Amaretto Software Labs

Privacy Policy

Our commitment to protecting your privacy and personal information

Privacy Policy

Last updated: September 1, 2025

At Amaretto Software Labs, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our developer tools, website, and services.

Information We Collect

Information You Provide to Us

  • Account Information: Name, email address, and other details when you create an account
  • Usage Data: Information about how you use our CLI tools and services
  • Communication Data: Messages, feedback, and support requests you send to us
  • Payment Information: Billing details for paid services (processed securely by third-party providers)

Information Collected Automatically

  • Log Data: IP addresses, browser type, operating system, and access times
  • Device Information: Hardware model, operating system version, and device identifiers
  • Usage Analytics: Features used, commands executed, and performance metrics
  • Cookies: Small data files stored on your device (see our Cookie Policy for details)

Third-Party Information

  • AI Service Providers: When using our tools, we may send your code to AI services (OpenAI, Anthropic) for processing
  • Cloud Providers: Deployment information when using Sandbox CLI with cloud platforms

How We Use Your Information

We use collected information to:

Provide and Improve Services

  • Deliver and maintain our CLI tools and services
  • Process transactions and send related information
  • Provide customer support and respond to inquiries
  • Monitor and analyze usage patterns to improve functionality

Communication

  • Send service-related announcements and updates
  • Respond to support requests and feedback
  • Share news about new features and products (with your consent)

Legal and Security

  • Comply with legal obligations and enforce our terms
  • Protect against fraud, abuse, and security threats
  • Resolve disputes and troubleshoot problems

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in these limited circumstances:

Service Providers

  • AI Services: OpenAI and Anthropic for code processing (subject to their privacy policies)
  • Cloud Providers: AWS, Azure, Google Cloud for hosting and deployment services
  • Analytics: Usage analytics providers to understand product usage
  • Payment Processors: Stripe or similar services for billing (we don't store payment details)

Legal Requirements

  • When required by law or court order
  • To protect our rights, property, or safety
  • In connection with business transfers (mergers, acquisitions)
  • With your explicit consent

Business Transfers

If we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement appropriate technical and organizational security measures to protect your information:

Technical Safeguards

  • Encryption: Data encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Strict access controls and authentication requirements
  • Regular Updates: Security patches and updates applied promptly
  • Monitoring: Continuous monitoring for security threats and vulnerabilities

Organizational Safeguards

  • Staff Training: Regular security awareness training for all team members
  • Data Minimization: We collect and retain only necessary information
  • Incident Response: Procedures for responding to security incidents
  • Third-Party Audits: Regular security assessments by external experts

Your Rights and Choices

Access and Control

  • View Your Data: Request a copy of the personal information we hold about you
  • Update Information: Correct or update your account information at any time
  • Delete Data: Request deletion of your personal information (subject to legal requirements)
  • Data Portability: Receive your data in a portable format

Communication Preferences

  • Email Preferences: Unsubscribe from marketing emails at any time
  • Account Settings: Control notifications and communication preferences
  • Support Requests: Contact us directly for privacy-related concerns

Legal Rights (EU/UK Users)

Under GDPR and UK GDPR, you have additional rights:

  • Right to Object: Object to processing for marketing or legitimate interests
  • Right to Restrict: Limit how we process your information
  • Right to Portability: Receive your data in machine-readable format
  • Right to Complain: Lodge a complaint with your data protection authority

Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

Account Data

  • Active Accounts: Retained while your account is active
  • Inactive Accounts: Deleted after 3 years of inactivity (with prior notice)
  • Deleted Accounts: Most data deleted within 30 days of account deletion

Usage Data

  • Analytics Data: Aggregated usage data retained for up to 2 years
  • Log Files: Server logs retained for up to 90 days
  • Support Data: Support requests retained for up to 3 years

Legal Requirements

Some data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements.

International Data Transfers

We may transfer your information to countries outside your residence:

Safeguards

  • Adequacy Decisions: Transfers to countries with adequate data protection
  • Standard Contractual Clauses: EU-approved contracts for data protection
  • Certifications: Partners certified under frameworks like Privacy Shield successors

Locations

Our services and partners may process data in:

  • United States (primary data centers)
  • European Union (EU users' data)
  • Other countries where our service providers operate

Children's Privacy

Our services are not intended for users under 16 years of age:

  • We do not knowingly collect information from children under 16
  • If we discover we've collected such information, we'll delete it promptly
  • Parents can contact us to request deletion of their child's information

Changes to This Policy

We may update this Privacy Policy periodically:

Notification

  • Material Changes: We'll notify you via email or service announcement
  • Minor Updates: Posted on our website with updated "Last Modified" date
  • Review: We encourage periodic review of this policy

Acceptance

Continued use of our services after policy changes constitutes acceptance of the updated terms.

Contact Information

For privacy-related questions or concerns:

General Inquiries

  • Email: legalamarettosoftware.com
  • Response Time: We aim to respond within 72 hours

Data Protection Officer

  • Email: legalamarettosoftware.com
  • For: GDPR/UK GDPR related requests

Mailing Address

Amaretto Software Labs
Privacy Team
[Your Address]
[City, State, ZIP Code]

EU Representative

[If applicable for EU operations]

Regulatory Compliance

We comply with applicable privacy laws, including:

  • GDPR (General Data Protection Regulation)
  • CCPA (California Consumer Privacy Act)
  • UK GDPR (UK General Data Protection Regulation)
  • Other applicable local privacy laws

This Privacy Policy is designed to be transparent about our data practices. If you have questions or concerns, please don't hesitate to contact us.