Who we are
Amberdesk is operated by MB Acacia Valley, a company registered in Lithuania. We are the data controller for the personal data described below.
You can contact us about privacy matters at info@amberdesk.io.
What data we collect
- Account data: your email, name, and (if you sign in with Google) the basic profile information Google shares.
- Project data: the estimates, resources, assemblies, and attachments you create in Amberdesk.
- Usage data: pages visited, referrer, approximate location, device type — measured with Google Analytics. The Analytics script loads on every visit, but until you accept analytics cookies it runs in a cookieless mode: nothing is stored on your device and you are not recognized from one visit to the next. Google does still receive the request itself, which includes your IP address and the page you are on. If you accept analytics cookies, the cookies listed below are set and visits are measured normally.
- Technical data: IP address, user agent, and session cookies used for authentication and abuse prevention.
Why we collect it
- To provide the service you signed up for.
- To improve Amberdesk based on how it is used.
- To keep your account and our infrastructure secure.
- To comply with our legal obligations.
Lawful bases (GDPR Article 6)
- Contract performance — for account and project data we need to deliver Amberdesk.
- Legitimate interest — for security logging and abuse prevention.
- Consent — for analytics and any future marketing cookies. You can withdraw consent at any time using the button below.
Sub-processors
We use a small number of trusted providers to operate Amberdesk:
- Google (Google Analytics, Google OAuth sign-in)
- Stripe (payment processing)
- Anthropic PBC (AI estimate drafting) — when you use an AI feature, the text and files you submit and your own catalog data are sent to Anthropic to generate the draft. Do not submit anything you are not willing to have processed this way.
- Resend (transactional email delivery)
- Cloudflare (Turnstile bot protection, and R2 object storage for uploaded files and backups)
- Hetzner Online GmbH (application hosting, servers in Ashburn, Virginia, USA)
Our providers are located in the United States and the European Union, so your data may be processed outside the EEA.
How long we keep your data
Estimates are working records you come back to, so we do not put your project data on a timer. Here is what actually happens:
- While your account is open — we keep your account and project data for as long as you use Amberdesk.
- If your trial ends or you cancel — your organization becomes read-only. Nothing is erased: you can still sign in, read everything, and export it, and you pick up where you left off if you subscribe later.
- Sessions — the cookies in the table above expire on their own, and signing out invalidates the refresh token immediately.
- Billing records — invoices and payment records are held by Stripe and by us for as long as tax and accounting law requires.
- Analytics — retention is configured in Google Analytics and governed by Google's own policies.
When you delete something. We want to be plain about this rather than promise a schedule we do not yet run. If you delete your user account, the account record itself is erased straight away, along with your sessions and sign-in tokens. Deleting an organization removes it from the app immediately and nobody can reach it any more, but it is a reversible “soft” delete — the underlying projects, files, and logs are retained on our systems rather than wiped, so an accidental deletion can be undone and so we can meet legal and accounting obligations. There is no automatic purge job today.
If you want that residual data permanently erased, email us at info@amberdesk.io and we will do it by hand and confirm when it is done, within 30 days of verifying your request. If we ever add automatic deletion, we will state the period here.
Your rights
Under GDPR you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion (the “right to be forgotten”);
- request a portable copy of your data;
- withdraw consent at any time;
- lodge a complaint with your local supervisory authority.
To exercise any of these rights, contact us at info@amberdesk.io.
California residents
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months, and we run no advertising tags on Amberdesk.
If you live in California, you have the right to know what personal information we hold about you and where it came from, to get a copy of it, to ask us to correct or delete it, and not to be treated differently for exercising any of those rights. These are the same rights listed under “Your rights” above, and you use them the same way: email info@amberdesk.io from the address on your account, or from another address with enough detail for us to confirm who you are. An authorized agent may make a request for you with your written permission.
Local storage
Alongside cookies, Amberdesk keeps a few small values in your browser's local and session storage. Privacy law treats these the same way as cookies, so here is what is in there:
- the organization you last worked in, so we can take you back there;
- which parts of an estimate tree you had expanded, and display preferences such as whether resource sublines are shown;
- the projects you visited most recently, so they appear in the navigation;
- work in progress in the public calculators and the resource import wizard, so that reloading the page does not lose it.
These stay on your device. Nothing here is sent to us on its own (saved calculator or import data only reaches us when you choose to bring it into a project), and none of it is used to profile you or to follow you across other websites. Clearing your browser's site data removes it all.
Managing your consent
You can change which cookie categories you accept at any time:
You can also clear cookies directly in your browser's settings, which will reset your choice the next time you visit.
Contact & updates
We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent change. For any privacy question, contact us at info@amberdesk.io.