Privacy Policy
Effective date: 4 November 2025
Who we are
Check Twice PTY Trading as Amulet AI (ABN 31 690 835 173) ("Amulet AI", "Amulet", "we", "us", "our") provides a Chrome extension and related services that optimize and route your prompts across multiple AI platforms.
Registered address: lvl L 16 Suite 1B, 56 pitt street, Sydney NSW 2000
Contact: Support@amulet.ai
Website: https://amulet.ai
This Policy explains how we collect, use, disclose, store and protect personal information when you use our Chrome extension, website, and related services (the "Services"). We operate globally and comply with the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), the EU/EEA GDPR, and the California CCPA/CPRA as applicable.
1) Scope & roles
For most direct-to-consumer use we act as a controller (APP entity under Australian law). For business/enterprise accounts where we process end-user data strictly under written instructions, we act as a processor/service provider (see Data Processing Addendum in our Terms).
2) Information we collect
We collect only what we need to deliver the Services:
- Account & billing (if applicable): email, name/alias, plan, payment tokens (handled by our PCI-compliant payment processor), tax country.
- Prompts & related content: the text you type or paste; optional context/assets you submit; routing decisions (which model/provider we send to); optimization preferences (e.g., tone, target model, rules).
- Usage analytics: timestamps, feature usage, performance and reliability metrics, non-content event logs; limited device and browser metadata; coarse location derived from IP for regional compliance and fraud prevention.
- Support content: messages, bug reports, diagnostic logs you choose to share.
- Cookies/SDKs (website/app): strictly necessary and analytics (no advertising cookies).
We do not collect your passwords, full browsing history, or unrelated page contents. We request the minimum Chrome permissions necessary and use data only for the purposes disclosed here. We do not sell personal information and we do not run ads.
3) How we use information & legal bases
Purposes (global):
- Provide and improve the Services (prompt optimization, routing, reliability).
- Security, fraud prevention, debugging, and abuse prevention.
- Communicate with you (service updates, security notices, support).
- Analytics in aggregate/anonymized form to improve performance.
GDPR legal bases (EU/EEA):
- Contract (Art. 6(1)(b)) to deliver requested features.
- Legitimate interests (Art. 6(1)(f)) for security, abuse prevention, and product analytics (balanced against your rights).
- Consent (Art. 6(1)(a)) where required (e.g., non-essential analytics/cookies).
4) Processing by third-party AI providers
To fulfil your requests, we transmit prompts/instructions to integrated AI APIs, including OpenAI, Anthropic, Google, and Perplexity. They operate as sub-processors when we act as your processor, or independent controllers when you directly use their accounts. We contractually restrict use to service provision and require appropriate safeguards. Our current sub-processor list is published at: https://amulet.ai/legal/subprocessors
5) Retention
- Prompts and model inputs/outputs: encrypted and retained for 30 days, then deleted (unless a shorter period is requested or a legal hold applies).
- Anonymized usage patterns: retained indefinitely (not reasonably linkable to you).
- Account/billing records: retained as required for tax, accounting, and regulatory purposes.
6) Your controls: access, export, deletion
You can request export (data portability) and deletion of your account data at any time via Support@amulet.ai or via in-product controls. We will delete within a reasonable time and instruct sub-processors to do the same, subject to lawful retention requirements.
7) International transfers
We may process and store data outside your country (e.g., in the EU or US). For EU/EEA personal data, we rely on Standard Contractual Clauses (SCCs) and complementary safeguards for transfers to countries without an adequacy decision. For Australian APP 8 cross-border disclosures, we take reasonable steps to ensure overseas recipients do not breach the APPs or rely on another permitted exception.
8) Security
We use industry-standard safeguards: encryption in transit and at rest, access controls, key management, logging, and vulnerability management. No method is 100% secure. If a breach involving personal information occurs, we will notify as required by law (e.g., GDPR 72-hour supervisory authority notice where applicable; Australia's Notifiable Data Breaches scheme requires assessment within 30 days and notification where serious harm is likely).
9) Your privacy rights
- Australia (APPs): access and correction; complaint to the Office of the Australian Information Commissioner (OAIC) if unresolved.
- EU/EEA (GDPR): access, rectification, erasure, restriction, portability, objection; complaint to your supervisory authority.
- California (CCPA/CPRA): right to know, access, delete/correct, opt-out of sale/share, limit use of sensitive personal information, and non-discrimination.
We do not sell or share personal information as defined by CCPA/CPRA. Submit requests via Support@amulet.ai.
10) Children & minimum age
The Services are not for children under 13. If you are in the EU/EEA, you must be 16+ (or the lower digital consent age set by your country, never below 13). If we learn that personal information was collected from someone under the applicable age without proper consent, we will delete it.
11) Chrome Web Store policy compliance
We limit data collection to what's necessary for core functionality; clearly disclose data use; do not sell personal data; and adhere to Chrome Web Store User Data – Limited Use requirements. This Privacy Policy is linked from our extension listing and website.
12) Third-party links & sites
Third-party websites and platforms have their own terms and privacy practices. Review them before use.
13) Changes to this Policy
We may update this Policy. We will post the new version with an updated date and, when changes are material, provide reasonable notice in-product or by email.
14) Contact us
Check Twice PTY Trading as Amulet AI (ABN 31 690 835 173)
Address: lvl L 16 Suite 1B, 56 pitt street, Sydney NSW 2000
Email: Support@amulet.ai
Website: https://amulet.ai
