Privacy policy
How we collect, use and protect your data. The short version: it's yours, we don't sell it, and it's never used to train shared AI models.
What we collect
Information you give us directly — name, email, company, and the content you or your team put into your workspace (CRM records, tasks, documents, and similar). Usage telemetry (pages viewed, features used) via PostHog, to improve the product. If your workspace admin turns on team activity monitoring, app-usage time and active windows — never message content, file content, or keystrokes, and never without that admin's explicit consent (enforced in the API — capture is blocked until consent is recorded). If you chat with Ami, our AI assistant, we store that conversation history. If you use the mobile app and allow notifications, we collect your device's push token and platform (iOS or Android). We never collect your workspace's customer data for our own purposes.
Our role: controller and processor
For our own account, billing, marketing-site and product-telemetry data, Diginnovators Solutions Pvt Ltd (AmDital) is the controller under the GDPR and the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This privacy policy governs that data.
For the content you or your team put into a workspace (CRM records, tasks, documents, HR data and Ami conversations), the customer is the controller and AmDital is the processor under the GDPR and the Data Processor under the DPDP Act. We handle that content only on the customer's instructions, under our data processing addendum.
How we use it
To run the service, bill you, communicate with you about your account, and improve the product. We do not sell your data. We do not use your workspace data to train shared AI models — Ami runs against the AI provider your workspace is configured for (for example Anthropic, OpenAI, Google Gemini, or others), and that provider processes your prompts only to return a response, per its own data-processing terms.
Lawful basis for each purpose
Where the GDPR applies, we rely on the following lawful basis for each purpose of processing described above.
| Purpose | Lawful basis | What it covers |
|---|---|---|
| Providing the service, your account, billing and account communications | Contract (GDPR Art 6(1)(b)) | Running your account and workspace, billing you, and writing to you about your account. |
| Tax and accounting records | Legal obligation (GDPR Art 6(1)(c)) | Billing records, which tax law requires us to keep for 7 years. |
| Mobile push notifications | Contract (GDPR Art 6(1)(b)) | Only if you allow notifications in the mobile app. Your device push token is deleted when you sign out of the mobile app while online, when you sign out of all sessions, when your account is deleted, or when Expo reports the device is no longer registered. |
| Security, audit and access logs | Legitimate interests (GDPR Art 6(1)(f)) | Keeping the service secure and being able to investigate misuse or incidents. |
| Product usage telemetry in the app (PostHog) and service improvement | Legitimate interests (GDPR Art 6(1)(f)) | Understanding which pages and features are used so we can improve the product. |
| Analytics cookies on this marketing site (PostHog full capture, Google Analytics) | Consent (GDPR Art 6(1)(a)) | Only after you accept in the cookie banner; you can withdraw at any time via Cookie settings in the footer. |
| Team activity monitoring | Your workspace admin's recorded consent | The customer is the controller and AmDital is the processor. Capture is blocked until the admin records consent. |
| Semantic-search embeddings | The customer's instruction | Only when a workspace admin turns on semantic search. The customer is the controller and AmDital is the processor. |
How long we keep it
Workspace and account data: for the life of your subscription, plus 30 days — deleted manually on request once you cancel or ask us to (email privacy [at] amdital.com). Activity-monitoring logs: 90 days, deleted automatically on a nightly schedule. Web server and access logs: 90 days, held by our hosting provider and PostHog under their own retention settings rather than by our nightly deletion. Ami conversation history and audit logs: 1 year, same automatic nightly deletion. Billing records: 7 years (tax law requires this — we can't delete these early). Data you export: deleted manually 30 days after export. The full policy, including which categories are automatic vs. manual, is public in our data retention policy.
Who we share it with
Our application, database and file storage run on a dedicated cloud hosting provider, not a shared cloud data warehouse. The processors we use for specific jobs: Stripe (billing), Maileroo (transactional email), PostHog (product analytics, error tracking and performance monitoring), Google (Tag Manager and Analytics on this marketing site, see Cookies below), Cloudflare (bot protection with Turnstile on our site forms, and web analytics on this marketing site), Expo (650 Industries, Inc.; delivery of mobile app push notifications, if you allow them: your device push token, the notification title and text, and a notification ID and in-app link, relayed to Apple or Google for delivery), and, if you use Ami, the AI provider your workspace configures (described under “How we use it”), plus, only when a workspace admin turns on semantic search, OpenAI (or the OpenAI-compatible endpoint that admin configures) for semantic search embeddings of policies, wiki pages, notes, tasks, Ami conversations and search questions. If your workspace enables an integration you control — like syncing attendance from GreytHR — that data flows only because you turned it on, and only for that purpose. We don't sell access to any of this, and we don't hand it to anyone outside this list. The same list, with the purpose of each, is published as Annex III of our data processing addendum.
Cookies (marketing site)
On this marketing site we use PostHog and Google Analytics (loaded through Google Tag Manager). Before you choose in the cookie banner, both run without cookies: Google Analytics receives cookieless measurement pings with every analytics and advertising consent signal set to denied, and PostHog counts page views only, in memory, without writing cookies or local storage. If you accept, both may set cookies, and PostHog also records clicks, form submissions, page performance, errors and browser console messages, and may record your session with form inputs masked. If you reject, neither loads on later pages or visits. If they were already running on the open page, PostHog stops capturing immediately and, if Google Tag Manager had loaded, the page reloads without it. Rejecting also deletes the Google Analytics and PostHog cookies and PostHog storage set during an earlier accept, where your browser lets this site remove them; PostHog keeps only a flag recording that you opted out. We store your banner choice on your device so we can honour it, and you can change your choice at any time via Cookie settings in the footer. If your browser blocks this site from storing data, your choice applies only to the open page: PostHog stops capturing, but Google Tag Manager is not reloaded away, so Google Analytics keeps sending cookieless pings until you leave the page, and the banner asks again on your next visit. Cloudflare Web Analytics runs without cookies and is not affected by the cookie banner. When you sign up for AmDital, our server records the signup with a random identifier and no cookie. Our product dashboard (once you're a customer) only uses PostHog and does not run ad-tracking pixels.
Your rights
Any member can download their own data as a JSON file from Settings → Account → Privacy tab (“Download my data”), and can erase their own account there with their password. A full export of your workspace data, or deletion of the workspace, is request-only. You can also ask us what we hold about you, correct it, or ask us to delete it. Under GDPR this includes access, correction, erasure, and portability, regardless of where you're located. Requesters on a customer's helpdesk can make requests by email to the same address. We respond to requests within 30 days. Contact privacy [at] amdital.com.
Complaints and grievance officer
Complain to a regulator (GDPR Art 77)
If you are in the EU or UK and think we have handled your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority: in the member state where you live or work, or where the alleged infringement took place. In the UK, that is the Information Commissioner's Office (ICO). We would appreciate the chance to deal with your concern first, but you do not have to contact us before complaining to a regulator.
Grievance Officer (DPDP Act, 2023)
Grievance Officer, Diginnovators Solutions Pvt Ltd, Bengaluru, India. The Grievance Officer is Dinesh Jain. Contact: privacy [at] amdital.com. Email us first with what happened and the account or workspace it concerns. We handle grievances through the same channel as the rights requests above, which we answer within 30 days.
Data Protection Board of India
If you are not satisfied after going through our grievance route, you may complain to the Data Protection Board of India where the DPDP Act provides for it.
Security
Workspace data is scoped to your workspace by the application on every query (database row-level security backs this up on some access paths but does not cover all of them), traffic is encrypted in transit, and access to production requires authentication through our own JWT-based auth system — we don't rely on a third-party auth provider. We are not currently SOC 2, ISO 27001, or HIPAA certified; if that's a hard requirement for your organisation, talk to us before you sign up. Full detail on our security page.
Last updated: October 31, 2026. For questions, contact privacy [at] amdital.com.