Amplify Data Privacy Statement

Introduction to This Data Privacy Statement

This Data Privacy Statement (the "Statement") explains the manner in which Amplify ("we," "us," or "our") collects, uses, and otherwise processes personal data. For purposes of this Statement, "Personal Data" refers to information that identifies, concerns, describes, or can reasonably be associated, whether directly or indirectly, with a specific individual, as those and similar concepts—including "personal information" and "personally identifiable information"—are understood under applicable law. Data that does not independently identify an individual will still be treated as Personal Data if it is combined with Personal Data and remains linked or reasonably linkable to a particular person. Please review this Statement carefully before downloading, installing, accessing, or using the Product.

If you are a resident of certain U.S. states, please review the U.S. State Residents Annex below. That section contains additional disclosures and may describe rights available to you. It also operates as a Notice at Collection and Privacy Notice for purposes of the CCPA.

This Statement is meant to explain the types of information we process, the reasons we process it, how it may be used or shared, the safeguards we maintain, and the choices available to you in relation to that processing.

We process Personal Data in connection with the downloading, installation, activation, access, and use of the Product, together with the website through which the Product is made available (collectively, the "Product"). In this Statement, "you" and "your" refer to the person using the Product and, where applicable, the business or other entity on whose behalf that person is acting.

Personal Data you submit to us, or that we otherwise process in connection with the Product, is maintained within our systems and handled in accordance with this Statement. We do not share Personal Data with third parties except as described in this Statement or where disclosure is required by applicable law. You are not legally obligated to provide us with Personal Data. However, if certain Personal Data is not provided, some features of the Product may not be available, and we may not be able to answer certain requests or inquiries. By downloading, installing, accessing, or otherwise using the Product, you acknowledge and agree that Personal Data may be collected, used, disclosed, and stored as described in this Statement. If you do not agree with these practices, do not download, install, access, or use the Product.

Who Decides How Your Personal Data Is Processed?

For purposes of applicable privacy and data protection laws, we serve as the "data controller" (or similar term under applicable law) with respect to Personal Data processed in connection with the Product, which means we determine the purposes for which such Personal Data is processed and the way in which that processing takes place.

If you would like additional information about this Statement, our processing of Personal Data, or the Product more generally, you may contact us at [email protected].

Information We Process and the Reasons for Processing

We process Personal Data when you download, install, access, or use the Product, and when you contact or otherwise engage with us regarding the Product.

The Product is not intended to collect or process Sensitive Data, and, to the best of our knowledge, it does not do so. In this Statement, "Sensitive Data" means information that is classified as sensitive under applicable law, including similar categories such as special category data, highly sensitive information, or sensitive personal information. Please do not send, upload, or otherwise provide Sensitive Data through the Product. Depending on the jurisdiction, Sensitive Data may include information concerning racial or ethnic origin, religious or philosophical beliefs, sexual orientation, health information, and certain financial information.

The particular Personal Data and Non-Personal Data we process depends on how you interact with the Product. The categories described below identify the relevant types of data, the purposes for which they are processed, and, where applicable, the legal bases we rely on for that processing. We may also process Personal Data where necessary to detect, investigate, prevent, or respond to fraud, misuse, infringement, identity theft, security incidents, unlawful or prohibited conduct, or breaches of our Terms of Service; to protect the Product and our systems; and to establish, exercise, or defend legal claims or otherwise manage legal exposure. Where applicable, we rely on our legitimate interests for such processing.

Depending on your use of the Product, we may process the following categories of Personal Data:

• Usage, Performance, and Troubleshooting Data: We may process Personal Information concerning how the Product functions and how it is used, whether collected directly by us or by service providers acting on our behalf. This may include information about the features you use, timestamps, session length, clickstream information, technical events, and records relating to errors or troubleshooting. We use this information to evaluate performance, support internal development, identify and correct issues, improve the Product, and maintain security, based on our legitimate interests in operating and enhancing the Product.
• Support and Correspondence Data: If you contact us for assistance or otherwise communicate with us regarding the Product, we may process your contact details, the content of your communication, and any other information you choose to provide. We use this information to respond to you, provide support, communicate with you about your request, and maintain records of support interactions. We may also retain those communications for future reference, service enhancement, and support personnel training. Where support is provided as part of the Product, we rely on performance of our contract with you; otherwise, we rely on our legitimate interests in recordkeeping and improving support operations.
• Content You Submit: We do not retain user content on our own servers or upload user content to our systems for storage. Once processing is completed and output is generated, that output is made available to you and remains stored locally on your device. Where you are authorized to do so, user content may include Personal Data relating to individuals other than yourself, such as names or descriptions of other persons (each, a "Non-User"). If you do not have the necessary authority or any required consent, you should not upload Personal Data concerning anyone other than yourself. To the extent Personal Data relating to a Non-User is processed through the Product, we rely on our legitimate interests in providing and maintaining a functional Product for our users.
• Online and Device Identifiers: We may process technical identifiers associated with your device or your use of the Product, including your Internet Protocol (IP) address, device identifiers, browser-based identifiers, Google advertising ID (GAID), and similar identifiers. When these identifiers are used to operate the Product, preserve functionality, protect security, or prevent fraud, we rely on our legitimate interests. When they are used for marketing, targeted advertising, or tracking technologies, we rely on your consent as described in this Statement.
• Search Features: We may collect, use, and disclose information connected to those search queries submitted to applicable search partners and third-party service providers that assist in providing search capabilities and related search results. Such information may include your search terms, previous search behaviour, the results shown to you and your engagement with those results, and your search records. Although this information generally does not, by itself, directly identify you, where it is considered Personal Data under applicable law, we will handle it in accordance with this Notice.

We use Personal Data and related information for various operational, commercial, and compliance-related purposes, including the following:

• Administration, Analysis, and Improvement: We use information to operate, support, maintain, assess, and improve the Product and its features. This includes monitoring performance, resolving issues, evaluating usability and compatibility, understanding user experience, and developing updates, improvements, or additional functionality in line with our operational and business needs.
• Marketing, Personalization, and Related Outreach: We may use Personal Data for personalization, promotional activities, advertising, and marketing, including to make content, communications, and advertisements more relevant to your interests and your use of the Product.
• Security and Misuse Prevention: We use information to preserve the security, integrity, and dependability of the Product, our systems, and our users. This includes helping us detect and prevent fraud, misuse, unauthorized activity, and other conduct that may violate our terms or applicable law, as well as taking appropriate measures to protect our services and infrastructure.
• Providing the Product: We process information as necessary to make the Product available and to deliver its features and functionality, including sharing with search engines to provide the search results.

Cookies and Comparable Technologies

The Product may use cookies and similar technologies in connection with your access to and use of the Product. Depending on the relevant interface, these technologies may be stored on, placed on, or otherwise linked to your device while you browse, access, or use Product features. In general, cookies are text files commonly used in web-based environments.

We use these technologies to support the operation and usability of the Product, including to facilitate efficient navigation, automatically enable certain features, remember preferences, and make your interactions with our services more responsive and efficient.

Your Privacy Rights

Depending on the laws applicable to you, you may have certain rights regarding the Personal Data we process about you. Where required by applicable law, we will respect those rights.

• Access Right. You may request confirmation of whether we process your Personal Data and, where applicable, request access to or a copy of the Personal Data we maintain about you.
• Correction Right. You may also have the right to request that we correct Personal Data that is inaccurate or incomplete, erase Personal Data in circumstances recognized by applicable law, or restrict our processing of Personal Data where such a right exists.
• Deletion Right. You may have the right to request deletion of certain Personal Data we maintain about you.
• Portability and Objection Rights. Where applicable law provides for these rights, you may object to certain processing of your Personal Data and request that we provide your Personal Data in a portable format, or transfer it to another party where technically feasible.
• Where applicable, you may also have the right to appeal and to lodge a complaint with the relevant authority.

To exercise any of these rights, or to submit a data protection-related inquiry, please contact us at [email protected]. If you are a resident of certain U.S. states, you should also review the U.S. State Residents Annex below for additional disclosures and rights that may apply to you.

How We Safeguard Personal Data

We maintain reasonable safeguards intended to protect the Personal Data we process in connection with the Product and to support the confidentiality, integrity, and availability of our systems and services.

In selecting and applying those safeguards, we take into consideration the nature and sensitivity of the information involved. We use generally accepted technical, administrative, and organizational measures designed to reduce the risk of unauthorized access, misuse, loss, alteration, or disclosure.

Our security program includes technical, administrative, and operational controls intended to help protect information assets. However, no transmission method, storage environment, or security control can be guaranteed to be completely secure, and therefore we cannot assure absolute security.

How Long We Keep Personal Data

Unless this Statement provides otherwise, we retain Personal Data for as long as necessary to fulfill the purposes for which it was collected, as permitted or required by applicable law. We may also retain Personal Data for longer periods where needed to comply with legal, regulatory, tax, or accounting obligations, maintain business records, resolve complaints or disputes, or establish, exercise, or defend legal claims.

In some circumstances, and subject to applicable law, you may have the right to request deletion of your Personal Data. Please note, however, that unless retention is required by law or a specific agreement, we are not obligated to retain Personal Data for a fixed period and may securely delete it, anonymize it, or restrict access to it once it is no longer needed for legitimate business purposes.

When We Disclose Information and Transfer It Across Borders

We may disclose Personal Data processed in connection with the Product only in limited circumstances, and only where doing so is consistent with this Statement, necessary for our operations, or required by applicable law.

Service Providers, Affiliates, and Business Partners: We may disclose Personal Data to affiliates, subsidiaries, service providers, advertisers, providers of search feed or search engine, and other third parties that assist us in operating, supporting, maintaining, marketing, managing, or improving the Product and, where applicable, to provide the search results and search factuality.

Corporate Transactions: Personal Data may be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, reorganization, asset sale, consolidation, or other significant business transaction or change involving us.

Legal and Protective Disclosures: We may disclose Personal Data where we believe such disclosure is necessary or appropriate to comply with applicable law, legal process, subpoenas, warrants, court orders, or other binding demands, or where needed to investigate or address unlawful activity, misuse of the Product, security incidents, or threats to the rights or safety of any person or entity.

Analytics and Reporting Providers: We may disclose information to analytics providers and similar partners that assist us in measuring, evaluating, and better understanding the performance, use, and effectiveness of the Product, including through aggregated or statistical reporting.

International Transfers: Personal Data may be received by parties located outside your jurisdiction, including outside the EEA where applicable. Where that occurs, we take steps intended to ensure that recipients are subject to privacy and security obligations consistent with this Statement and applicable law. Where required, we implement appropriate safeguards for cross-border transfers, including contractual protections and other lawful transfer mechanisms intended to protect your Personal Data when processed internationally.

Updates to This Data Privacy Statement

We may update this Statement from time to time to reflect changes to the Product, our data processing practices, or applicable legal requirements. Any revised version will be made available on our website and, unless we indicate otherwise, will become effective when posted. We encourage you to review this Statement periodically.

Children's Privacy and Minimum Age

The Product is not intended for children under 16, and we do not knowingly collect or process Personal Data from children. If we become aware that a child has provided Personal Data to us, we will delete that information as soon as reasonably practicable. If you believe a child has shared information with us, please contact us promptly.

Contacting Us

Questions, concerns, or requests relating to this Statement, our privacy practices, or the Product may be sent to us by email at: [email protected].

U.S. State Residents Annex

This Annex supplements the remainder of this Statement and applies to residents of certain U.S. states. It provides additional information about how we collect, use, disclose, and otherwise process Personal Data where those disclosures are required under applicable U.S. state privacy laws.

Depending on the law of the relevant state, residents of certain U.S. states may have specific privacy rights with respect to Personal Data processed in an individual or household context. Those rights generally do not apply where a person acts in a commercial or employment context, as a job applicant, as the beneficiary of someone acting in an employment context, or as a representative of a business, to the extent those situations are excluded under applicable law.

• Sensitive Data: Under applicable U.S. state privacy laws, "Sensitive Data" may include Personal Data revealing racial, ethnic, or national origin; religious beliefs; information concerning an individual's medical history or mental or physical health condition, diagnosis, or treatment; neural data; transgender or non-binary status; sex life or sexual orientation; status as a crime victim; citizenship or immigration status; genetic or biometric data; Personal Data collected from a known child; and precise geolocation data.
• Personal Data: For purposes of applicable U.S. state privacy laws, "Personal Data" generally means information that is linked or reasonably linkable to an identified or identifiable individual. This generally does not include lawfully obtained publicly available information, de-identified information, aggregated information, or other information excluded from the scope of the relevant state law.

Certain U.S. state privacy laws require us to provide consumers with a clear notice describing, among other things, the categories of Personal Data we process, the purposes for that processing, the categories of third parties to whom we disclose Personal Data, whether any categories of Personal Data are sold or used for targeted advertising, the categories of third parties involved in those activities, the rights available to consumers, the manner in which those rights may be exercised and appealed, and how to contact us. The disclosures in this Statement, together with the information below, are intended to satisfy those requirements.

Categories of Personal Data We Process

The section titled "Information We Process and the Reasons for Processing" describes the categories of Personal Data we collect or otherwise process in connection with the Product, together with the purposes for which that Personal Data is used, stored, or otherwise processed. We do not use the Personal Data we collect for materially different, unrelated, or incompatible purposes, and we do not collect additional categories of Personal Data without providing notice and obtaining consent where required by applicable law, unless we are otherwise permitted or required to do so.

Disclosures Regarding Sale and Targeted Advertising

Under certain U.S. state privacy laws, "sale" may include making Personal Data available to a third party in exchange for monetary or other valuable consideration, including in connection with targeted advertising. We do not "sell" Personal Data in the ordinary sense of receiving money directly in exchange for information about you. However, depending on how "sale" is defined under applicable law, our use of cookies and other tracking technologies, third-party advertising services, and certain related disclosures of Personal Data to third parties, including analytics providers, may be treated as a "sale" or as use for targeted advertising. The categories of Personal Data involved in those activities may include unique identifiers such as device ID and IP address, internet or other electronic network activity information such as engagement with our services, and geolocation data derived from IP address information.

Additional Rights Available to Certain U.S. Consumers

In addition to the rights described in the "Your Privacy Rights" section above, residents of certain U.S. states may have additional rights under applicable privacy laws, subject to the scope, limitations, and exclusions set out in those laws. Those rights may include the following:

• You may have the right to confirm whether we process your Personal Data and to obtain access to that data in a portable format that is readily usable, where technically feasible.
• You may also have the right to request correction of inaccurate Personal Data, deletion of Personal Data you provided to us or that we obtained about you, and, in some cases, a list of the specific third parties to whom we have disclosed Personal Data relating to you or any Personal Data.
• Where applicable law provides this right, you may also opt out of certain processing activities, including the "sale" of Personal Data, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in profiling in furtherance of legal or similarly significant decisions.
• If we do not act on your request, you may have the right to appeal that decision. You may also have the right not to receive discriminatory treatment for exercising privacy rights available to you under applicable law.

Additional information about California privacy rights is available from the California Office of the Attorney General at: https://oag.ca.gov/privacy/ccpa.

Requests to exercise rights available under applicable U.S. state privacy laws may be submitted to us at: [email protected].

Authorized agents may submit requests on behalf of another person where permitted by applicable law, provided they supply evidence of their authority to act for that person. We may also require the individual concerned to verify identity directly and confirm the agent's authority.

We will respond to requests within the period required by applicable law and may extend that period where permitted, subject to any notice obligations imposed by law. If we decide not to act on a request, we will notify you of that decision, explain the reasons for it, and, where applicable, tell you how to appeal. We will review and respond to any appeal within the timeframe required by applicable law. If an appeal is denied, you may have the right to contact or lodge a complaint with the relevant supervisory authority, regulator, or Attorney General in your jurisdiction.