Amal Privacy Policy

1. What We Collect

Account Information: Name, email, company, role when you sign up for our AI-first workspace.

Spreadsheet Data: All data you input, upload, or create within your Amal workspace, including text, numbers, formulas, files, and data from external sources that our AI agents process.

AI Agent Data: When you use our AI agents to fetch data from web sources, APIs, or other external services, we process the information you request to provide real-time insights and automation.

Usage Data: How you interact with our AI-native spreadsheet platform, features used, and time spent to improve our AI capabilities.

2. How We Use It

• To power our AI agents that transform unstructured data into structured, analyzable information
• To enable real-time data fetching from web sources, APIs, and external services
• To provide intelligent data cleaning, standardization, and enrichment through AI
• To generate reports, emails, and other deliverables automatically from your data
• To communicate with you about your AI-first workspace and provide support
• To continuously improve our AI capabilities and enhance your productivity

3. Who We Share It With

• Trusted service providers who help us run Amal (e.g. hosting, billing, AI processing, analytics)
• Law enforcement if required by law
• If Amal is involved in a merger or acquisition, your info may transfer as part of that deal
• We do not sell your personal information.

4. International Transfers

We may store or process your data outside your country (e.g. in the U.S.). We use safeguards to protect your data when doing so.

5. Cookies

Our website uses cookies to make it work properly and to understand how it's used. You can manage your cookie settings anytime in your browser.

6. How We Protect Your Information

We use technical and organizational measures to secure your data, including end-to-end encryption and SOC 2 compliance. However, no online system is 100% secure, so please use our services responsibly.

7. How Long We Keep Your Data

We keep your personal data only as long as needed for our services, legal obligations, or resolving disputes. You can delete your data at any time through your account settings.

8. Your Rights

• Access, update, or delete your data
• Object to or restrict certain uses
• Withdraw consent if we rely on it
• Export your data in a standard format
• File a complaint with a data protection authority

9. Changes to This Policy

We may update this policy occasionally. We'll post the new version on our website and notify you of material changes.

10. Google integrations and permissions

Why we request Google permissions (optional): We only request the minimum access needed for features you choose to use.

No human will read your Google data unless you ask us to, it's necessary for security/debugging, or required by law.

• Gmail (if you connect it):
  • Send emails you explicitly trigger (for example, outreach or mail-merge from inside Amal).
  • Read specific messages or attachments you select to extract data you asked for (for example, parse an invoice you click).
  • We do not read your entire mailbox or use Gmail data for advertising.
• Google Calendar (if you connect it):
  • Read events you choose to pull times or dates into a spreadsheet.
  • Amal never edits or deletes events unless you explicitly request it.
• Google Drive / Docs / Sheets (if you connect them):
  • Read files you pick (for example, a PDF or Sheet) to extract tables or text.
  • Create files you ask for (for example, a summary document) and save them to your Drive.

Your control and security:

• You can connect or disconnect Google anytime in Amal.
• You can also revoke access anytime from your Google Account → Security → Third-party access (myaccount.google.com/permissions).
• Data is encrypted in transit and at rest.
• We keep audit logs so you can see what Amal did and why.

Deletion: When you delete a sheet, file, or your Amal account, any associated Google-sourced data is permanently deleted from our systems.

Policy compliance: Amal’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.