Last Updated: February 18, 2021
Amplitude, Inc. (“Amplitude,” “we,” or “us”) is a cloud-based product-analytics platform that helps customers build better products. Amplitude respects the privacy of individuals and is committed to protecting the information of visitors to the website (“Visitors”) and individuals or entities that register to use the Amplitude products and services through the Website (“Customers”). This Privacy Notice describes Amplitude’s practices for collecting, using, maintaining, protecting, and disclosing information in relation to Visitors of the website, amplitude.com, including our Community Forum (“Website”), Amplitude’s marketing activities, and Customers accessing and using the products and services available on the Website (collectively, “Product”).
Please read the following carefully to understand our policies and practices regarding your information collected through the Website, through your use of the Product, through our marketing activities and how we will treat it. If you do not agree with the below policies and practices, your choice is not to use our Website or register to use the Product through our Website.
This Privacy Notice covers how we treat Personal Data that we gather when you access or use our Product. Specifically, Amplitude is the controller of your Personal Data as described in this Privacy Notice, when it collects personal information from: (i) Visitors to Amplitude’s publicly available Website; (ii) Customers when our Customers register to use the Product through the Website or access their account through Amplitude’s account portal at: https://analytics.amplitude.com/login; and (iii) when we receive personal information from you related to our marketing activities.
For clarity, this Privacy Notice does not apply when Amplitude processes Personal Data in the role of a processor on behalf of its Customers, including with respect to the processing of our Customer End User Data (as defined below). In addition, this Privacy Notice does not apply to the mobile applications, websites or services offered by our Customers or other third-parties.
Throughout this Privacy Notice, “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations.
The Personal Data you provide to us directly
The Personal Data we collect from third party sources
Amplitude may obtain Personal Data about you from third parties, including, but not limited to, marketing event organizers, partners and resellers. This information may include your first and last name, company name, job title, work email address, phone number and address. Amplitude requires that any third party providing it with information has obtained the information lawfully and the third party has obtained the appropriate consent to share the information with Amplitude.
Information We Collect Automatically:
We use information that we collect about you or that you provide to us, including Personal Data, in order to respond to a request from you, to carry out our legal obligations, to fulfill a contract with you, to protect your vital interests, to provide you with notices and for other purposes with your consent as described below.
We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.
As noted in the list above, we may communicate with you if you’ve provided us the means to do so. For example, if you’ve given us your email address, we may send you promotional email offers or email you about your use of the Product or Website. Also, we may receive a confirmation when you open an email from us, which helps us improve our Website and Product. If you do not want to receive communications from us, please indicate your preference by emailing us at firstname.lastname@example.org or email@example.com.
We may disclose Personal Data that we collect, or you provide to us as described below. Amplitude does not share or sell your Personal Data with any third parties for direct marketing purposes.
Amplitude has not sold your Personal Data over the last twelve (12) months and Amplitude does not sell Personal Data. For purposes of this section, we use the term ‘sell’ as it is defined in the CCPA.
This Privacy Notice does not apply to Customer End User Data or Customer Applications. With respect to Amplitude’s Customers, Amplitude is a processor, and Amplitude processes the Personal Data collected by our Customers and sent to the Amplitude platform only in accordance with the instructions of our Customers. Our Customers may integrate into their mobile applications, websites or other services (collectively, “Customer Applications”) certain aspects of our Product in order to understand how their own users (“Customer End Users”) engage with the Customer Applications (“Customer End User Data”).
While Amplitude recognizes that an individual has the right to access, delete and amend the data collected about that individual, Amplitude does not have a relationship with the Customer End Users but rather only with our Customers. If you are a Customer End User and you would like to access, amend or delete your data, then you need to contact the Customer directly and Amplitude will respond within a reasonable period of time to any such request by our Customer.
Amplitude only retains the Customer End User Data we process on behalf of our Customers for as long as necessary to provide the Product to our Customers or as required to comply with legal obligations, resolve disputes and enforce any agreement.
The data servers Amplitude uses to provide the Website and Product are located in the United States. By interacting with the Website or using the Product, you understand that your personal data will be transferred to the United States and you consent to such transfer.
To the extent Amplitude collects or processes personal data transferred from the European Union or Switzerland to the United States, Amplitude complies with the EU-U.S. and the Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal data transferred from the European Union, and the United Kingdom and Switzerland to the United States, respectively, in reliance on Privacy Shield. Amplitude has certified to the Department of Commerce that it adheres to the Privacy Shield Principles with respect to such information. If there is any conflict between the terms in this Privacy Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program and to view the certification for Amplitude, please visit: https://www.privacyshield.gov/.
For the actions of third party agents Amplitude engages to process data on our behalf, Amplitude remains responsible and liable under the Privacy Shield Principles if a third party agent processes the personal data in a manner inconsistent with the Privacy Shield Principles, unless Amplitude proves that it is not responsible for the event giving rise to the damage.
Amplitude uses commercially reasonable physical, managerial, and technical safeguards designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration and disclosure. All information you provide to us is also encrypted and stored on our secured servers behind firewalls.
However, you are also responsible for maintaining the confidentiality of your password and other information used by you to access the Website or use the Product. While Amplitude does its best to protect your Personal Data, Amplitude cannot guarantee the security of your Personal Data transmitted to our Website because the transmission of information via the internet is not completely secure. Any transmission of your Personal Data is done at your own risk and Amplitude cannot guarantee that such Personal Data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards, and except as expressly required by law, we are not responsible for the theft, destruction, loss or inadvertent disclosure of your Personal Data or information. If Amplitude learns of a security systems breach, then we may attempt to notify you electronically so that you can take appropriate protective steps. Amplitude may post a notice on the Website if a security breach occurs. Depending on where you live, you may have a legal right to receive notice of a security breach in writing. To receive a written notice of a security breach (or to withdraw your consent from receiving electronic notice) you should notify us at firstname.lastname@example.org.
We strive to provide you with choices regarding the Personal Data you provide to us and we understand that you have the right to access, correct, delete, object to and restrict our use of your Personal Data. We also understand that you have the right to obtain a copy of your Personal Data from us and to withdraw your consent of the processing of your Personal Data by us. Please note that the rights set forth in this Section 8 apply globally to all Visitors and Customers, whether or not you are a California resident or a resident of the European Union, United Kingdom, Lichtenstein, Norway or Iceland. We have created mechanisms to provide you with the following control over your Personal Data:
Please note to exercise the rights set forth above we may will ask you to: (1) provide sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 30 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request using the following methods:
We will not discriminate against you for exercising your rights under the GDPR, CCPA or other applicable data privacy laws or regulations. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the GDPR, CCPA or other applicable data privacy laws or regulations.
Personal Data that Amplitude collects and processes as a controller for the purposes identified in this Privacy Notice are not kept by Amplitude for longer than is necessary for the specific purpose identified in this Privacy Notice unless Amplitude is required to retain your Personal Data for a longer period of time to comply with our legal obligations (for example, if we are required to retain your Personal Data to comply with applicable laws or regulations), resolve disputes, and enforce our legal agreements and policies. Personal Data that Amplitude processes on behalf of its Customers as a processor is retained for the period of time specified in the agreement between Amplitude and its Customers, unless Amplitude is required to retain the Personal Data for a longer period of time to comply with our legal obligations (for example, if we are required to retain your personal information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
Amplitude does not knowingly collect or solicit Personal Data directly from Visitors of the Website that are under the age of 13. If you are under 13, please do not provide or send us any Personal Data or attempt to register for or otherwise use the Product. If we learn that a child under 13 has directly provided us with their Personal Data through the Website, then we will delete that information. If you believe a child under 13 has registered for an account on the Website, please contact us at email@example.com.
Amplitude does not use any Personal Data provided by you for the purpose of automated decision-making.
Our Website may contain links to other third party websites or applications (such as Facebook, LinkedIn or Twitter). This Privacy Notice does not apply to any third party websites, including through any application that may link to or be accessible from or on the Website, and Amplitude is not responsible for the privacy policies and the content of the third party websites or applications.
Please note that we reserve the right, at any time, to add to, change, update, or modify this Privacy Notice. If, in our reasonable discretion, the changes are material, we will post a notice on our website or send you an email. The modified Privacy Notice will be posted on this website along with the effective date. You are responsible for ensuring that we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this Privacy Notice to check for any changes. Changes to this Privacy Notice are effective when they are posted on this page.
As part of our commitment to the Privacy Shield Principles, if you are a resident of the European Union or Switzerland and you have a privacy or data use concern, please contact Amplitude directly at firstname.lastname@example.org and Amplitude will use its best efforts to address your concern within 45 days of receipt of your complaint. For an unresolved privacy or data use concern that Amplitude has not addressed satisfactorily, please contact our U.S. based third party dispute resolution provider (free of charge) at https://www.jamsadr.com/file-an-eu-us-privacy-shield-or-safe-harbor-claim.
For any Privacy Shield disputes that cannot be resolved by the methods above, you may be able to invoke a binding arbitration process under certain conditions. To find out more about the Privacy Shield’s binding arbitration scheme, please see: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
The Federal Trade Commission has investigation and enforcement authority over Amplitude’s compliance with the Privacy Shield Framework.
If you have any comments, concerns or questions about this Privacy Notice or our privacy practices in general, please send an email to email@example.com, firstname.lastname@example.org, or send mail to:
631 Howard Street, Floor 5
San Francisco, CA 94105
Your right to file a complaint with a data supervisory authority about our privacy practices remains unaffected.
Under California Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at email@example.com or firstname.lastname@example.org.
This Privacy Notice was last updated on February 18, 2021.
Amplitude uses both first-party and third-party cookies and web beacons. First-party cookies and web beacons are cookies and web beacons that are served directly by Amplitude to your computer or mobile device. Third-party cookies and web beacons are served by a third-party service provider on behalf of Amplitude. Third-party cookies are most commonly used for advertising and analytics purposes.
There are four categories of cookies and web beacons used by Amplitude. Specifically, Amplitude uses essential, performance, functionality and advertising cookies and web beacons.
The table below lists the types of cookies and third party service providers currently used by Amplitude but may not include all cookies or third party service providers. In addition, the below list of cookies and third party service providers is subject to change at any time.
Who serves it
What it does
|Amplitude||We use our own products and services to analyze the user behavior within our website and our own products and services.||For more information about our privacy practices, see https://amplitude.com/privacy.|
|Google Analytics||We use Google Analytics to analyze the use of our website.||For more information about Google’s privacy practices, see https://policies.google.com/privacy|
|Split.io||We use Split.io for experimentation.||For more information about Split.io’s privacy practices, see https://www.split.io/legal/privacy-policy/.|
|Optimizely||We use Optimizely to optimize page content on our website.||For more information about opting-out of Optimizely’s cookies, see https://www.optimizely.com/legal/opt-out/|
|Drift||We use Drift to power chat functionality.||For more information about Drift’s privacy practices, see https://www.drift.com/privacy-policy/.|
|Doubleclick||We use Doubleclick to track advertisements and measure website visits and conversions.||For more information about opting out of the ads, see: https://adssettings.google.com/u/0/authenticated.|
|We use LinkedIn to track conversions and website visits from our advertisements displayed on LinkedIn.||For more information about LinkedIn’s privacy practices, please see: https://www.linkedin.com/legal/privacy-policy|
|We use Facebook to track conversions and website visits from our advertisements displayed on Facebook.||For more information about Facebook’s privacy practices, please see: https://www.facebook.com/help/www/213802165366955|
|AddThis||We use AddThis for their website tools like social sharing buttons. |
|For more information about AddThis’s privacy practices, please see: https://www.oracle.com/legal/privacy/addthis-privacy-policy.html.|
|Rollworks||We use Rollworks for account based marketing. |
|For more information about Rollworks’s privacy practices, please see: https://www.nextroll.com/privacy.|
It is your choice as to whether or not to accept cookies. Most browsers allow you to configure the browser settings so that cookies from websites cannot be placed on your computer or mobile device. If you choose not to accept cookies, then you may be able to continue browsing our Website but we may not be able to provide you with certain features. If you want to opt out of advertising or performance cookies, then you may do so by reviewing the privacy policies of the third party service providers who serve the advertising and performance cookies identified above. If you would like further information about cookies and how to manage and delete them, please visit www.allaboutcookies.org or www.youronlinechoices.eu.
Through the Digital Advertising Alliance and Network Advertising Initiative, several media and marketing associations have developed an industry self-regulatory program to give consumers a better understanding of, and greater control over, ads that are customized based on a consumer’s online behavior across different websites and properties. To make choices about internet-based ads from participating third parties, including to opt-out of receiving behaviorally targeted advertisements from participating organizations or to learn more about opting out of advertising cookies, please visit the Network Advertising Initiative’s or Digital Advertising Alliance’s consumer opt-out pages, which are located at http://networkadvertising.org/choices/ or www.aboutads.info/choices. For those users located in the European Union, you can visit the European Interactive Digital Advertising Alliance’s user information website a http://www.youronlinechoices.eu/.