Privacy Notice

Updated: 18 February 2026

This Privacy Policy explains how Aava AI Oy (Aava AI Ltd.), operating the Amplifiles service (“Amplifiles”, “we”, “us”, “our”), processes personal data as a data controller.

This Privacy Policy applies to all Amplifiles websites, products, services, and related platforms that refer to this policy.

1. Controller

Aava AI Oy (Aava AI Ltd.)

Åkerlundinkatu 8

33100 Tampere

Finland

Email: hello@amplifiles.ai

Aava AI Oy complies with the data protection legislation in force in Finland and the European Union, including the General Data Protection Regulation (GDPR). We expect the same standard of compliance from our partners and service providers.

If you are a consumer who resides in the State of California, this supplementary privacy notice for California residents applies to you.

2. Name of the Register

Customers, Marketing, and Stakeholders Register

3. What personal data do we process, for what purpose, and on what legal basis?

Data subjects

The data subjects include:

  • Customers and users of the Amplifiles service

  • Prospect customers

  • Business partners and affiliates

  • Other stakeholders interacting with Amplifiles
Categories of personal data processed

Depending on the relationship and interaction with Amplifiles, we may process the following categories of personal data:

  • Basic information such as name, username, language preference, and user identifiers

  • Contact information such as email address, phone number, and company details

  • Account and service data including subscription details, billing status, invoices, and customer support communications

  • Usage and technical data such as login timestamps, feature usage, logs, IP address, device and browser information

  • Marketing and advertising data such as click identifiers, cookie identifiers, and campaign attribution data

  • User-provided content where necessary to provide the service (e.g. uploaded images, listing metadata)

Amplifiles does not intentionally collect sensitive personal data.

Purposes of processing

Personal data is processed for the following purposes:

  • Providing, operating, and maintaining the Amplifiles service

  • Managing customer relationships and user accounts

  • Billing, invoicing, bookkeeping, and payment processing

  • Customer support and communications

  • Developing, improving, and securing our products and services

  • Analytics and service performance monitoring

  • Marketing and promoting Amplifiles services

  • Measuring and optimizing advertising campaigns

  • Compliance with legal and regulatory obligations
Legal basis for processing

Personal data is processed based on one or more of the following legal grounds:

  • Performance of a contract between Amplifiles and the user

  • Consent, where required (e.g. marketing cookies or advertising technologies)

  • Legitimate interest, such as improving our services, business operations, and marketing activities

Legal obligation, including accounting, taxation, and compliance requirements

4. Advertising and Conversion Tracking

We use advertising and conversion tracking tools provided by third-party advertising platforms, including but not limited to Google and Meta, to understand how users find our services and to measure the effectiveness of our marketing activities.

When a user arrives at the Amplifiles service via an advertisement, a third-party platform may assign a unique click identifier (such as a Google Click Identifier or Meta click ID). If the user later performs certain actions, such as signing up for the service or completing a purchase, Amplifiles may send a conversion event back to the relevant advertising platform.

The data processed for this purpose may include click identifiers, device and browser information, IP address, pages visited, and information about completed conversions. Where required by applicable law, this processing is based on the user’s consent, which can be withdrawn at any time via cookie or privacy settings.

‍5. Sources of personal data

We collect personal data primarily from:

  • The data subject directly

  • Use of the Amplifiles service and websites

  • Cookies and similar technologies

  • Publicly available sources

  • Marketing, analytics, and advertising partners within the limits of applicable law

More information about cookies and similar technologies is provided in our Cookie Policy.

6. Data disclosure and international transfers

We may disclose personal data to:

  • Service providers and subcontractors processing data on our behalf (e.g. hosting, analytics, payment processing)

  • Advertising and marketing partners where applicable

  • Authorities where required by law

Personal data may be processed outside the EU/EEA. In such cases, Amplifiles ensures appropriate safeguards are in place, such as EU Standard Contractual Clauses or other mechanisms permitted under Article 46 of the GDPR.

7. Data security and retention

We apply appropriate technical and organizational security measures to protect personal data, including access controls, encryption, and secure infrastructure. Access to personal data is limited to authorized personnel on a need-to-know basis.

Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Data may be anonymized instead of deleted where appropriate.

8. Your rights as a data subject

You have the right to:

  • Access your personal data

  • Request correction or deletion of your data

  • Withdraw consent where processing is based on consent

  • Object to or restrict processing based on legitimate interest

  • Receive your personal data in a structured, commonly used, and machine-readable format

  • Lodge a complaint with a supervisory authority

In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman

P.O. Box 800

00521 Helsinki

Finland

tietosuoja@om.fi

For specific personal reasons, you also have the right to  object profiling  and other processing concerning yourself, when processing the data is based on our legitimate interest. In connection with your claim, you should identify the specific situation on which you object the processing. We can refuse to act on such request based only on grounds provided by law. No automated decision-making, including profiling, takes place that produces legal effects or similarly significantly affects the data subject.

All requests and requirements concerning this section should be submitted in writing to the address  hello@amplifiles.ai.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on our website with a revised date. If the changes are material, we may also notify users through other appropriate means.