Last updated: March 5, 2026

Amber Vault AI ("we," "us," or "our") operates the website ambervaultai.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.

1. Information We Collect

We collect information you voluntarily provide when using our website, including:

• Contact form submissions: Name, email address, company name, service interest, budget range, and project details.
• AI Audit tool: Your answers to the audit questionnaire, your name, and email address.
• Newsletter signups: Email address.
• Lead magnet downloads: Name and email address.
• Solutions waitlist: Name, email address, company name, industry, solution interest, and optional message.

We also collect certain information automatically when you visit our website (see Section 5: Cookies & Analytics).

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Deliver your AI Audit results and personalized recommendations
• Send newsletters and marketing communications (only with your explicit consent)
• Process waitlist registrations and notify you of early access opportunities
• Improve our website, services, and user experience
• Analyze website usage through analytics tools (only with your consent)

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent: When you submit a form, subscribe to our newsletter, or accept analytics cookies, you provide explicit consent for us to process that data for the stated purpose.
• Legitimate interest: We may process data to improve our website and services, provided this does not override your fundamental rights.
• Contractual necessity: When you engage us for consulting services, we process data necessary to fulfill that agreement.

4. Data Storage, Retention & Security

Your data is processed and stored using the following infrastructure:

• Form submissions are temporarily stored in Cloudflare KV (a key-value data store) for 90 days, after which they are automatically deleted.
• Email notifications of form submissions are sent to our team and retained in our email system until manually deleted.
• We do not store credit card numbers, passwords, or other highly sensitive financial data through our website.

We take reasonable technical and organizational precautions to protect your personal information, including encryption in transit (HTTPS/TLS) and secure access controls. However, no method of transmission over the Internet is 100% secure.

5. Cookies & Analytics

Our website uses cookies and similar technologies as follows:

• Essential cookies: Required for basic site functionality (e.g., remembering your cookie consent preference). These cannot be disabled.
• Analytics cookies: We use Google Analytics 4 (measurement ID: G-ZR2GX0DG25) to understand how visitors interact with our website. Analytics cookies are only set after you provide explicit consent via our cookie banner. Google Analytics collects anonymized usage data such as pages visited, time on site, and referral sources. You can learn more about how Google processes this data at Google's Privacy Policy.

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of any page. You can also control cookies through your browser settings.

6. Third-Party Services

We use the following third-party services to operate our website and process your data. Each service has its own privacy policy governing how they handle your information:

• Cloudflare Pages: Website hosting and content delivery. Cloudflare Privacy Policy
• Cloudflare Workers: Server-side form processing and validation.
• Cloudflare KV: Temporary storage of form submissions (90-day retention).
• Resend: Email delivery service used to send form notification emails to our team. Your email address is transmitted to Resend for delivery purposes only. Resend Privacy Policy
• Google Analytics 4: Website usage analytics (only with your consent). Google Privacy Policy
• Google Fonts: Web font delivery. Google may log your IP address when fonts are loaded. Google Privacy Policy

7. Email Communications & Newsletter

When you subscribe to our newsletter or submit a form that includes email consent, you agree to receive periodic emails from us about AI automation tips, service updates, and relevant content.

• We will only send marketing emails with your explicit consent.
• Every marketing email will include an unsubscribe link at the bottom.
• You can unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting us at privacy@ambervaultai.com.
• We will process your unsubscribe request within 5 business days.

8. Affiliate Links

Some pages on our website may contain affiliate links. When you click an affiliate link and make a purchase, we may earn a commission at no additional cost to you. Affiliate partners may use their own cookies to track referrals. These cookies are subject to the respective affiliate program's privacy policy.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time for processing based on consent (e.g., analytics cookies, marketing emails).

For California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell your personal information. To exercise your rights, contact us at privacy@ambervaultai.com.

How to Exercise Your Rights

To exercise any of the above rights, please contact us at privacy@ambervaultai.com or use our contact form. We will respond to your request within 30 days.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete it promptly.

11. International Data Transfers

Our website is hosted on Cloudflare's global network, and your data may be processed in countries outside your own. Cloudflare maintains appropriate safeguards for international data transfers. By using our website, you consent to the transfer of your data to these locations.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you through a prominent notice on our website.

13. Contact

If you have questions about this privacy policy, want to exercise your data rights, or have concerns about how your data is handled, please contact us:

• Email: privacy@ambervaultai.com
• Contact form: ambervaultai.com/contact

Note: Our physical mailing address will be added to this policy once confirmed.