Privacy policy

1. Who we are

Amber Loop — this website, the app at app.amberloophq.com and the Amber Loop apps — is provided by ESINYA LTD (“Esinya”, “we”, “us”), registered in England and Wales, company number 17433260, registered office 100 St. Marys Drive, Crawley, England, RH10 3BQ, United Kingdom.

For anything about your personal data, write to privacy@esinya.com. This policy covers Amber Loop only; the esinya.com website has its own notice.

2. Our two roles

• Your account and how you use Amber Loop: we decide how this data is used, so we are its controller.
• What you and your team put into a workspace — videos, transcripts, posts, images, and anyone who appears or is mentioned in them: the organisation that owns the workspace decides why it is there, and we process it on that organisation’s behalf as its processor, under section 10 of the Terms.

If you appear in a video someone uploaded to Amber Loop and want it removed, ask the organisation that published it. You can also write to us and we will pass your request on and help them.

3. What we collect

• Account: your email address; your name and profile picture if you sign in with Google; your role in each workspace; how and when you signed up and confirmed your email.
• Workspace content: brands and their Brand Brain, posts and their versions, comments and approvals, the calendar, the videos you upload and what Amber Loop makes from them (transcripts, clips, subtitles, images, videos), your decisions on clips, and performance figures you import.
• Rights confirmations: when you upload a video, your confirmation that you may use and publish it, with the date and the wording you confirmed.
• Usage and credits: what was generated, when, by whom, with what kind of AI model, and the credits used.
• Audit records: who made an important change and when — for example an approval, a role change or a publication.
• Technical data: IP address, browser and device type, request times and errors. We use IP addresses to limit abuse, for example repeated sign-ups.
• Feedback: what you write to us in the app and any screenshot you attach.
• Waiting list: if founding places are full, your email address and language, so we can tell you when places open.

We do not ask for payment details, identity documents or sensitive personal data. Videos contain voices and faces: we process them to transcribe your talk and cut and frame your clips, never to recognise who someone is — no facial recognition and no voice identification.

4. Why we use it, and on what legal basis

Under the UK GDPR and the EU GDPR we rely on these legal bases:

• To provide Amber Loop — create your account and workspace, store your work, transcribe, cut and subtitle your videos, generate the text, images and videos you ask for, run approvals and the calendar, and publish when you decide. Basis: our contract with you.
• To keep it secure and fair — sign-in, abuse limits, the limits on free use, audit records and fixing errors. Basis: our legitimate interest in a safe, working service, and our contract.
• To learn your preferences — your workspace learns from your decisions (names, spellings, preferred length). This stays inside your workspace, and a proposed preference applies only after you say yes. Basis: our contract.
• To improve Amber Loop — counts that contain no content (for example how many clips were approved) and the feedback you send. Basis: legitimate interests.
• To talk to you — sign-in links, invitations and notices about important changes. We send no marketing email without your consent. Basis: our contract and legitimate interests.
• To meet legal duties and to establish or defend legal claims. Basis: legal obligation and legitimate interests.

You can object to any use based on legitimate interests (section 11).

5. AI in Amber Loop

• Amber Loop uses AI models from specialist providers to transcribe speech, find moments, write text and create images and videos. Each provider receives only what its task needs, and only to produce what you asked for.
• We do not use your content to train AI models. What Amber Loop learns from your decisions stays inside your workspace and is never used for another customer.
• AI suggests; people decide. Amber Loop takes no decision about you that has legal or similarly significant effects, and nothing is published without a person’s decision.

6. Who receives your data

We do not sell personal data and we do not share it for advertising. We share it only with:

• Google Cloud and Firebase — hosting, sign-in, database, file storage and sign-in emails.
• AI model providers, reached through an AI model gateway — transcription, text, images and video.
• Our publishing service — only if your workspace connects social accounts, and only for the posts you choose to publish or schedule. What is published is then also covered by each social platform’s own terms.
• An email delivery service — invitations and service messages.
• Professional advisers, and authorities when the law requires it.
• A successor, if Amber Loop or Esinya is reorganised or sold, with the same protections.

Providers act on our instructions under contract. Ask us and we will send you the current list of the specific providers.

Esinya’s team does not look at the content of customer workspaces. To run the service we see counts and dates, such as how many videos are waiting. We open your content only if you ask for help and give access, to investigate a security problem or a serious breach of the Terms, or when the law requires it.

7. Where your data is processed

Amber Loop runs on Google Cloud. Our application servers and video processing run in the European Union (Netherlands). Some providers, in particular AI model providers, process data in other countries, including the United States.

When personal data leaves the UK or the European Economic Area, we rely on an adequacy decision or on safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. Ask us for details.

8. How long we keep it

• Account and workspace content: while your account and workspace exist.
• A video you delete in the app: the video, its transcript and its clips are deleted at once. What Amber Loop learned from your decisions (names, spellings, preferences) stays with your workspace until the workspace is deleted.
• When you delete your account: removed from our live systems within 30 days of your request. Backup copies, where they exist, expire on their normal cycle and are only used to recover from an incident.
• Usage, credit and audit records: up to 12 months after the workspace is deleted, without its content, to keep the service secure and answer questions; longer only where the law requires it.
• Technical logs: usually 30 days.
• Feedback: up to 24 months, or less if you ask.
• Waiting list: until we contact you about a place, and at most 12 months.

9. Cookies and storage on your device

• This website uses no cookies and no analytics or tracking.
• The app uses one cookie, __session, which keeps you signed in for up to 5 days, and your browser’s storage to keep you signed in and remember on-screen choices such as language and filters.
• All of this is strictly necessary to provide the service you asked for. There are no analytics or advertising cookies, so there is nothing to accept or decline.
• The Android app opens the same app and stores the same things.

10. Security

Every connection is encrypted (HTTPS), and Google Cloud encrypts stored data. The server checks on every request that you belong to the workspace you are reading. Permissions follow your role, and important changes are recorded in an audit log.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authority as the law requires.

11. Your rights

You can ask us to give you a copy of your personal data (including in a portable format), correct it, delete it or restrict its use, and you can object to its use. Where we rely on your consent, you can withdraw it at any time.

Write to privacy@esinya.com from the email address of your Amber Loop account. It is free, and we answer within one month. We may ask you to confirm the request is really yours.

You can complain to a data protection authority: in the UK the Information Commissioner’s Office (ico.org.uk), in Portugal the Comissão Nacional de Proteção de Dados (cnpd.pt), in Angola the Agência de Protecção de Dados (APD), or the authority where you live. We would appreciate the chance to put things right first.

12. Deleting your account

You can ask us to delete your account and its data at any time. The steps, and what is deleted and kept, are on Delete your account.

13. Children

Amber Loop is a professional tool for people aged 18 or over. It is not meant for children. If we learn that a child has given us personal data, we delete it.

14. Changes to this policy

When Amber Loop changes what it does with personal data, we update this page at the same time and change the date at the top. We tell you about important changes by email or in the app before they apply.

15. Contact