Amberjack Privacy Policy

Privacy at a Glance

Amberjack is an AI-powered website builder operated by yulci GmbH. Amberjack uses artificial intelligence and automated systems to analyze existing public websites and generate new or modernized websites.

Amberjack does not operate its own website-hosting infrastructure. Generated static websites are deployed and delivered using third-party infrastructure, currently including Cloudflare's globally distributed network.

We store Amberjack account, authentication, project, Source Website scan, URL, and generation-run data in Neon, currently in AWS Europe (Frankfurt / aws-eu-central-1).

We use the OpenAI API for AI processing. According to OpenAI's current business/API data terms, API inputs and outputs are not used to train OpenAI's general models by default unless the API customer opts in.

Amberjack may use eligible data from website-generation runs to train, fine-tune, test, evaluate, benchmark, and improve Amberjack's own AI and website-generation systems. There is no contractual opt-out from this use, subject to mandatory data-protection and other legal rights.

We use Google Analytics on Amberjack.ai. Where applicable law requires consent, non-essential analytics storage is enabled only after the required consent.

All paid transactions are processed by Paddle as Merchant of Record. We use Resend for service and transactional emails.

If you delete your Amberjack account, data linked to that account is automatically deleted from Amberjack's active application database, subject to limited provider backups, logs, legal records, and information already lawfully incorporated into trained, aggregated, or de-identified systems.

1. Who We Are

This Privacy Policy explains how yulci GmbH, trading as Amberjack ("Amberjack", "we", "us", or "our"), processes personal data when you use Amberjack.ai, create or manage an account, submit or scan a website, generate a website, communicate with us, or otherwise use the Amberjack Service.

Controller:

yulci GmbH
c/o Trubegüetlistrasse 18
8212 Neuhausen, Switzerland
Commercial-register number: CH-290.4.021.473-4
Email: info@amberjack.ai

This Privacy Policy applies to Amberjack's own processing activities. Customers using websites generated through Amberjack may have separate privacy obligations toward visitors to those websites.

2. Personal Data We Process

2.1 Account and authentication data

We process information needed to create, authenticate, secure, and manage your Amberjack account, including:

Email address;

Account and authentication identifiers;

Login/session information;

Account status and settings.

Neon is currently used for Amberjack's application database and authentication infrastructure.

2.2 Subscription and transaction data

All paid Amberjack transactions are processed through Paddle, which acts as Merchant of Record. We may receive information such as Paddle customer or transaction identifiers, subscription plan, subscription status, billing status, and renewal or cancellation information.

Paddle independently processes payment-card information, billing details, tax information, and fraud-prevention data under its own terms and privacy practices. Amberjack does not ordinarily receive complete payment-card details.

2.3 Source Website and scan data

When you submit a website URL, Amberjack uses automated systems and artificial intelligence to scan and analyze publicly accessible pages and assets from the Source Website. We may collect and store:

Submitted URLs and page structure;

Website text and other public content;

Images and other public assets;

Business names and contact information;

Metadata, links, layout, design, and technical information;

Other publicly accessible information reasonably needed to analyze and generate the website.

Amberjack stores the submitted URL and the full website scan used for the project in its application database. Publicly accessible information may still be personal data.

If personal data is obtained from a public Source Website rather than directly from the person concerned, this Privacy Policy describes the relevant categories and purposes. Where applicable law requires additional direct notice and no exception applies, Amberjack will provide that notice or otherwise comply with the applicable requirement.

2.4 Website-generation and run data

When Amberjack generates a website, we may store data relating to that generation run, including:

Source Website and URL information;

Generation inputs, settings, configuration, and technical parameters;

Generated text, layouts, code, configurations, and other Outputs;

Edits, selections, approvals, and project state;

Technical, statistical, structured, and derived information relating to the run.

Amberjack does not currently provide a general-purpose prompt chat interface. We nevertheless process and store the URLs, configuration, run data, Outputs, and other information technically required to perform and improve each generation run.

2.5 Technical, security, analytics, and communications data

When you access Amberjack.ai or use the Service, Amberjack and its providers may process IP addresses, browser and device information, request URLs, timestamps, session information, security signals, and other operational information needed to provide, secure, and understand the Service.

If you contact us, we process your email address, message, and related correspondence. We currently use Resend to send service and transactional emails.

3. Why We Use Personal Data and Our Legal Bases

We use personal data to:

Create, authenticate, and manage Amberjack accounts;

Scan and analyze Source Websites;

Generate, modify, deploy, and deliver Generated Websites through supported third-party infrastructure;

Store and manage projects and generation runs;

Verify domains and prevent phishing, impersonation, fraud, and abuse;

Administer subscriptions and transactions;

Send service, security, and transactional communications;

Provide support;

Secure, maintain, troubleshoot, and improve Amberjack;

Measure use of Amberjack.ai;

Develop, train, fine-tune, evaluate, test, benchmark, and improve Amberjack's AI and website-generation systems;

Comply with legal, tax, accounting, regulatory, and security obligations;

Establish, exercise, or defend legal claims.

Where the GDPR or another law requires a legal basis, the basis depends on the activity and may include performance of a contract, legitimate interests, consent, and compliance with legal obligations. Legitimate interests may include operating and improving Amberjack, preventing abuse, securing the Service, and developing our technology where those interests are not overridden by applicable rights and interests.

Where consent is legally required, such as for certain non-essential analytics cookies, we rely on consent. You may withdraw consent at any time for future processing based on that consent.

A contractual intellectual-property licence in the Amberjack Terms is separate from the legal basis required to process personal data. Acceptance of the Terms is not treated as blanket data-protection consent where valid consent is legally required.

4. Artificial Intelligence and Model Development

Artificial intelligence is a core part of Amberjack. Amberjack uses AI and automated systems to analyze Source Websites, understand website structure and content, generate or modernize websites, create layouts and code, evaluate Outputs, and improve Amberjack's website-generation technology.

4.1 OpenAI API

We currently use the OpenAI API as an AI infrastructure provider. Information sent to the OpenAI API may include relevant Source Website content, website-scan information, generation data, generated content, and Outputs needed to perform the requested AI processing.

According to OpenAI's current business/API data terms, OpenAI does not use API inputs and outputs to train or improve its general models by default unless the API customer explicitly opts in to data sharing. Amberjack's own model-development activities described below are separate from OpenAI's own model-training policy.

4.2 Amberjack model and product development

When a user accepts the Amberjack Terms and uses Amberjack to generate a website, Amberjack may use eligible information from that generation run to develop, train, fine-tune, retrain, test, evaluate, benchmark, secure, and improve Amberjack's AI systems, website-generation systems, evaluation systems, templates, algorithms, and related technologies.

This may include eligible Source Website content, scan information, generation inputs and configuration, Generated Websites and Outputs, edits and selections, and technical or derived data.

Amberjack does not provide a contractual opt-out from this use of eligible generation-run data. This does not override rights that cannot lawfully be excluded. Where model-development processing involves personal data, Amberjack processes that information only where a lawful basis is available and will respect applicable statutory rights, including rights to object where those rights apply.

We do not intend to use passwords, payment-card credentials, authentication secrets, private form submissions, government identifiers, health information, biometric information, or similarly sensitive security data for generalized model development.

Deletion of an account or project stops future use of the deleted active records, subject to applicable law, but does not necessarily remove information or patterns already lawfully incorporated into trained, fine-tuned, aggregated, or de-identified systems where removal is not technically possible or legally required.

5. Google Analytics and Cookies

Amberjack.ai uses Google Analytics to understand how visitors use the website and to improve the Service. Google Analytics may process page visits, session information, browser and device information, approximate geographic information, interactions, and pseudonymous identifiers.

Google Analytics 4 may use first-party cookies such as _ga and _ga_<container-id> to distinguish users and maintain session state when analytics storage is enabled.

Amberjack may also use strictly necessary cookies or similar technologies for authentication, security, session management, and core Service functionality.

Where applicable law requires consent for analytics cookies or similar non-essential tracking, Amberjack will request that consent before enabling the relevant analytics storage or tracking. Users can reject or withdraw non-essential analytics consent through the cookie or privacy controls made available on Amberjack.ai.

Amberjack does not intentionally send passwords, payment information, or similarly sensitive information to Google Analytics.

6. Service Providers and International Processing

Amberjack relies on third-party providers to operate the Service. Our current core providers include:

Neon - database and authentication infrastructure. Persistent Amberjack account, authentication, project, Source Website scan, URL, and generation-run data is currently stored in AWS Europe (Frankfurt / aws-eu-central-1).

Cloudflare - DNS-related functionality, security, caching, edge processing, and delivery of Generated Websites. Amberjack does not operate its own website-hosting infrastructure. Generated static pages are deployed and delivered through Cloudflare's distributed network, and visitor requests may therefore be processed through Cloudflare infrastructure.

OpenAI - AI processing through the OpenAI API.

Paddle - Merchant of Record for subscriptions, billing, payment processing, tax handling, refunds, and related fraud prevention.

Google Analytics - analytics and usage measurement for Amberjack.ai.

Resend - service and transactional email delivery.

We may replace or add providers where reasonably necessary to operate Amberjack. We will update this Privacy Policy where a change materially affects the information provided here.

Although Amberjack's primary application database is currently located in Frankfurt, Germany, not all processing occurs in Switzerland or the European Economic Area. Personal data may be processed in Switzerland, the EEA, the United States, and other countries where our providers operate.

Where required by applicable law, Amberjack uses or relies on legally recognized mechanisms and safeguards for international transfers, such as adequacy decisions, recognized contractual safeguards, or Standard Contractual Clauses.

7. Retention and Account Deletion

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, security, technical, and contractual requirements.

7.1 Account deletion

When an Amberjack user deletes their account, Amberjack automatically deletes data associated with that user from Amberjack's active application database, including associated projects, stored Source Website scans, submitted URLs, and generation-run data.

Deletion from Amberjack's active database may not immediately remove information from limited infrastructure backups, security or technical logs, email-delivery records, Paddle transaction and accounting records, provider systems subject to their own retention cycles, or records Amberjack is legally required to retain.

Billing, accounting, tax, fraud-prevention, dispute, and legal records may be retained for longer where required or reasonably necessary. Residual provider copies are deleted or expire according to applicable technical deletion cycles and legal requirements.

As described in Section 4, deletion also does not necessarily reverse lawful model-development use already completed before deletion.

8. Generated Websites and Website Visitors

Amberjack is an AI website builder. It does not operate the customer's business or decide the customer's purposes for collecting visitor information. Generated static websites are deployed and delivered using third-party infrastructure, currently Cloudflare.

The Amberjack customer is generally responsible for deciding what personal data its Generated Website collects from visitors and why that information is collected. Customers are responsible for providing any privacy notices, cookie information, consent mechanisms, analytics disclosures, form disclosures, and other visitor-facing privacy information required for their own website.

Amberjack and its infrastructure providers may process limited visitor information where technically necessary to secure and deliver Generated Websites. If a customer adds external analytics, forms, advertising tools, embedded content, or other third-party services to a Generated Website, those providers may independently process visitor information.

This Amberjack Privacy Policy does not replace a customer's own website privacy policy.

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal data, including rights to:

Request information about personal data we process about you;

Access your personal data;

Correct inaccurate information;

Request deletion;

Request restriction of certain processing;

Object to certain processing;

Receive certain information in a portable format;

Withdraw consent where processing is based on consent;

Lodge a complaint with a competent data-protection authority.

These rights are subject to applicable conditions and exceptions. The absence of a contractual AI-training opt-out does not restrict a mandatory statutory right.

To exercise a privacy right, contact info@amberjack.ai. We may need to verify your identity before processing a request.

Swiss residents may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC). EU/EEA residents may lodge a complaint with the competent supervisory authority in their country.

10. Security

Amberjack uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, misuse, or disclosure. No internet, cloud, AI, or software service can guarantee absolute security.

You are responsible for maintaining the confidentiality of your Amberjack credentials and protecting devices and accounts used to access the Service. Suspected security issues may be reported to info@amberjack.ai.

11. Children

Amberjack is not directed to children and is intended for users who are legally capable of entering into the Amberjack Terms. We do not knowingly offer Amberjack accounts to children. If you believe a child has provided personal data to Amberjack inappropriately, contact info@amberjack.ai.

12. Changes to this Privacy Policy

We may update this Privacy Policy when Amberjack, our providers, our data practices, or applicable law changes. The current version will be made available through Amberjack.ai or the Service and will show its effective date. Where applicable law requires advance notice or consent for a material change, we will provide it.

13. Contact

For privacy questions, requests, or complaints:

yulci GmbH, c/o Trubegüetlistrasse 18, 8212 Neuhausen, Switzerland
Email: info@amberjack.ai