Last updated 8 November 2026
Privacy policy
This policy explains what Amp10 Technologies LLC does with personal information in Manzo. We are a Missouri limited liability company. Our affiliate, AMP10 Limited (Nigeria), helps us build and support the service.
This page is a draft. Our lawyer has not reviewed it yet. We will remove this notice when that is done.
Two kinds of data
- Data about our clients. The names and email addresses of people who sign in, billing details and messages you send us. We decide how this is used, so we are the controller.
- Data our clients send through us. Recipient addresses, contact records and email content. Our client decides how this is used and we act on its instructions, so we are the processor.
If you received an email sent through us, the company that sent it is responsible for your data. Please contact that company first.
What we keep about each email
| Data | What happens to it |
|---|---|
| Email body | Encrypted and held until our delivery provider accepts the email, then deleted. A scheduled email waits encrypted until its send time. |
| Attachments | Passed through to the delivery provider and never stored. |
| Template variables | Used to fill in the email and never stored after sending. |
| Recipient addresses and contact fields | Encrypted with a key specific to your account. We search them through a keyed hash, so a search never decrypts them. |
| Subject line | Encrypted. If template variables filled it in, we keep the template's subject with its placeholders. |
| Delivery events | Sent, delivered, bounced and complained, with their times, kept in your logs. |
| API keys | Only a hash is stored. |
| Webhook signing secrets | Encrypted. |
How long we keep it
Logs and recipient data stay for 90 days by default. You can set this anywhere from 1 to 365 days. After that, only totals remain, such as how many emails you sent in a month.
We keep account and billing records while your account is open and for as long as tax law requires after that.
Who can see it
Our staff see metadata and redacted addresses. Seeing anything more requires a recorded reason, and you can read every such access at GET .
Our system has to decrypt an address to deliver an email to it, so we describe this as controlled and audited access. We do not claim that we can never read your data.
Who else processes it
We run the service on infrastructure and email delivery providers in the United States. The data processing agreement we give you at signing lists them.
Google processes your email address if you choose to sign in with Google. We do not sell personal information, and we do not use email content to train AI models.
Where the data is
We store and process this data in the United States. Our data processing agreement sets out the basis for transfers from Nigeria under the Nigeria Data Protection Act 2023.
What we use it for
- To deliver your email and show you what happened to it.
- To keep the service secure and stop abuse.
- To send invoices and support you.
- To meet our legal obligations.
Your rights
Clients can erase one person's data from the dashboard or with POST . We keep only a one-way keyed hash on the suppression list, so that person never receives email from that client again.
Anyone whose data we hold as controller can ask us to access, correct or delete it. Email hello@amp10.company. You can also complain to the Nigeria Data Protection Commission.
Changes
We can update this policy by posting a new version here and changing the date at the top. We email clients about changes that affect how we use their data.
Contact
Amp10 Technologies LLC, 117 S Lexington St Ste 100, Harrisonville, MO 64701-2444, United States. Email hello@amp10.company.