Legal
Effective Date: June 30, 2026
This Privacy Policy describes how Amaran LLC, a limited liability company organized under the laws of the State of Delaware (“Company,” “we,” “our,” or “us”), collects, uses, discloses, and safeguards personal information when you access or use the Amaraa encrypted storage and record management platform available at https://amaraa.ai/, including the website, web application, mobile applications, software systems, and related services (collectively, the “Service”).
The Service enables users to store, organize, manage, and share selected digital files, documents, records, notes, images, videos, messages, and other user-uploaded content through an encrypted platform. Users may also designate recipients who may receive access to selected Content through Scheduled Delivery settings or Inactivity Triggers configured by the User.
This Privacy Policy explains how personal information is collected, used, stored, and disclosed when you create an Account, upload Content, configure Recipients, or otherwise interact with the Service.
By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with the Company’s Terms of Service, which govern your use of the Service.
This Privacy Policy applies to personal information collected through your use of the Service, including information provided directly by you and information collected automatically through your interaction with the Service.
For purposes of applicable data protection laws, the Company acts as the “data controller” with respect to personal information collected from users of the Service.
The Company does not sell personal information to third parties and does not share personal information for cross-context behavioral advertising.
This Privacy Policy should be read together with our Terms of Service. In the event of any conflict between this Privacy Policy and the Terms of Service regarding data protection matters, this Privacy Policy shall control.
The Service is intended for individuals who are at least thirteen (13) years of age. By using the Service, you represent and warrant that you meet the applicable minimum age requirement.
The Company does not knowingly collect personal information from children under the age of thirteen (13). If we become aware that personal information has been collected from a child under the applicable minimum age without required consent, we will take reasonable steps to delete such information.
In jurisdictions where the legal age for digital consent is higher than thirteen (13), including certain member states of the European Union where the age may be sixteen (16), you represent that you meet the required minimum age or that you have obtained legally valid parental or guardian consent where required by applicable law.
A parent or legal guardian who believes that a child has provided personal information in violation of this Section may contact us using the contact information provided below, and we will take appropriate action consistent with applicable law.
We collect personal information that you voluntarily provide when you create an Account, use the Service, communicate with us, or otherwise interact with the Platform. Such information may include your name, email address, account credentials, and any other information you choose to provide in connection with your Account.
The Service enables Users to upload, store, organize, and manage Content within their Account. Content uploaded by Users may include files, documents, notes, images, videos, messages, records, and other information that the User chooses to store.
All uploaded Content is provided at the sole discretion of the User. The Company does not require Users to upload any specific type of Content. Users are solely responsible for deciding what Content they choose to upload, store, manage, delete, or share through the Service.
The Company does not actively monitor, review, verify, validate, or determine the legality, authenticity, accuracy, ownership, completeness, or enforceability of uploaded Content.
The Service provides Users with encrypted storage space and related tools to manage their own Content. Users decide what Content they upload, how they organize it, whether they delete it, and whether they configure any Content for sharing or delivery.
The Company processes uploaded Content only as necessary to provide the functionality of the Service, including encrypted storage, file management, account access, user-requested sharing, Scheduled Delivery settings, and Inactivity Trigger functionality configured by the User.
The Company does not use uploaded Content for advertising, profiling, or unrelated marketing purposes.
If you designate Recipients for Scheduled Delivery or sharing triggered by an Inactivity Trigger, we collect the contact information you provide for such Recipients. This information may include names, email addresses, phone numbers, or other contact details provided by you.
You represent that you have the authority or consent necessary to provide such information to us and to configure delivery or sharing to such Recipients.
If you subscribe to paid features, payment information is collected and processed by third-party payment processors, including app store providers or payment gateways. We do not store full credit card numbers or complete payment account credentials on our servers.
We may retain limited transaction information necessary for billing, subscription management, fraud prevention, accounting, customer support, and compliance purposes.
If you contact us for customer support, privacy requests, billing questions, technical support, or other inquiries, we may collect and retain records of your communications, including email correspondence and related Account information.
When you access or use the Service, we may automatically collect certain technical information necessary to operate, maintain, secure, and improve the Platform. Such information may include your IP address, device type, operating system, browser type, app version, access timestamps, crash logs, diagnostic data, and system log data.
This information is collected for security, fraud prevention, system integrity, troubleshooting, operational performance, and service improvement purposes.
The Company does not use advertising networks, cross-site tracking technologies, or third-party behavioral advertising tools in connection with the Service. We do not use analytics platforms for advertising profiling.
The Company processes personal information for the primary purpose of providing, operating, maintaining, securing, and improving the Service. This includes enabling secure Account creation, encrypted storage of uploaded Content, management of designated Recipients, and execution of Scheduled Delivery or Inactivity Trigger features in accordance with User instructions.
Personal information is processed to establish and manage User Accounts, authenticate Users, provide access to Account features, maintain Account security, and communicate service-related information, including technical notices, security alerts, administrative messages, and Account updates.
Personal information and uploaded Content are processed to enable Users to upload, organize, store, access, rename, move, copy, delete, preview, or otherwise manage Content through the Service.
Where Users configure trigger events, including inactivity monitoring or Scheduled Delivery settings, personal information is processed to enable automated notifications and delivery of selected Content to designated Recipients in accordance with User-defined instructions.
The Company does not independently decide when or to whom User Content should be delivered. Delivery occurs based on the configuration selected by the User within the Service.
We process personal information to respond to User inquiries, provide technical support, troubleshoot issues, communicate regarding Account status, and respond to privacy-related requests.
Personal information related to transactions is processed for subscription management, billing administration, fraud prevention, accounting, tax compliance, and customer support. Payment processing itself is handled by authorized third-party providers as described in this Privacy Policy.
We process personal information to protect the security and integrity of the Service, detect and prevent unauthorized access, fraud, abuse, cyberattacks, misuse, or other malicious activity, and enforce our Terms of Service.
Personal information may be processed as necessary to comply with applicable laws, regulations, court orders, subpoenas, or lawful requests by public authorities. We may also process information as necessary to establish, exercise, or defend legal claims or to protect the rights, property, or safety of the Company, our Users, Recipients, or others.
Personal information may be processed as reasonably necessary for internal administrative purposes, corporate governance, auditing, service reliability, product improvement, and lawful business operations, provided that such processing is consistent with this Privacy Policy.
The Company does not process personal information for the purpose of selling personal data or for cross-context behavioral advertising. Personal information and uploaded Content are not used to build advertising profiles or to engage in targeted advertising activities.
This Section applies to individuals located in jurisdictions that require a legal basis for the processing of personal information, including the European Economic Area, the United Kingdom, and Switzerland.
We process personal information where such processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
This includes processing required to create and maintain your Account, provide encrypted storage services, manage uploaded Content, manage designated Recipients, execute Scheduled Delivery or Inactivity Trigger functionality configured by the User, administer Subscriptions, and provide customer support.
We may process personal information where such processing is necessary for our legitimate business interests, provided that your fundamental rights and freedoms do not override such interests.
Our legitimate interests include maintaining the security and integrity of the Service, preventing fraud and misuse, enforcing our Terms of Service, improving system reliability, conducting internal administrative operations, supporting business continuity, and protecting our legal rights.
We may process personal information where necessary to comply with applicable legal or regulatory obligations, including responding to lawful requests by public authorities, complying with tax and accounting requirements, and fulfilling other statutory duties.
In limited circumstances where required by applicable law, we may rely on your consent to process personal information. Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
Where processing relates to uploaded Content, Recipient configuration, Scheduled Delivery, or Inactivity Trigger settings, such processing is performed to provide the Service requested by the User and to carry out the User’s instructions within the Service.
The Service enables Users to designate Recipients for Scheduled Delivery of selected Content or for delivery triggered by an Inactivity Trigger configured by the User. Upon the occurrence of such configured conditions, the Company may transmit selected Content and associated information to the designated Recipient in accordance with the User’s instructions.
Such disclosure is initiated solely based on User configuration and authorization. The Company does not independently determine whether such disclosure is appropriate and does not verify the legal authority, entitlement, or suitability of any designated Recipient.
The Company does not sell personal information and does not disclose personal information to third parties for cross-context behavioral advertising or marketing profiling.
We may disclose personal information to third-party service providers that perform services on our behalf and under our instructions. These service providers may include cloud hosting providers, data storage providers, payment processors, email delivery providers, SMS providers, security service providers, analytics providers used for operational purposes, customer support providers, and other vendors necessary to operate the Service.
Such providers are contractually obligated to implement appropriate security measures and to process personal information only for the purposes specified by the Company.
When you subscribe to paid features, payment transactions are processed by authorized third-party providers, including app store operators or payment gateways. These providers process payment information in accordance with their own privacy policies and applicable legal requirements.
The Company does not control and is not responsible for the independent privacy practices of such providers.
We may disclose personal information if we believe in good faith that such disclosure is required by applicable law, regulation, legal process, subpoena, or court order, or is necessary to protect the rights, property, or safety of the Company, our Users, Recipients, or others.
This includes disclosures necessary to enforce our Terms of Service, detect or prevent fraud or security issues, investigate misuse, or respond to governmental requests.
In the event of a merger, acquisition, restructuring, financing, asset sale, bankruptcy, or similar corporate transaction, personal information may be transferred as part of the transaction, subject to applicable confidentiality and data protection obligations.
In such circumstances, personal information will remain subject to protections consistent with this Privacy Policy or as otherwise disclosed to Users.
Uploaded Content stored through the Service is encrypted in accordance with our security practices. The Company does not access or review User Content except as technically necessary to operate, maintain, secure, troubleshoot, or comply with legal obligations related to the Service.
The Company retains personal information for as long as your Account remains active and as necessary to provide the Service in accordance with your instructions.
Uploaded Content and associated Account information are maintained to enable encrypted storage, Account access, file management, Recipient configuration, and operation of Scheduled Delivery or Inactivity Trigger functionality configured by the User.
You may request deletion of your Account at any time in accordance with the procedures described in this Privacy Policy or within the Service.
Upon verification of Account deletion, the Company will take reasonable steps to delete or anonymize the personal information associated with the Account, subject to the limitations described below.
Deleted information may remain in encrypted backup systems for a limited period of time as part of routine backup, security, and disaster recovery processes.
Such information will continue to be protected in accordance with this Privacy Policy and will not be restored except as required for system integrity, security, disaster recovery, or legal compliance purposes.
The Company may retain certain personal information for longer periods where required to comply with applicable legal, regulatory, tax, accounting, or reporting obligations, or where necessary to establish, exercise, or defend legal claims.
If an Account remains inactive for an extended period, the Company may, consistent with applicable law and User notification practices, delete or anonymize Account data in order to maintain system efficiency and security.
The Company may retain anonymized or aggregated information that no longer identifies an individual for lawful business purposes, including system improvement, security analysis, service performance, analytics, and compliance verification.
The Company implements commercially reasonable technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
Such measures are intended to ensure the confidentiality, integrity, and availability of personal information processed through the Service.
Uploaded Content and associated data are protected using encryption technologies designed to safeguard information both in transit and at rest.
Data transmitted between User devices and the Service is encrypted using secure communication protocols, and stored Content is encrypted using industry-standard encryption methods.
Access to personal information is restricted to authorized personnel and service providers who require such access to perform their duties.
The Company maintains role-based access controls and applies security practices intended to minimize unauthorized access.
Users are responsible for maintaining the confidentiality of their Account credentials. The security of your personal information also depends on your protection of login credentials, devices, and authentication mechanisms.
You agree to notify the Company promptly of any unauthorized access or suspected security breach involving your Account.
While the Company takes reasonable steps to protect personal information, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, the Company cannot guarantee absolute security of personal information.
In the event of a security incident affecting personal information, the Company will take reasonable steps to investigate, mitigate, and respond to the incident and will provide notification to affected individuals and regulatory authorities as required by applicable law.
The Service is owned and operated from the United States. Personal information collected through the Service is processed and stored on servers located in the United States or in other jurisdictions where the Company or its authorized service providers operate.
If you access or use the Service from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries that may have data protection laws different from those in your country of residence.
Where required by applicable data protection laws, including for Users located in the European Economic Area, the United Kingdom, or Switzerland, the Company implements appropriate safeguards to protect personal information transferred internationally.
Such safeguards may include the use of Standard Contractual Clauses approved by relevant regulatory authorities or other legally recognized transfer mechanisms.
By using the Service, you acknowledge and understand that your personal information may be transferred to and processed in jurisdictions outside your country of residence, and you consent to such transfers to the extent permitted by applicable law.
Subject to applicable law, you may have the right to request access to the personal information we maintain about you, to request correction of inaccurate or incomplete personal information, to request deletion of your personal information, and to obtain a copy of certain personal information in a portable format.
You may request deletion of your Account and associated personal information. Upon verification of your request, the Company will take reasonable steps to delete personal information in accordance with Section 7 of this Privacy Policy, subject to legal retention obligations and technical limitations.
To protect your privacy and security, the Company may require reasonable verification of your identity before responding to a request to access, correct, or delete personal information.
We may request additional information solely for the purpose of verifying your identity.
10.4 U.S. State Privacy Rights
Residents of certain U.S. states, including California and other states with applicable privacy laws, may have additional rights regarding their personal information, including the right to know what categories of personal information are collected, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information where applicable.
The Company does not sell personal information and does not share personal information for cross-context behavioral advertising.
10.5 European Economic Area, United Kingdom, and Switzerland
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws, including the right to access, rectify, or erase personal information, the right to restrict or object to certain processing activities, and the right to data portability where applicable.
You may also have the right to lodge a complaint with a competent supervisory authority.
Where processing is based on your consent, you have the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
The Company will not discriminate against you for exercising your privacy rights under applicable law.
To exercise your privacy rights, you may contact the Company using the contact information provided in this Privacy Policy. We will respond to verified requests within the timeframes required by applicable law.
In the event of a confirmed security incident involving unauthorized access to or disclosure of personal information, the Company will take reasonable steps to investigate, mitigate, and remediate the incident in accordance with applicable laws and internal security procedures.
Where required by applicable law, the Company will provide notice to affected individuals without undue delay and within the timeframes prescribed by law.
Such notice may be provided by email, through the Service, or by other legally permitted means.
Where required under applicable data protection or breach notification laws, the Company will notify relevant regulatory authorities within the required timeframes.
Notification under this Section does not constitute an admission of fault or liability by the Company.
The Company reserves the right to modify or update this Privacy Policy at any time to reflect changes in legal requirements, business practices, security practices, or Service functionality.
If we make material changes to this Privacy Policy, we will update the Effective Date and may provide notice through the Service or by email where required by applicable law.
Your continued use of the Service after the Effective Date of an updated Privacy Policy constitutes acknowledgment of the revised terms, to the extent permitted by applicable law.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or require additional information regarding our data practices, you may contact us at:
Email: support@amaraa.ai
All privacy-related requests, including requests for access, correction, deletion, or data portability, should be directed to the contact information provided above. The Company will respond to verified requests in accordance with applicable law.
Published by:
DigitalRaiz Creative Solutions Pvt Ltd
