At Amenity Technologies, accessible from amenitytech.ai, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Amenity Technologies and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in Amenity Technologies. This policy is not applicable to any information collected offline or via channels other than this website.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

How we use your information

We use the information we collect in various ways, including:

• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud

Log Files

Amenity Technologies follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

Cookies and Web Beacons

Like any other website, Amenity Technologies uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.

For more general information on cookies, please read “What Are Cookies”.

Advertising Partners Privacy Policies

You may consult this list to find the Privacy Policy for each of the advertising partners of Amenity Technologies.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on Amenity Technologies, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that Amenity Technologies has no access to or control over these cookies that are used by third-party advertisers.

Third-Party Privacy Policies

Amenity Technologies’ Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business deletes any personal data about the consumer that a business has collected.

Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

Amenity Technologies does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our record.

Last updated: November 2, 2026

PostFlow Automation and Google user data

This section applies to the PostFlow Automation Google Sheets add-on and the PostFlow service (postflow.amenitytech.ai) operated by Amenity Technologies. See also the PostFlow terms of service.

How we protect your data

We use administrative, technical and physical safeguards to protect Google user data:

• Encryption in transit. All traffic between the add-on, your browser and our server uses HTTPS (TLS). Our server enforces HTTPS with HTTP Strict Transport Security (HSTS) and secure, HTTP-only cookies. Our connections to Google, AI providers and social networks also use TLS.
• Encryption at rest. OAuth tokens, refresh tokens and API keys are encrypted in our database with authenticated symmetric encryption (Fernet: AES-128 with HMAC-SHA256) and are never shown in full in our interface.
• Minimum access. The add-on uses the narrowest Google permissions available: it can open only the spreadsheet you use it in, and can contact only our own server (enforced by an allow-list in the add-on).
• Verified requests. Every request from the add-on carries a Google-signed identity token. Our server verifies it and checks that the person is allowed to edit that sheet before doing anything.
• Access control. Each user can see only their own workspace and posts. Administrative access is limited to authorised Amenity Technologies staff, protected by passwords and role-based permissions.
• Secrets management. Server credentials are kept out of source code and stored in restricted server configuration.
• Monitoring and incident response. We keep security and error logs, monitor for misuse, and will notify affected users and authorities of a breach as required by law, including the Digital Personal Data Protection Act, 2023.

No method of transmission or storage is 100% secure, but we work to protect your data and review these measures regularly.

Data retention

We keep Google user data only as long as needed to provide PostFlow to you:

We may keep limited records longer only where the law requires it (for example invoices or legal claims), and only for that purpose.

Deleting your data and revoking access

You can at any time:

• Revoke PostFlow's Google access at myaccount.google.com/permissions (select PostFlow Automation, then Delete all connections), or remove the add-on in Google Sheets via Extensions > Add-ons > Manage add-ons. After that, PostFlow can no longer read or change your spreadsheet.
• Disconnect your AI keys, LinkedIn, Facebook/Instagram or Google settings in the PostFlow app; the stored credentials are deleted from our database immediately.
• Delete your Google Sheet and Drive files yourself at any time; they are in your Google account.
• Ask us to delete your account and all data we hold about you by emailing [email protected] from the email address of your account. We will confirm your request and delete your account, posts, publishing records, encrypted tokens and keys from our systems within 30 days, remove your access to workspace files our account owns, and confirm when it is done. Logs and backups age out on the schedule above.

Revoking Google access stops future access but does not by itself delete data we already hold; to delete that, use the account deletion request above.

Limited Use and AI/ML models

PostFlow's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not use, transfer or sell Google user data, whether raw, aggregated, anonymised or derived, to create, train or improve generalized or foundational artificial intelligence or machine learning models, whether our own or a third party's. Data sent to AI providers (OpenAI or Google Gemini) is used only to generate the content you request. By default, PostFlow connects to these providers using your own API key, so this data is processed under your own account with that provider and their data retention and training terms for your account apply. If you ask us to use our API key instead, our accounts with those providers are configured so that this data is not used to train their models.