Privacy Policy

This Privacy Policy explains how Ambush Research LLC and its affiliates, operating under the name Ambush (collectively, "Ambush," "we," "us," or "our"), collect, use, and share personal information when you use our websites, web app, API, MCP server, and related services (the "Services").

Information we collect

Information you give us

• Account information: your name, email address, and sign-in details, plus the workspaces you belong to and your role in them.
• Stream content: the prompts, stream names, settings, and feedback you create, including prompts you enter to preview a stream without an account.
• Destination details: where you ask us to deliver alerts, such as email addresses, phone numbers, webhook URLs and headers, and Slack or Telegram accounts and channels.
• Billing information: your plan, credit balance, and purchase history. Stripe processes your payment card details.
• Communications: messages you send us, such as support requests.

Information we collect automatically

• Usage information: the features you use, the alerts we deliver, the credits you consume, and the pages you view.
• Device and technical information: IP address, browser and device type, device identifiers, and server logs.
• Session recordings: on our web app, we record how pages are used, including clicks, scrolling, and non-sensitive content that appears on screen, to fix problems and improve the product.

Automatic prompt previews

On our public homepage, previews update automatically after you pause typing. We send the current prompt to Ambush and our AI service providers to find and evaluate relevant stories. This can happen before you press Enter, create a stream, or sign in. Choosing a suggested prompt can also start a preview. Editing a prompt does not create a stream or subscribe you to alerts.

Automatic homepage previews are not saved as submitted prompt attempts in our database. They still involve processing by Ambush and our service providers, and temporary caching of prompts and preview results. Usage information and technical logs are described above. Please avoid entering sensitive personal information or confidential material you do not want processed for a preview.

Information from third parties

We receive information from sign-in providers you use, such as Google or your organization's single sign-on provider; from services you connect, such as Slack or Telegram; and from Stripe about the status of your payments.

Public-source information

We may collect information from publicly accessible news, filings, livestreams, forums, blogs, websites, and third-party data providers. This may include publicly available information about individuals referenced in those sources, which we process to identify relevant events and deliver alerts.

How we use information

We use personal information to:

• Provide and operate the Services, including matching news to your prompts and delivering alerts.
• Create and secure accounts and workspaces.
• Process payments and track usage.
• Send you the alerts you set up, along with service, security, and billing messages.
• Monitor and debug the Services. Prompts, alerts, and feedback may be used to improve our products.
• Prevent fraud and abuse, and enforce our Terms of Service.
• Comply with legal obligations.

Your prompts, including drafts used for automatic previews, are processed by AI models, including models from third-party AI providers. We send the prompt and relevant source content to these providers to generate and evaluate results.

How we share information

We do not sell personal information or share it for targeted advertising. We share it only:

• With service providers that help us run the Services, such as cloud hosting, authentication, payment processing (Stripe), AI model and web search providers, email delivery, and analytics and monitoring. They may use it only to provide services to us.
• With destinations you choose. When you set up a webhook, Slack, Telegram, email, or MCP destination, or connect an agent, we send alerts there.
• Within your workspace. Workspace admins and members can see the streams, destinations, and usage in the workspace. If an organization manages your workspace, it controls the workspace and its content.
• For legal reasons, when we believe in good faith that the law requires it, or that it is necessary to protect the rights, property, or safety of Ambush, our users, or others.
• In a business transfer, such as a merger, acquisition, financing, or sale of assets.
• With your consent or at your direction.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

Cookies

We use cookies and local storage to keep you signed in, secure your account, remember your preferences, and understand how the Services are used. If you choose to sign in or sign up from the homepage, we may temporarily save your prompt in your browser so you can continue after signing in. We stop using this saved draft for the sign-in handoff after one hour; it may remain in browser storage until it is cleared. We do not use advertising cookies, and third parties do not track your activity across other websites through the Services.

Data retention

We keep personal information while your account is active and as long as needed to provide the Services. After that, we keep it only as long as needed to comply with law, resolve disputes, prevent fraud and abuse, or enforce our agreements, and then delete or de-identify it. If you delete your account, we delete or de-identify your personal information within a reasonable period, except what we need to keep for those reasons.

For automatic homepage previews, we temporarily cache prompts and results to respond faster to repeat requests. Cached search and screening results for custom prompts are reused for up to five minutes before being refreshed. Expiration stops reuse; cached data may remain in memory until it is evicted or the service restarts. These caches are separate from saved streams, account data, and any records retained by our service providers. Provider retention is governed by the applicable service agreements and policies.

Security

We use reasonable safeguards to protect personal information, but no system is completely secure.

International data transfers

We are based in the United States and process information there and in other countries where our service providers operate. When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

Your rights

You can update your account details or delete your account from your account settings. You can unsubscribe from alert emails using the link in each one.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email legal@ambush.ai. We may need to verify your identity first. If an organization manages your workspace, we may refer your request to that organization.

European Economic Area and United Kingdom

We process personal information to perform our contract with you, for our legitimate interests in operating, securing, and improving the Services, to comply with legal obligations, and with your consent where the law requires it. You may also lodge a complaint with your local data protection authority.

Children

The Services are for people 18 and older. We do not knowingly permit individuals under 18 to register for the Services. If you believe a child has registered, contact us and we will take appropriate action, including deleting the account and associated personal information where required by law.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here with a new "Last updated" date, and we will notify you of material changes.

Contact us

Email privacy questions and requests to Ambush at legal@ambush.ai, and support questions to support@ambush.ai.