Privacy · AmberPact

Who we are

AmberPact LLC, Hendersonville, TN, is the controller for account and billing data on amberpact.com. When you store client contacts or files, you are the controller of that client data; we process it to provide the product. Support: support@amberpact.com.

What we collect

Account data (name, email, password hash), workspace settings, contacts, projects, documents, messages, files you upload, calendar events, inquiry submissions, and payment metadata (plan, Stripe customer and subscription ids — not raw card numbers). Client portal visitors act on files you send; we log those events on the project.

Payments

AmberPact subscriptions go through Stripe Checkout and the Stripe Customer Portal. Client invoice checkout uses the studio’s linked Stripe Connect or Square account. Card numbers are handled by those processors. The Golden Hour demo uses a sample checkout; no real card is charged.

Cookies and analytics

We use an HTTP-only session cookie to keep you signed in. On our public website pages, Google Tag Manager loads Google Analytics 4, which sets analytics cookies (such as `_ga`) to count visits and see which pages people use. We don't show a cookie banner at this time. You can block or delete these cookies in your browser settings, or use Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout. Blocking analytics cookies doesn't affect how AmberPact works.

Processors

Vercel hosts the app and stores uploaded files (Vercel Blob). Neon hosts the Postgres database. SendGrid sends our email, such as password reset links and contact-form messages. Sentry receives server error reports. Google Tag Manager and Google Analytics 4 measure site use. Microsoft 365 hosts our support mail on amberpact.com, and GoDaddy hosts our DNS. Stripe (and Square, if a studio connects it) process payments.

Retention and your rights