Privacy notice
Privacy, in plain language.
What the Ampassador website and workspace collect, why, who processes it and how to reach us about it. Last updated 14 October 2026.
Who to contact
Ampassador is founded and operated by Theodoros Ampas. Use the contact page and select Privacy to ask about your information, request access or correction, or request deletion. Do not include sensitive personal or client information in an initial inquiry.
When you send an inquiry
We collect your name, email and message, plus company and role if supplied, to respond to your request and discuss a potential engagement. The inquiry is saved in the database and a notification is sent by email from our Hostinger-hosted mailbox. A hashed network address helps limit abuse. Messages are not enrolled in a mailing list. Hosting, database and email providers process information to deliver this service.
When you use the workspace
We store account details, membership and permissions, session records, operational records you submit and relevant audit events. A necessary session cookie maintains sign-in. Workspace owners should agree authority, scope and the treatment of personal data before uploading evidence. Optional AI processing has a separate consent gate and provider processing considerations.
Optional website measurement
With your permission, Vercel Web Analytics records public page visits and a small set of engagement events; Speed Insights measures loading, interaction and layout stability. We strip query strings and fragments and exclude private routes. Event properties do not include form text, email addresses or workspace identifiers. Vercel also processes technical visit information such as browser, device, referral source and approximate location. We do not use advertising pixels or session replay.
Your measurement choice
Optional measurement is off until you choose Allow. Declining does not affect the website, form or workspace. You can change your choice using Measurement preferences in the footer. A local browser preference remembers the choice. Withdrawing permission stops subsequent measurement and reloads the page to remove loaded scripts; it does not undo data already sent.
Retention and providers
Inquiries remain available for personal follow-up and manual deletion. An automatic inquiry-retention schedule is not yet implemented. Database backups, email copies, server logs and Vercel measurement follow each provider's own retention settings. The database is hosted in Frankfurt, but that does not mean every provider processes every category of data only in the EU.
Your rights and unresolved operating details
Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent. You may also complain to your data protection authority. Identity verification may be necessary to protect your records. This notice has not yet been through a formal legal review, and it is not a claim of GDPR certification. If anything in it is unclear, ask us and we will answer plainly.