This Privacy Policy explains how AMA.ms, operated by EXCT Inc., a Florida corporation, ("AMA," "we," "us," "our") collects, uses, and shares information when you use our website, apps (if any), and related services (together, the "Platform").
If you do not agree with this Privacy Policy, please do not use the Platform.
This Privacy Policy applies to information we collect:
when you create an account or use the Platform
when you submit questions (Requests) or create video replies
when you interact with us (support, email, social, etc.)
automatically through cookies and similar technologies
Third-party services
The Platform may include links to or integrations with third-party services (for example, Stripe or social platforms). Those third parties handle your information under their own policies. We are not responsible for their privacy practices.
Changes
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy and change the Last Updated date. Your continued use of the Platform after changes take effect means you accept the updated policy.
We collect information in three ways: (a) information you provide, (b) information collected automatically, and (c) information from third parties.
Account and profile information
When you create an account, we collect information such as:
name (or display name), username
password (stored in a hashed form)
optional profile details you add (bio, profile photo, links to social profiles, etc.)
Requests and content
We collect the information you submit on the Platform, including:
the text of questions/Requests
any attachments you upload (if enabled)
video replies you upload or record
messages or communications sent through the Platform (if enabled)
ratings/reviews and feedback
Anonymous option
If the Platform offers anonymous Requests, we may not show your name to the recipient user. However, we still associate the Request with an account internally for safety, fraud prevention, customer support, and legal compliance.
Support and communications
If you contact us (email, forms, chat), we collect what you send (your message, contact details, and any attachments).
Payments (Fans)
When you pay for a Request, payment is processed by our payment provider (for example, Stripe). We do not store full card numbers. We receive limited details such as payment status, payment method type, last four digits (if provided), and transaction identifiers.
Authorization holds
To support our payment flow, we may place an authorization hold at checkout and capture payment only after a video reply is delivered. This means transaction status information may appear as pending before capture.
Withdrawals (Creators)
You can create a profile and receive Requests without connecting a payout method.
If you choose to withdraw earnings, you will connect a payout account with our payment provider. The payment provider may collect identity verification details (KYC), bank details, and tax information as required by law.
Stripe as independent controller
Stripe acts as an independent controller of personal data for the purposes of payment processing, fraud prevention, and identity verification. This means Stripe may use and retain personal data for its own compliance and risk obligations, in accordance with Stripe's own privacy policy and legal requirements.
When you use the Platform, we automatically collect certain data, including:
Device and log data: IP address, device identifiers, browser type, OS, language, timestamps, and error logs.
Usage data: pages viewed, clicks, scrolls, referral URLs, session activity, and feature usage.
Approximate location: derived from IP address (not precise GPS unless you explicitly enable it in a supported app feature).
Email engagement: if we send emails, we may track opens/clicks to measure performance.
We may treat this data as personal data when required by law or when it can be linked to you.
We keep payment and transaction records as required for legal, accounting, and fraud-prevention purposes.
We may receive information from third parties such as:
social login providers (if you use them)
analytics and advertising partners (for marketing performance)
payment providers (transaction results, risk/fraud signals)
We do not verify user identities at this time. Please use your own judgment when interacting with any account.
We use cookies and similar technologies (pixels, SDKs) for:
Essential functions: login/session, security, fraud prevention
Preferences: language, settings
Analytics: understand how the Platform is used and improve performance
Marketing: measure ads and show AMA ads on other platforms (where allowed by law)
Your choices
You can control cookies in your browser settings and, where required, via our cookie banner/preferences tool.
If you block cookies, some features may not work properly (like staying logged in).
If you are in a region where consent is required for certain cookies (for example, the EU/EEA/UK), we will request consent before placing non-essential cookies.
We use information for the following purposes:
To provide the Platform
create and manage accounts
show profiles, enable Requests and video replies
deliver content and notifications
provide ratings/reviews features
To process payments and withdrawals
support authorization holds and captures
record balances and earnings
facilitate withdrawals through our payment provider
To keep the Platform safe
prevent fraud, spam, and abuse
support creator features like declining Requests and blocking users
run automated checks (including AI) to reduce harassment/hate/nudity and other inappropriate content
If your content is removed or your account is restricted by our automated systems, you may request a human review by contacting support@ama.ms. Decisions are made to ensure compliance with our Terms and safety standards.
To communicate with you
service messages (receipts, security alerts, feature updates)
For marketing (where allowed)
send promotional emails if you opt in (or where permitted)
measure campaign performance
For legal and compliance reasons
comply with lawful requests
maintain records for accounting, tax, fraud prevention, and dispute handling
4.1 Legal Bases for Processing (EEA/UK Users)
We process your data under the following legal grounds:
Contractual Necessity: To provide the Platform and process payments.
Legitimate Interests: For security, fraud prevention, and platform improvement.
Legal Obligation: To comply with tax, accounting, and lawful requests.
Consent: Where you have given explicit permission (e.g., marketing or non-essential cookies).
We do not sell your personal information as a sale for money in the traditional sense. We share information only as described below.
When you submit a Request, we share the Request content with the user you are requesting.
If you choose anonymous Requests (when available), we do not show your name to the recipient user, but we still may share the Request content and necessary context for delivery.
5.2 With service providers
We share information with vendors that help us operate the Platform (hosting, storage, customer support, email delivery, analytics). They are required to protect your data and use it only for providing services to us.
5.3 With payment providers
We share necessary information with our payment provider (for example, Stripe) to:
process payments and authorization holds
capture and refund payments
comply with identity verification and fraud prevention requirements
5.4 With analytics and advertising partners
We may share limited information (such as device identifiers, event data, or hashed identifiers) with partners to:
run marketing campaigns (where allowed)
You can control some of this through cookie preferences and ad settings.
5.5 For legal compliance and protection
We may disclose information if required by law, legal process, or to protect rights, safety, and security (for example, fraud investigations, abuse reports, or threats of harm).
5.6 Business transfers
If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to reasonable safeguards.
5.7 Corporate Reorganization and Jurisdictional Transfer
In the event of a corporate reorganization or change in the legal entity operating the Platform, your personal information may be transferred to an affiliate or successor entity. You acknowledge that this may involve the transfer of your data to a new legal entity located in a different jurisdiction (including outside of the United States). Such transfers will be conducted in accordance with this Privacy Policy and applicable data protection laws.
If you are in the EU/EEA/UK (or another region with similar laws), you may have rights such as:
withdrawal of consent (where processing is based on consent)
complaint to a supervisory authority
To exercise your rights, contact us at support@ama.ms. We will respond to your request within 30 days. To protect your privacy, we will verify your identity before fulfilling the request (e.g., by matching your email or requiring you to be logged in). You have the right to appeal any decision regarding your request by contacting us again.
Email marketing
You can unsubscribe from marketing emails at any time using the link in the email. We may still send service/transaction emails.
Cookies
Use cookie settings (where available) and browser controls to manage cookies.
Targeted advertising
You may be able to opt out of interest-based ads via your device settings or industry opt-out tools, depending on your region.
Account info
You can update certain profile details in your account settings.
We keep personal data only as long as necessary for the purposes in this policy, including:
to comply with legal obligations
to prevent fraud and abuse
Typical examples:
Account Data: Kept while your account is active; deleted or anonymized within 90 days after account closure, unless required for legal or fraud purposes.
Transaction Data: Kept for 7 years to comply with Florida and federal tax and accounting laws.
Safety & Abuse Records: Kept as long as necessary to prevent repeat abuse and protect our community.
We use reasonable technical and organizational safeguards to protect data (encryption in transit, access controls, monitoring). No system is 100% secure, so we cannot guarantee absolute security. Please keep your password secure and contact us if you suspect unauthorized access.
The Platform is not intended for children under 16 (or the minimum age required by law in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us data, contact us and we will take steps to delete it.
Your information may be processed in the EU and in other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
For questions or requests about privacy, contact:
EXCT Inc.
7901 4TH ST N STE 300
ST. PETERSBURG, FL 33702
Email: support@ama.ms
This section applies only to California residents.
Notice at Collection
We collect categories of personal information described in this policy. We do not sell your personal information for money. However, we may share identifiers (like your IP address) with advertising partners for cross-context behavioral advertising. You can opt out by using a Global Privacy Control (GPC) signal in your browser.
Sources of Data
We collect data directly from you, automatically via cookies, and from third-party partners like Stripe or social media platforms.
Your Rights
As a California resident, you have the right to:
(1) Know what data we collect,
(2) Delete your data,
(3) Correct inaccurate data, and
(4) Opt out of sharing of your data for ads.
To exercise these rights, email support@ama.ms. We will verify your request by matching the email address of your account.