisions in place for GDPR purposes, so data transfers between the two are treated as transfers within a single adequate jurisdiction. Specific data categories may transit third-party subprocessors under appropriate safeguards (UK adequacy, EU Standard Contractual Clauses, or equivalent). See Subprocessors for details per service.
How long we keep it
- Active accounts: for as long as your account is active, plus 90 days after you close it.
- Deleted accounts: purged within 30 days of deletion request, except where we are legally required to retain specific records (e.g. tax records, 7 years).
- Disconnected channels: message data from a disconnected channel is purged within 30 days.
- Analytics and logs: 12 months, rolling.
Your rights
Under UK GDPR, you have the right to:
- Access your personal data.
- Correct inaccurate data.
- Delete your data (“right to be forgotten”).
- Port your data to another service (structured, machine-readable format).
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Withdraw consent at any time.
- Lodge a complaint with the Information Commissioner’s Office (https://ico.org.uk).
Exercise any right by emailing hello@weareamplifier.co.uk. We will respond within 30 days.
Security
- Data in transit is encrypted with TLS 1.2 or higher.
- Data at rest is encrypted (AES-256 for databases, envelope encryption for OAuth tokens).
- Access to production systems is limited to named Amplifier engineers, authenticated via SSO and 2FA.
- All access is logged and reviewed.
We maintain an internal Data Handling Policy and a Record of Processing Activities. If you need to see these for due diligence, contact us.
Children
Amplifier is not intended for children under 18. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.
Changes
We will post material changes at the top of this page and email existing users. Continued use of the service after changes means you accept the updated policy.
Contact
For any privacy question, concern, or request, email hello@weareamplifier.co.uk.