Privacy Policy

1. Scope

This Privacy Policy explains how Vitaliti World, LLC handles information when you visit useambitio.com, create an account, or use Ambitio (the “Service”). Ambitio is currently offered as a private alpha. By using the Service, you agree to this Policy.

2. Information we collect

We collect information in these categories:

• Account data. Name, email address, password (stored hashed), email verification status, and profile details you provide.
• Authentication data. If you sign in with Google or GitHub, we receive identifiers and basic profile information those providers share with us for login.
• Venture content. Strategy answers, goals, targets (key results), reviews, notes, and other business content you enter into Ambitio.
• Files you upload. Documents or images you upload to the Service, stored in cloud object storage we operate.
• Usage and device data. Pages viewed, feature use, approximate location derived from IP, browser type, and similar diagnostics collected through cookies or similar technologies and our analytics tools.
• Communications. Messages you send us (for example to hello@useambitio.com), transactional email metadata needed to deliver login and verification messages, product reminder preference settings, and (only if you opt in) marketing nurture subscription status.

3. How we use information

We use information to:

• Provide, maintain, and improve the Service
• Authenticate you and secure accounts
• Run agent-assisted features (for example drafting strategy, goals, or targets) using your venture content as context
• Send transactional email (verification, magic links, security)
• Send product reminder email about review windows and unfinished setup (on by default; you can turn these off in Email settings)
• Send marketing nurture email only after you explicitly opt in (off by default; one-click unsubscribe is always available)
• Understand product usage and diagnose issues
• Comply with law and enforce our Terms of Service

We do not sell your personal information. We do not use your venture content to train public foundation models for unrelated third parties. Auth/security email is separate from product reminders and marketing nurture and is not controlled by marketing opt-in.

4. AI features

Some Ambitio features send prompts and relevant venture context to large language model providers so the Service can generate suggestions. By default, Ambitio uses Google's Gemini models via Google Cloud under our agreement with Google. If you add your own API key in Settings (OpenAI, Anthropic, xAI, or OpenRouter), prompts and venture context for those turns go to that provider under your developer account and their terms. ChatGPT, Claude, and Grok consumer subscriptions cannot be used here. Web research inside the product still uses Ambitio's Gemini, even when the coach uses your key. Those providers process that content to return a response. Do not put secrets, regulated health data, or other sensitive personal data into prompts or fields unless you are comfortable with that processing.

5. Sharing

We share information only as needed with:

• Infrastructure vendors that host the app, database, file storage, email delivery, and default AI inference (for example Google Cloud and our email provider)
• Model providers you choose when you paste an API key (OpenAI, Anthropic, xAI, or OpenRouter). Those turns are billed to your developer account.
• Analytics providers (for example PostHog) that help us understand how the product is used
• Auth providers you choose (Google, GitHub) for sign-in
• Professional advisors, or authorities, when required by law or to protect rights and safety

Vendors process data under instructions that limit use to providing their services to us.

6. Cookies and similar technologies

We use necessary cookies for sessions and authentication. We may also use analytics cookies or local storage to measure product usage. You can control cookies through your browser settings; blocking necessary cookies may prevent login from working.

7. Retention

We keep account and venture data while your account is active and for a reasonable period afterward if needed for backups, disputes, or legal obligations. You may request deletion as described below. Alpha environments may retain diagnostic logs for a shorter operational window.

8. Security

We use industry-standard measures such as encrypted transport (HTTPS), hashed passwords, and access-controlled cloud infrastructure. No method of transmission or storage is completely secure; use a strong unique password and keep account access limited to people you trust.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, or delete personal information, or to object to certain processing. To make a request, email hello@useambitio.com. We may need to verify your identity before fulfilling a request. You can also update some account details in the product when that UI is available.

10. Children

Ambitio is for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

We operate primarily from the United States. If you access the Service from elsewhere, your information may be processed in the U.S. and other countries where our vendors operate.

12. Changes

We may update this Policy as the product evolves. We will post the revised version with a new effective date. Material changes may also be communicated by email or in-product notice when appropriate.

13. Contact

Vitaliti World, LLC
Email: hello@useambitio.com