Version of 23 October 2026.
This policy explains what personal data the Ambex platform (platform.ambex.lv, including Ambex Video) processes, why, for how long, who else receives it, and what rights you have.
Who is responsible
SIA "AMBEX", registration No. 40203316992, Krāslavas iela 21-23, Rīga, LV-1003, Latvia, is the controller of your personal data.
For any question about your data or to use your rights, write to info@ambex.lv.
What data we process and why
| Data | Why | Legal basis |
|---|---|---|
| Name, surname, email address, phone number, language | Your account, logging in with a code sent by email, messages about the service | Contract (GDPR Art. 6(1)(b)) |
| Company name, registration and VAT number, billing address and email, the type and last 4 digits of your card | Subscriptions, payments and invoices | Contract; legal obligation for invoices (Art. 6(1)(c)) |
| Videos, sound, images, music, texts, transcripts, subtitles, titles, descriptions and thumbnails you upload or create | To provide the service: editing, subtitles, rendering, publishing | Contract |
| Connected social network channels (name, link), your posts and their statistics | Publishing and analytics on your request | Contract |
| Your workspaces, team members, their roles and what they do in the portal | Team work, access control, an audit log of changes | Contract; legitimate interest in security (Art. 6(1)(f)) |
| Login times, IP address and browser in security logs | Protecting accounts against misuse | Legitimate interest in security |
| Partner program: payout name and IBAN, discount code, rewards; visits through partner links (the IP address only as an irreversible hash) | Paying partner rewards | Contract; legitimate interest |
We do not sell your data and do not use it for advertising. We do not make decisions about you that have legal or similarly significant effects by automated means.
Artificial intelligence
To transcribe speech and suggest titles, descriptions and subtitle fixes, we send to the providers below only what is needed for that task: the sound track of the video (not the picture) for transcription, and the text of the video for suggestions. The results are shown to you and you decide what to use.
Who receives your data
We use these service providers (processors), each bound by a data processing agreement:
| Provider | Purpose | Where |
|---|---|---|
| Hetzner Online GmbH | Servers, database and file storage | European Union (Germany, Finland) |
| Stripe Payments Europe Ltd. | Card payments, subscriptions and invoices | EU; may transfer data to the USA |
| ElevenLabs Inc. | Speech-to-text (sound track only) | USA |
| Anthropic PBC | AI suggestions for titles, descriptions and subtitles (text only) | USA |
| Postproxy | Publishing to social networks and loading post statistics | Outside the EU |
| Google LLC (Gmail) | Sending emails, such as login codes | USA |
When you publish a video, it is sent to the social networks you chose (for example YouTube, Facebook, Instagram, TikTok). From then on, the network's own privacy policy applies to it.
Where data leaves the European Economic Area, the transfer is based on the EU-US Data Privacy Framework (for certified companies) or on the European Commission's standard contractual clauses.
How long we keep data
- Your account and its content: as long as you have the account. When you ask for it to be deleted, we delete it within 7 days; accounts closed by us are deleted for good after 30 days.
- Login codes: 1 day.
- Abandoned (unfinished) uploads: 1 day.
- Audit log of changes: 2 years.
- Security logs: 1 year.
- Invoices and payment records: as long as accounting law requires (in Latvia, generally 5 years), kept with Stripe.
- Backups: overwritten in the normal backup cycle.
Cookies
The portal uses only cookies that are strictly necessary for it to work: to keep you logged in, to protect forms against misuse (CSRF) and to remember your language. They are not used for tracking or advertising, so no consent is needed for them.
Your rights
You have the right to:
- access your data and get a copy: write to us; we send it within 7 days;
- erasure: write to us; we delete the account within 7 days and confirm it by email;
- rectification of wrong data: change it in the portal or write to us;
- restriction of processing and to object to processing based on legitimate interest;
- data portability: on request we send your data in a machine-readable format (JSON).
To use a right not covered in the portal, write to info@ambex.lv. We reply within one month.
You may also complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv).
Children
The platform is meant for businesses and adults. It is not meant for children under 16.
Changes
If we change this policy, we publish the new version here with its date, and tell you by email about important changes.