This Privacy Policy explains how Amass Technologies ApS, VAT: 43657992 ("Amass", "we", "our", or "us"), a private limited company incorporated under the laws of Denmark with its principal office at Nordre Fasanvej 215, 2000 Frederiksberg, Denmark, collects, uses, stores, and shares your personal data when you use our services or access our website.

Amass is committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This policy also informs you of your rights and how to exercise them.

1. Data We Collect

a) Account and User Data

• Full name
• Email address
• Role (e.g., user, administrator)
• IP address
• Device and browser identifiers

b) Payment Data

Payments are handled through Stripe. Amass receives limited information from Stripe:

• Name associated with payment method
• Last four digits of payment card
• Card type and expiry date
• Payment status and transaction metadata

Amass does not directly process or store full payment card details.

c) Usage and Log Data

• Timestamps and user activity logs (e.g., account actions, navigation, etc.)
• Error logs and monitoring data via Sentry

d) Communication Data

• Messages or support requests
• Correspondence sent through integrated platforms (e.g., Google Workspace)

2. Legal Bases for Processing

We process your personal data under the following legal grounds:

• Performance of a contract (e.g., user account and service provision)
• Compliance with legal obligations
• Your consent (where applicable, such as for marketing or cookies)
• Our legitimate interests (e.g., service improvement, fraud prevention)

3. Use of Personal Data

• Provide and maintain our services
• Facilitate payments
• Respond to inquiries and support requests
• Monitor and improve platform functionality
• Meet legal obligations
• Send service-related communications

4. Use of AI-Powered Services

We use certain AI functionalities as part of our platform’s capabilities, including services licensed through Microsoft Azure that incorporate language models such as OpenAI’s language models and other Open Source and related models. These services may process text input provided by users (e.g., research queries, uploaded content, summaries) for the purposes of generating relevant responses or improving user experience.

Data processed by these models is handled in accordance with Microsoft’s enterprise data protection terms, and is subject to the same data residency and security measures as our Azure infrastructure. No user data is used to train these models or retained beyond session-level processing unless explicitly required for service delivery.

5. Data Sharing and Sub-Processors

We share data only with third parties essential to our service delivery:

These providers are contractually bound to comply with GDPR requirements, including obligations around sub-processing.

6. Data Transfers

Some of our sub-processors may transfer data outside the EEA. Where this occurs, we rely on:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs) issued by the Commission

7. Data Retention

We retain your personal data:

• As long as you maintain an account with Amass
• For as long as required under applicable EU laws
• Until consent is withdrawn, where applicable

8. Data Subject Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccuracies
• Request erasure (right to be forgotten)
• Restrict processing
• Object to processing
• Data portability
• Lodge a complaint with your local supervisory authority

To exercise these rights, contact us at: privacy@amass.tech.

9. Data Security

Amass implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of your data. Measures include:

• Encryption in transit and at rest
• Role-based access controls
• Regular security assessments
• Incident response procedures

10. Cookies and Tracking Technologies

We use cookies to:

• Authenticate users
• Monitor usage and performance
• Improve user experience

You can manage your cookie preferences in your browser or via the cookie consent banner.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through our website or by email. Continued use of our services constitutes acceptance of the updated policy.

12. Contact Information

Data Controller:
Amass Technologies ApS, VAT: 43657992
Nordre Fasanvej 215, 2000 Frederiksberg, Denmark
Email: privacy@amass.tech

By using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

‍