Privacy Policy

This policy covers the Amplypost plugin in ChatGPT and other AI clients connected to Amplypost. When you authorize a connection, Amplypost associates it with your account and stores authorization and permission records. Read permission allows the client to retrieve account information, connected accounts, posts and saved hashtags. Publish permission allows media uploads and immediate or scheduled publishing. Optional offline access lets the client renew access without asking you to sign in each time.

Amplypost receives the arguments and selected attachments sent with a tool request, together with authorization information. The tools do not request your full ChatGPT conversation history. Tool results are sent back to OpenAI or the AI client you connected so it can answer your request. If you grant the optional identity and email permissions, identity responses can also include your email address and email verification status.

Sign in and connect social accounts through Amplypost's authorization pages. Do not put passwords, sign-in codes, API keys or payment card details into tool inputs. The tools do not need these details to create posts.

Amplypost retains Google user data only for as long as necessary to provide the services requested by the user, such as connecting a YouTube channel and publishing or managing scheduled content.

When a user disconnects their Google account from Amplypost, we delete stored Google OAuth access and refresh tokens associated with that connection and cease accessing the user's Google account.

Users may also request deletion of their Google-related data by contacting us at support@amplypost.com. Upon receiving a valid deletion request, we will delete the associated Google user data from our active systems within 30 days, except where retention is required by law or necessary for legitimate security, fraud-prevention, or compliance purposes.

Deleting an Amplypost account will also result in deletion of Google user data associated with that account, subject to the same limited legal and security exceptions.

Amplypost does not sell Google user data or use Google user data for advertising purposes.

Data is disclosed to the following recipients for the features you use:

• Connected platforms: the social networks you select receive content, media and publishing settings to publish and manage posts. Canva processes design browsing and export requests when connected.
• OpenAI or another connected AI client: receives the tool results described in the ChatGPT section below when you use the integration.
• Storage and infrastructure providers: process application records and requests to host and operate Amplypost. Cloudflare R2 stores uploaded media.
• Billing and email providers: Dodo Payments processes subscription checkout and billing; Amazon Simple Email Service processes recipient addresses and message content for account and service emails.
• AI and website measurement providers: Google Gemini processes requested text generation; DataFast, Google Analytics and TikTok receive the website measurement data described above.
• People with access: authorized members of your Amplypost organization can access shared workspace content. Published posts are visible to their platform audience. Anyone with a public media URL can access that file.

Recipients operating their own services, including OpenAI and social platforms, handle their copies under their own policies and account settings.

We take the protection of your sensitive data seriously and have implemented the following security measure:

While we implement this security measure to protect your sensitive information, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal information, but we cannot guarantee its absolute security.

When you connect Canva, Amplypost uses the permissions you grant to display your available designs and, where authorized, your Canva display name. Design information may include design IDs, titles, thumbnails, page counts, editor links, and supported export formats. When you choose to add a design, we export the selected pages in your chosen format and import the resulting images or videos for use in your Amplypost posts.

• Account and content records: account, workspace, connected-account, post and saved-hashtag records are retained to operate your account and provide publishing history. Successful account deletion removes these records from the active database, together with authentication sessions, plugin authorizations and account billing records.
• Plugin access: an issued access token expires after 15 minutes. Refresh access and consent records support continued use while authorized. Token expiry ends that token's use; it does not delete posts, media or other account data. Revoking refresh access does not immediately invalidate an already issued access token, which can remain valid until expiry.
• Uploaded media: files are stored separately from database records and do not automatically expire through the upload feature. Disconnecting ChatGPT, deleting a post or deleting your account does not automatically remove the stored file. Contact support with the media URLs to request removal. Plugin media responses allow caching for up to one year; cached or downloaded copies can remain after removal from storage.
• Temporary plugin uploads: the upload process removes its temporary server files when processing finishes or fails. The uploaded copy in media storage remains as described above.
• Google and Canva data: the integration-specific retention and removal rules in this policy also apply.

Deletion from Amplypost does not remove copies already sent to OpenAI, other AI clients, payment providers or social platforms. Their retention policies and controls apply to those copies. Disconnecting a client does not cancel posts already queued in Amplypost.

• Choose what to send: select only the content, attachments and destination accounts needed for your request. Review the permissions on the authorization screen before connecting an AI client.
• Disconnect integrations: remove the Amplypost connection in your AI client and disconnect social platforms in Amplypost's Connected accounts. You can also revoke authorization through the relevant platform. For help revoking plugin access, contact support.
• Manage your account: update your name in Settings. The organization owner can use Delete account there to remove the organization and its users, workspaces and database records. This affects everyone in the organization. Deletion may require a retry if publication is in progress or subscription cancellation fails.
• Request access, correction or removal: email support@amplypost.com from your account email. Identify the account and the records or media URLs involved. We verify requests to protect account data. Organization members who cannot delete the organization can contact support about their own information.
• Control website tracking: use your browser's cookie and tracking controls. These controls apply to the website; disconnecting the ChatGPT plugin does not change website cookies.
• Manage copies elsewhere: use the relevant AI client or social platform's controls for its chat history, published posts and stored copies.