How we handle your information

Who we are

AmplifyBot builds and manages digital platforms for growing businesses. We are based in Brisbane, Australia and work with clients in Australia and overseas.

This policy explains how we handle personal information collected through this website. You can reach us at hello@amplifybot.io about anything on this page.

What this policy covers

This policy applies to amplifybot.io only. Websites and platforms we build and manage for our clients are operated by those clients and are covered by their own privacy policies, not this one.

What we collect

We do not require an account and there is nothing to sign up for. There are two ways to give us personal information through this site: submitting the enquiry form, and typing into the assistant. Both are covered below.

When you submit an enquiry, we receive:

• Your name and email address, which the form requires
• Your phone number, business name and current website, if you choose to provide them
• The services you indicated you are interested in, and a budget range if you selected one
• The message you wrote

Alongside that, we record where the enquiry came from: the page you submitted it from, the site that referred you, and any campaign parameters in the link you followed. This tells us which of our own marketing is working.

We also store your browser’s user-agent string, and a one-way cryptographic hash of your IP address. We keep the hash rather than the address itself: it lets us limit how many submissions come from one source and review abuse, without us holding an identifier we have no reason to keep.

The website check asks nine questions about your business and shows you the result. It does not ask who you are, and completing it tells us nothing that identifies you. We do store the answers themselves, along with the same referral information, user-agent string and hashed IP address described above, because what people say about their own setup is how we decide what to build next.

If you then choose to send us an enquiry from the result, your answers are attached to it, so the two are connected from that point on. If you do not, the answers stay anonymous and there is nothing in them to trace back to you.

The assistant on this site

This site has an AI assistant you can open and ask questions. Using it is optional — the site works the same if you never do — but if you do, the conversation is stored.

For each conversation we keep:

• Everything you type into it, and everything it replies
• The page you opened it from
• Your browser’s user-agent string, and a one-way cryptographic hash of your IP address — the same hash described above, not the address itself
• Technical records of each reply: which model answered, how long it took, and how much of the model’s capacity it used

We keep the conversations for three reasons: to see which questions the assistant answers badly and correct what it knows, to check it is not saying things it should not, and to work out whether it is worth continuing to run. The hashed IP address limits how many conversations can be started from one source.

Do not type anything into the assistant you would not put in an email to us. It is a way to ask questions about what we do — it is not a secure channel, and it is not the place for anything confidential or sensitive.

Your messages are sent to Mistral AI in France, the company whose model generates the replies, which is how the assistant is able to answer at all. Their commercial terms say data sent through their API is not used to train their models. Separately from that, they run a programme that uses API data to improve their services, which accounts are included in unless it is switched off — ours is not switched off. Their handling of your message is governed by their terms rather than ours.

If a conversation leads to you sending us an enquiry, the two are linked from that point, so we can see what you had already asked before you got in touch. If it does not, the conversation stays unconnected to any name or email address.

You can ask us to delete a conversation. Email hello@amplifybot.io — see below.

What we do not do

As currently built, this website:

• Sets no cookies and uses no local storage
• Runs no analytics, tracking pixels or advertising scripts
• Does not build a profile of you or track you across other sites
• Does not sell, rent or trade personal information to anyone

There are no analytics on this site at all — not a self-hosted one, not a privacy-friendly one, none. If that ever changes, this page will say what they collect before they are switched on.

Third parties

Loading this page contacts nobody but us. The typefaces are served from this website rather than from Google Fonts, so reading the site does not disclose your IP address to a third party — there are no external stylesheets, scripts, fonts or images anywhere on it.

Enquiries and assistant conversations are stored in a PostgreSQL database hosted by Binary Lane, an Australian company, on servers in Australia. Two things do leave the country. When you send an enquiry, a copy of it is emailed to us through Resend so that a person sees it rather than it sitting in a database unread; Resend processes data in the United States, so the contents of your enquiry go there. Our mailboxes are provided by Namecheap Private Email, also a United States service, and we reply from there. The assistant’s replies are generated by Mistral AI in France, as described above.

We do not otherwise disclose your information, except where we are required to by law.

Why we use it

We use what you send us to:

• Read and reply to your enquiry
• Prepare a scope and quote if you ask for one
• Understand which of our own marketing brings in enquiries
• Prevent spam and abuse of the form

We do not add you to a marketing list because you sent an enquiry. If we ever start sending a newsletter, it will be something you opt into separately.

How long we keep it

We keep an enquiry for two years from the last time we were in touch with you about it. If it was spam, we delete it within ninety days. If you become a client, we keep it for as long as we are working together and for seven years afterwards, because those are business records we have to hold.

Conversations with the assistant are kept in full for twelve months. After that we strip out everything that points at you — what was said, and the one-way hash of your address — and keep only the bare shape of the exchange: when it happened, how many turns it ran, and whether one of our guardrails rewrote a reply before it was sent. We keep that stripped-down record for up to seven years, because it is what we would rely on if anyone ever told us the assistant had said something it should not have. Then it goes too.

The records we keep to stop the enquiry form being abused are deleted after thirty days.

None of this depends on someone remembering. A job runs every night and applies these periods, and the periods themselves are held in the database rather than only written here, so this page and what actually happens cannot quietly drift apart.

You can ask us to delete your enquiry or a conversation sooner. See below.

Accessing, correcting and deleting your information

Email hello@amplifybot.io and you can ask us to:

• Tell you what personal information we hold about you
• Correct anything that is wrong or out of date
• Delete your enquiry, or a conversation with the assistant, and the information attached to it

We will respond within thirty days, which is the timeframe the Australian Privacy Principles set. We may need to confirm who you are before acting on a request.

Security

The site is served over HTTPS and enquiry data is held in an access-controlled database. IP addresses are hashed rather than stored directly. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.

Complaints

If you are unhappy with how we have handled your personal information, contact us first at hello@amplifybot.io so we can try to resolve it.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date shown at the top. Material changes will be reflected here before they take effect.