Privacy Policy

01Who we are

This Privacy Policy explains how AmpShift (“EasyBind”, “we”, “us”), a company registered in Riyadh, Kingdom of Saudi Arabia, collects, uses, and shares personal information when you use the EasyBind Service. For personal data that creators capture through their own apps, the creator is the controller and EasyBind acts as a processor on their behalf; for the account and website data described below, EasyBind is the controller.

02Information we collect

Information you provide

• Account information: your email address and basic profile/organization details.
• App content: the app schemas, settings, and branding you create.
• Communications: messages you send us (for example, support requests).

Information collected automatically

• Usage and device data: log data, IP address, browser/device type, pages viewed, and feature interactions, used to operate and secure the Service.
• Cookies and similar technologies: used for authentication, preferences, and basic analytics (see “Cookies” below).

Submission data

When end users complete a creator’s app, we process the data those forms collect (which may include contact details, photos, signatures, and location) on the creator’s behalf and under their instructions.

Payment information

Payments are processed by Paddle (Paddle.com Market Ltd) as Merchant of Record. We do not collect or store your full card details; Paddle processes them under its own privacy policy and shares limited transaction information (such as plan, country, and the last four digits of your card) with us to manage your subscription.

03How we use information

• to provide, maintain, and improve the Service and its features;
• to authenticate you and secure accounts, and to prevent fraud and abuse;
• to process subscriptions and manage billing (via Paddle);
• to respond to your requests and provide customer support;
• to send service and transactional messages, and—where permitted—product updates you can opt out of; and
• to comply with legal obligations and enforce our terms.

04Legal bases

Where applicable law (such as the Saudi Personal Data Protection Law (PDPL) or the EU/UK GDPR) requires a legal basis, we rely on: performance of our contract with you; our legitimate interests in operating and securing the Service; your consent (which you may withdraw); and compliance with legal obligations.

05How we share information

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers / sub-processors who process data on our instructions, including Amazon Web Services (cloud hosting and storage), Paddle (payments and tax), our email-delivery provider, and Metabase (analytics for Pro and above);
• Other users, where you choose to publish a marketplace template or share an app;
• Legal and safety reasons, to comply with law, enforce our terms, or protect rights and safety; and
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

06International transfers

We operate from the Kingdom of Saudi Arabia and use service providers that may process data in other countries (for example, in the United States or the European Union). Where we transfer personal data across borders, we use appropriate safeguards required by applicable law, such as standard contractual clauses or an equivalent mechanism.

07Data retention

We keep account information for as long as your account is active and as needed to provide the Service. Submission data is retained according to the creator’s configuration and instructions. We retain information as required to meet legal, tax, accounting, and security obligations, and then delete or anonymize it.

08Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and a private, access-controlled storage architecture. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. We do not sell or “share” personal information for cross-context behavioral advertising. You can exercise rights from your account settings or by contacting privacy@easybind.ai. We will respond within the time required by applicable law, and you have the right to lodge a complaint with your local data-protection authority (in Saudi Arabia, the Saudi Data & AI Authority (SDAIA)).

10Cookies

We use strictly necessary cookies for authentication and security, and a limited set of cookies for preferences and basic analytics. You can control cookies through your browser settings; disabling some cookies may affect functionality such as staying signed in.

11Children’s privacy

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information for our own purposes. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

12Your data, your control

You can export all captured submission data as CSV on every plan, including Free, so you are never locked out of your own data. Creators are responsible for how they configure data collection and for honoring the rights of their own end users.

13Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or an in-product notice) and update the effective date above.

14Contact

For privacy questions or to exercise your rights, contact us at privacy@easybind.ai, or write to AmpShift, Riyadh, Kingdom of Saudi Arabia. For general support, contact support@easybind.ai.