Privacy Policy

Amphora ("we", "us", or "our") operates the website at amphora-nine.vercel.app and any associated subdomains (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information we collect

We collect only the information you voluntarily provide:

• Email address — when you join the waitlist or enter your email to access the blog. This is the only personal data we collect.

We do not use tracking cookies, analytics scripts, advertising pixels, or fingerprinting. We use localStorage in your browser solely to remember that you have already submitted your email so you are not asked again on return visits. This data stays on your device and is never transmitted to us.

2. How we use your information

• To add you to our waitlist and notify you when early access opens.
• To send you updates about the Amphora product, research, and progress notes — only if you have opted in by submitting your email.
• To grant you access to members-only content (Progress Notes blog).

We will never sell, rent, or share your email address with third parties for marketing purposes.

3. Data storage and processors

Email addresses are stored in Supabase (Supabase Inc., US), a cloud database provider. Supabase acts as a data processor on our behalf and is contractually bound to process your data only as we instruct. Supabase is SOC 2 Type II certified and stores data in secure, access-controlled infrastructure. You can review Supabase's security practices at supabase.com/security.

We do not use any other third-party services that process your personal data. The Three.js brain visualisation on our homepage runs entirely in your browser and does not transmit any data.

4. Data retention

We retain your email address for as long as you remain on our waitlist or use our service. If you request deletion (see Section 6), we will remove your data within 30 days.

5. Legal basis for processing (EEA/UK users)

If you are located in the European Economic Area or United Kingdom, our legal basis for processing your email address is consent — you provide it voluntarily by submitting our form. You may withdraw consent at any time by contacting us at the address below.

6. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Deletion — request that we delete your personal data.
• Correction — request that we correct inaccurate data.
• Portability — request your data in a machine-readable format.
• Withdraw consent — opt out of all communications at any time.

To exercise any of these rights, email us at hello@amphora.ai. We will respond within 30 days.

7. Children's privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their email address, please contact us and we will delete it promptly.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

9. Contact