Privacy Policy
This policy explains what information Amber (“Amber”, “we”, “us”) handles when you use our service, why, and the choices you have. Amber helps teams search and ask questions across documents stored in Google Drive.
1. Who we are
Amber is a personal hobby project, not a company. It is built and operated by Anushka Singh and Justin Dsouza, as individuals. For privacy questions, write to anushka.singh098@gmail.com.
If your employer or organization gives you access to Amber, your organization decides which documents are added and who can see them. For that content we act on the organization’s instructions, and you should also read its own policies.
2. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | Name, email address, profile picture, Google account ID, and your Google Workspace domain (if any) | Google sign-in |
| Documents you add | Files you upload or pick from Google Drive, plus their names, types, sizes and Drive link | You |
| Content we derive | Text extracted from your files, split into passages, and numeric “embeddings” of each passage used for search | Generated from your documents |
| Organization and sharing | Collections, tags, and the list of people or domains each file is shared with | You, and Google Drive sharing for picked files |
| Google Drive connection | A refresh token that lets Amber keep working with the files you allowed. It is stored encrypted | Google sign-in |
| Activity records | Security and audit entries: what action was taken (for example, sharing a file or an administrator changing a role), by whom, when, and from which IP address | Generated when you use Amber |
| Questions and answers | The questions you ask and the answers produced, when those features are used | You |
We do not ask for payment card details on this website, and the marketing website does not use analytics or advertising trackers.
3. How we use it
- To sign you in and keep your session secure.
- To read, index and search the documents you add, and to answer your questions using only documents you are allowed to access.
- To save uploads to your Google Drive and keep sharing in Drive and Amber in step, when you ask us to.
- To let administrators of your Amber workspace manage users and review document access.
- To detect abuse, investigate problems, keep audit records, and meet legal obligations.
- To maintain and improve reliability and performance of the service.
We do not sell your personal information, and we do not use your documents for advertising.
4. Google user data
Amber signs you in with Google and, with your permission, connects to Google Drive. We request these permissions:
- Basic profile and email to identify your account.
- Google Drive “drive.file” to (a) create the “Amber Uploads” folder and save files you upload there, (b) read the files you choose with the Google file picker, and (c) view and change the sharing settings of those files when you ask us to. This permission does not let Amber see other files in your Drive.
Amber’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements, we use Google user data only to provide and improve the user-facing features described in this policy. We do not sell it, do not use it for advertising, do not transfer it to others except as needed to provide the service, comply with law, or with your consent, and do not allow people to read it except when you ask for help, for security investigations, to comply with law, or when it is aggregated and anonymized. We do not use Google user data to develop or train generalized AI models.
You can remove Amber’s access at any time from your Amber profile (“Disconnect Drive”) or from your Google Account’s third-party access settings.
5. Who we share it with
We share information only with service providers that help us run Amber, under terms that limit how they may use it:
- Google: sign-in (Firebase Authentication and Google OAuth), Google Drive, and Google Cloud hosting (compute, database, key management and secrets).
- Google Gemini API: passages of your documents and your questions are sent to Gemini to create embeddings and, when answering is enabled, to write answers. We use the paid tier of the API. [Confirm Google’s current paid-tier terms say customer content is not used to train its models, and keep this sentence only if true.]
We may disclose information if required by law or to protect rights, safety and security. If Amber is involved in a merger or sale, we will tell you before your information becomes subject to a different policy.
6. Who can see your documents inside Amber
- You see files you own or that were shared with you, individually or through your organization.
- People you share with can find and receive answers from those files.
- Administrators of your Amber workspace can see file names, owners, sharing settings, processing status and user lists. Amber does not provide administrators a way to read the text of files they cannot open themselves.
- Our staff do not access document content as part of normal operations. Access is limited to what is needed for support you request, security, or legal compliance.
When you share a file in Amber, we also change its sharing in Google Drive, and Google may email the people you share with. Sharing with “your organization” makes the file visible to everyone in your Google Workspace domain.
7. Cookies
The Amber app uses only essential cookies: a session cookie to keep you signed in, a security cookie that protects against cross-site request forgery, and a short-lived cookie used during Google sign-in. These cannot be switched off without breaking sign-in. We do not use advertising or cross-site tracking cookies. This marketing website sets no cookies.
8. Security
- All traffic uses HTTPS.
- Google Drive refresh tokens are encrypted before storage using keys managed in Google Cloud Key Management Service.
- Access to documents is checked on the server for every request, and changes by users and administrators are recorded in an audit log.
- Secrets are kept in a managed secret store, not in source code.
No system is perfectly secure. If we learn of a breach affecting your information, we will notify you and any required authorities as the law requires.
9. Retention and deletion
- Deleting a document in Amber removes its extracted text and embeddings. It does not delete the original file from Google Drive.
- Disconnecting Drive deletes the stored token and asks Google to revoke it.
- Removing a user (an administrator action) deletes their account and everything they own in Amber, including documents, collections and tokens.
- Audit and security records are kept for as long as needed for security and accountability, and then deleted and may refer to a user by email address and IP address.
- Backups of our database are kept according to Google Cloud’s backup schedule for the database and then expire.
To ask for deletion of your account, contact your workspace administrator or write to us.
10. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict use of your personal information, to object to certain processing, and to complain to a data protection authority. To use these rights, contact us at the address above. We may need to verify your identity, and for content your organization controls we may refer you to your administrator.
11. Where data is processed
Amber is hosted on Google Cloud in Mumbai, India. Google may process data, including Gemini API requests, in other countries. By using Amber you understand your information may be transferred to and processed in countries other than your own, with protections consistent with this policy.
12. Children
Amber is built for workplaces and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has provided information to us, contact us and we will delete it.
13. Changes to this policy
We may update this policy. When we make material changes we will update the effective date and, where appropriate, notify you in the app or by email.
14. Contact
Anushka Singh and Justin Dsouza (individuals)
anushka.singh098@gmail.com