Privacy Policy

Bay Leaf Partners, LLC (hereinafter “Amplytics”, “we” or “us”) cares deeply about the privacy of its visitors and users. Amplytics is fully committed to protect its visitors’ and users’ personal information and use it properly in compliance with data privacy laws. Our Amplytics software as a service (hereinafter “Service”) is designed and built with privacy in mind. It is a tool to help its users understand their visitors’ behavior anonymously, without identifying individuals. Similarly, we have also built our marketing Website Amplytics.com (hereinafter “Website”) with the same care in mind.

This policy describes how we may collect and use personal information, and the rights and choices available to our users who register, visit the amplytics.com website, or use the Service (“User”) or visitors of Users’ website or platforms whose data is collected by the User (“Visitors”).

We strongly urge you to read this policy and make sure you fully understand it before you access or use any of our services.

1. WHAT THIS PRIVACY POLICY COVERS

This Privacy Policy describes how we collect and use information pertaining to each of our unregistered visitors, registered users, and our users’ visitors, in connection with their access to and use of the Service and Website (collectively, the “Services”). 

The purpose of this Privacy Policy is to provide you with a clear explanation of when, why and how we collect and use personal information, as well as an explanation of your rights. 

Read this Privacy Policy and make sure you fully understand our practices in relation to your personal information, before you access or use any of our Services. If you read and fully understand this Privacy Policy, and remain opposed to our practices, you should avoid using this Website, Service, and avoid or discontinue all use of any of our Services. If you have any questions or concerns regarding this policy, please contact us at support@amplytics.com. 

2. OUR SERVICES

Our Services are designed to enable you to learn more about your audience’s interaction with your paid ads on various platforms including, but not limited to, Google Ads, Facebook, LinkedIn, and Bing Ads. Furthermore, our services enable you to get notified about changes in key campaign metrics and determine what actions you could take to improve campaign performance or stop campaign execution.  

3. WHAT DO WE COLLECT AND RECEIVE?

We collect and receive information regarding our Users, our Users’ Visitors, and anyone else who may provide it to us. 

We collect and receive two types of information regarding our Users and Visitors: 

1. Un-identified and non-identifiable information pertaining to a Visitor or un-identified User may be made available to us or collected automatically via his/her use of the Services (“Non-personal Information”). Such Non-personal Information does not enable us to identify the Visitor or User from whom it was collected or received. The Non-personal Information collected by us mainly consists of technical and aggregated usage information, such as the Website the Visitor or User came from, Visitors’ and Users’ browsing activity on the Services, non-identifying information regarding the Visitor’s or User’s device, internet browser, the browser’s timezone, the country browsed from, referring/exit pages, date/time stamps, etc.
2. Individually identifiable information, namely information that identifies an individual or may with reasonable efforts cause the identification of an individual, or may be of private or sensitive nature (“Personal Information”) will just be collected once a User registers to receive the Amplytics Services. The Personal Information collected by us mainly consists of contact details, such as the email address, and the Website, which are only collected from Users, details regarding connected third party accounts (such as the e-mail or username for a connected Google or Facebook account), correspondences (including those made through or uploaded to our Services), and any other Personal Information provided to us by Visitors and/or Users through their access to and/or use of the Services. 

3.1 Amplytics Users

In order to receive the Services, Users will be required to register and provide us with certain data, including personal data such as their email address, and their Website, as well as technical data referring to their usage of our Services, their internet connection, devices, systems and software used to access and use our Services.

It is each User’s voluntary decision whether to provide us with any such personal data, but refusal to provide any required data may result in us not being able to register the User and enable them to receive our Services as such data is necessary for us to provide the Services.  

3.2 Users and their Visitors

The Users use our Services to track and analyze the performance of their marketing campaigns, and for such purpose connect Amplytics with various advertising platforms using their accounts. Data collected is only un-identified and non-identifiable information about visitors including IDs, channels, clicks, conversions, and other non-identifiable information. Our Users may use our services to collect and analyze the data parameters provided. 

Once such data parameters are collected, they enable us to provide the Services to our Users and enable the Users to analyze and optimize marketing performance. 

The same applies for un-registered Users to the Amplytics Website. We may collect the channel you came from, your browsing behavior, the platform you are browsing from and other Non-identifiable information. 

We process this data to facilitate your access to our Services, such as to adjust our Services to the device you are using and to recognize and stop any misuse. We also process usage data in anonymized form for statistical purposes and to improve our site. 

3.3 Third Party Integrations

We may use the information we collect or receive through the Service, as a data processor, to enable your use of the integrations and plugins you choose to connect to your Amplytics account. For instance, if you choose to connect Google Ads to your Amplytics account, we are able to access Google Ads account through Google Ads API. We store this marketing performance data to allow you to analyze it for performance improvements. This data may be aggregated to calculate benchmarks used across the Amplytics system. 

You may choose to connect your Facebook or other social media account to Amplytics to receive analytics about the use of social media interaction of your Visitors. In this case, you as a data controller, must read the policies of such social media platforms, and define legal bases for the processing of personal data. In some cases, you may be joint controllers with the social media platforms.  

Amplytics’ use and transfer of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

4. HOW DO WE COLLECT INFORMATION?

4.1 Information through your use of our Services

We collect information through your use of our Services. When you visit or use our Services, including when you browse the Website, register a User Account, and use the Platform, we will usually gather and collect such users, sessions and related information, either independently or with the help of third-party services as detailed below, including through the use of “cookies” and other tracking technologies.  

4.2 Information Provided Voluntarily

We collect information which you provide us voluntarily. For example, we collect the Personal Information you provide us when you register to our Services; when you sign in to our Services via third party services such as Facebook or Google; when you submit or upload such Personal Information as you use any of our Services; and/or when you contact us directly by any communication channel. 

4.3 Information Provided Through Amplytics Account

When you sign up for an account with Amplytics, we may ask you to provide us with information such as your name, email address and details about your organization. As otherwise detailed in this Privacy Policy, we will solely process this information to provide you with the service you signed up for. Please refer to our Limited Use Disclosure for further details on registering and using the Services offered by Amplytics. 

You may deactivate your Amplytics account and/or unsubscribe from receiving content or offers from us at any time. Following termination of your account, we may retain your personal data (in part or in whole) in order to be able to address customer service issues. At any point, you can request us to delete all your personal data. 

5. WHY DO WE COLLECT INFORMATION?

We collect such Non-personal and Personal Information for the following purposes: 

1. To provide and operate the Services; 
2. To further develop, customize and improve our Services, based on Visitors’ and Users’ common or personal preferences, experiences and difficulties; 
3. To provide our Users with ongoing customer assistance and technical support; 
4. To be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages; 
5. To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we may use to provide and improve our respective services; 
6. To enhance our data security and fraud prevention capabilities; and 
7. To comply with any applicable laws and regulations. 
   
   

We will only use your Personal Information when we are satisfied that our use of your Personal Information is necessary to: 

1. Perform a contract or take steps to enter into a contract with you (e.g. to provide you with our customer assistance and technical support), or 
2. Comply with a relevant legal or regulatory obligation that we have, (provided that Amplytics will endeavor to notify you if Amplytics has received a lawful request for your information); 
3. Protect the rights and property of Amplytics, customers, and others including to enforce our agreements, policies, and terms of use;
4. Protect the personal safety of any person; and for the purposes of a business deal (or negotiation of a business deal) involving sale or transfer of all or a part of our business or assets (business deals may include, for example, any merger, financing, acquisition, divestiture, or bankruptcy transaction or proceeding); or 
5. Our use of your Personal Information is necessary to support legitimate interests that we have as a business (for example, to maintain and improve our Services by identifying user trends and the effectiveness of Amplytics’s campaigns and identifying technical issues), provided it is conducted at all times in a way that is proportionate, and that respects your privacy rights. 
   
   

We also collect and use information in order to contact our visitors, and users, and in order to comply with the laws applicable to us. 

Where you have provided consent, you may withdraw it at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing it.

6. HOW DO WE PROTECT YOUR INFORMATION?

Data collected using our Services belongs to you and is stored electronically in data centers managed by Amazon Web Services. As the data controller, you are the only one with direct access to your data, which can never be used by any third party for any other purpose other than for that which you agreed. 

Our security practices are based on industry-leading standards. Our security framework includes policies and procedures, asset management, access management, physical security, people security, product security, cloud and network infrastructure security, third-party security, vulnerability management, security monitoring, and incident response. 

We never sell personal data and we carry out all processing operations in compliance with the General Data Protection Regulation (“GDPR”). 

We may disclose personal data in our possession if we are required to do so by law, such as to comply with a subpoena or search warrant, governmental order, or similar legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect the data subject’s safety or the safety of others, to protect Amplytics’ legitimate interests, or to investigate fraud or other threats. 

If you have questions or need more detailed explanations on security topics, feel free to contact us via support@amplytics.com. 

7. YOUR DATA PROTECTION RIGHTS

You can exercise the following rights by contacting us at support@amplytics.com. 

 You have the right to access information about you, especially:  

1. The categories of data; 
2. The purposes of data processing; 
3. Third parties to whom the data disclosed; 
4. How long the data will be retained and the criteria used to determine that period; 
5. Other rights regarding the use of your data. 

The right to access information may be performed only by you or your legal representative. In case if you request the right to access information via a legal representative, you have to provide proof of whether such a person may represent you.  

You have the right to make us correct any inaccurate personal data about you.  

You can object to using your personal data for profiling you or making automated decisions about you. We may use your data to determine whether we should let you know the information that might be relevant to you. 

You have the right to restrict processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances.  

You have the right to the data portability of your data to another service or Website. We will give you a copy of your data in a readable format so that you can provide it to another service. If you ask us and it is technically possible, we will directly transfer the data to the other service for you.  

You have the right to be “forgotten.” You may ask to erase any personal data about you if it is no longer necessary for us to store the data or in other certain circumstances. We will also deactivate your account. Please, note, that we cannot restore permanently deleted accounts or personal data.  

Once we receive any of your requests we will consider and decide on it within one month unless there is a justified requirement to provide such information faster. This term may be extended according to the applicable law.  

We may request specific information from you to confirm your identity when necessary and reasonable. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.  

You do not need to pay a fee to access information or other rights but we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive or refuse to comply with your request in these circumstances.  

7.1 Data Protection Rights for California Residents (CCPA) 

If you are a California resident, you have the right to: 

1. Receive, free of charge, the following information covering the 12 months preceding your request: 
   • The categories of Personal Information about you that we collected; 
   • The categories of sources from which the Personal Information was collected; 
   • The purpose for collecting Personal Information about you; 
2. The categories of third parties to whom we disclosed Personal Information about you and the categories of Personal Information that was disclosed (if applicable) and the purpose for disclosing the Personal Information about you; and 
3. The specific pieces of Personal Information we collected about you; 
4. Request the deletion of Personal Information we collected from you, unless the CCPA recognizes an exception; 
5. Request the correction of inaccurate Personal Information we maintain about you; 
6. Not have your Personal Information Sold or Shared for purposes of cross-context behavioral advertising; and Be free from unlawful discrimination for exercising your rights under the CCPA. 

8. WHERE DO WE STORE YOUR INFORMATION?

Note: We process and store all data in data centers on the Amazon Web Services infrastructure, which use state-of-the-art multilayer access, alerting, and auditing measures. Our database servers run inside an Amazon Virtual Private Cloud, which is only accessible from the application servers and no outside sources are allowed to connect to the database. 

At Amplytics, we strive to implement the highest level of security processes and practices across all business units. 

Amplytics is based in the USA. Our security practices are based on industry-leading standards. Our security framework includes policies and procedures, asset management, access management, physical security, people security, product security, third-party security, vulnerability management, and incident response. 

Amplytics Users’ Personal Information may be maintained, processed and stored by Amplytics and our authorized affiliates and service providers of Amazon AWS’ industry-leading, high security servers in the United States of America, and in other jurisdictions as necessary for the proper delivery of our Services and/or as may be required by law. For further information, please visit Amazon S3, Amazon EC2, and Amazon Relational Database Service (RDS).

Amplytics service providers that store or process your Personal Information on Amplytics’ behalf are each contractually committed to keep it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements which may apply in their jurisdiction. 

Upon request we will provide you with information about whether we hold any of your Personal Information. You may access, correct, or request deletion of your Personal Information by reaching out to support@amplytics.com. We will respond to your request within a timeframe imposed by local laws or a reasonable timeframe. 

If you have questions or need more detailed explanations on security topics, feel free to contact us at support@amplytics.com. 

9. COOKIES AND OTHER TRACKING TECHNOLOGIES

Amplytics is designed to enable you to learn more about your Visitors use of your Website or product by giving you the ability to collect information based on their interaction. Amplytics together with its marketing, analytics and technology partners, uses certain monitoring and tracking technologies (such as cookies, beacons, pixels, tags and scripts). These technologies are used in order to maintain, provide and improve our Services on an ongoing basis, and in order to provide our Users with a better experience. For example, thanks to these technologies, we are able to maintain and keep track of Users’ preferences, to better secure our Services, to identify technical issues, user trends, and to monitor and improve the overall performance of our Services. 

Please note that third-party services placing cookies or utilizing other tracking technologies through our Services may have their own policies regarding how they collect and store information.

A cookie is a small piece of text that is sent to a browser. The browser provides this piece of text to the originating server when the visitor returns. Amplytics uses cookies to help implement its tracking technology. Amplytics does not store any personal data in cookies. Most Web browsers are initially configured to accept cookies, but you can change this setting so your browser either refuses all cookies or informs you when a cookie is being sent. Also, you are free to delete any existing cookies at any time. Please note that some features of Amplytics may not function properly when cookies are disabled or removed. 

If you leave a comment on our site you may opt-in to saving your name, email address and Website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. 

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

10. SHARING PERSONAL INFORMATION WITH THIRD PARTIES

We may share your Personal Information with third parties (or otherwise allow them access to it) only in the following manners and instances: 

10.1 Third Party Services

Amplytics has partnered with a few carefully selected service providers, whose services and solutions complement, facilitate and enhance our own. These include hosting and server co-location services, data and cyber security services, billing and payment processing services, and email distribution and monitoring services (collectively, “Third Party Service(s)”). 

Such Third Party Services may receive Visitors’ and Users’ Information, in its entirety or in part – depending on each of their particular roles and purposes in facilitating and enhancing our Services and business, and may only use it for such purposes. 

Note that while our Services may contain links to other websites or services, we are not responsible for such websites’ or services’ privacy practices. We encourage you to be aware when you leave our Services and read the privacy statements of each and every website and service you visit before providing your information. This Privacy Policy does not apply to such linked third-party websites and services. 

10.2. Law Enforcement, Legal Requests and Duties

Where permitted by local data protection laws, Amplytics may disclose or otherwise allow others access to your information pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have good faith belief that the law requires us to do so, with or without notice to you. 

10.3. Protecting Rights and Safety

We may share your Personal Information with others if we believe in good faith that this will help protect the rights, property or personal safety of Amplytics, any of our Users, any Visitor, or any member of the general public, with or without notice to you. 

11. COMMUNICATIONS FROM AMPLYTICS

Blog

Amplytics offers a publicly accessible blog that may be shared on various social networks. If you leave a comment on our blog, your profile picture might become visible to the public. 

If you leave a comment on our blog, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. 

For users that register on our Website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. 

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. 

Visitor comments may be checked through an automated spam detection service. 

Email Communication

You may choose to stop receiving any emails from us by following the unsubscribe instructions included in these emails, or you can contact us at support@amplytics.com. 

We may also send you service related non-promotional email announcements on rare occasions when it is necessary to do so, for example, during provision of maintenance services, or as a reply to inquiries initiated by you. 

12. DATA RETENTION

We retain non-personal marketing performance data for as long as the applicable User account is active, or as otherwise instructed by such User or any partner that has provided us with such data, or otherwise to the extent authorized under applicable law. We may adopt shorter retention periods to the extent required or authorized by our Users, or in accordance with common practices and legal requirements. We may also retain and use personal data as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, and to protect our or others’ legal rights and legitimate interests. 

We retain Users’ personal data in accordance with the purposes, requirements and legal basis for which such data was provided or made available to us or utilized by us in accordance with applicable law. For example, we retain our Users’ contact details as reasonably necessary for the purposes of maintaining our engagements and performing, improving and promoting our Services and relationships with our Users. 

13. CHANGES

We may update this Privacy Policy to reflect changes to our data practices from time to time. The most current version of this Privacy Policy will govern our practices for collecting, processing, and disclosing personal data. We will provide notice of any modifications by posting a written notice on our site. We encourage you to periodically review this page for the latest information on our privacy practices. 

14. COMMENTS AND QUESTIONS

If you have any comments or questions about our privacy practices, please contact us at support@amplytics.com. 

Updated May 28, 2024