Legal

Privacy Policy

Last updated: October 2, 2026 · Version: 2026-10-02

This Privacy Policy explains how Simple Software LLC ("Amalgament," "we," "us") handles information in connection with the Amalgament website and service (the "Service"). It covers: (A) the limited personal information we collect about our customers and prospective customers, (B) how we use public-record data in our research and any public-record data access we provide, and (C) information supplied through authorized business connections during an engagement.

A. Information We Collect About Customers

We collect only what we need to operate the Service:

  • Contact and booking data: name, email address, business name and anything you tell us when you book a call, email us or fill in a form. Scheduling is handled by Cal.com.
  • Account data: name, email address and organization when we set up a client workspace or API key for you.
  • Onboarding information: your business brief, contact email, selected tools, requested outcomes, terms acceptance and setup status. We use these to assess your request, send setup instructions to the address you provide, and organize follow-up. Submitting an inquiry does not subscribe you to unrelated marketing messages.
  • Morning briefing: if you sign up at amalgament.com/news, we store your email address, industry, business website, where you came from and the consent you gave. We use them to send the briefing and tailor it to your industry and business. Every email carries a one-click unsubscribe, and we do not sell or share these details.
  • Engagement data: the baseline figures, measurements and reports we agree with you for an engagement, such as leads, customers, revenue or costs drawn from your systems within the permissions you grant (see Section C).
  • Usage data (API, if you use it): API key identifier, endpoints called, timestamps, request/response counts, and rate-limit/quota counters, used for metering, security, and abuse prevention.
  • Billing data: handled by our payment processor; we do not store full card numbers.
  • Technical data: IP address and standard request metadata, used for security, rate limiting, and diagnostics.

We use this information to provide, secure, meter, and improve the Service, to communicate with you, and to comply with law. We do not sell our customers' personal account information.

Service Providers

We use third-party infrastructure to run the Service, which may process the above customer data on our behalf, including cloud compute and storage (e.g., Modal, Cloudflare R2), authentication/database, and (for paid plans) a payment processor (e.g., Stripe). For onboarding, these include Cloudflare for application storage and sessions, Vercel for website hosting, Neon for the morning briefing signup database, Resend for transactional email, and Composio for tool authorization and connection management. Cal.com handles scheduling when you use the booking option. The information shared depends on the function each provider performs.

Retention, Security, Your Rights

We retain customer account and usage data for as long as your account is active and as needed for legal, security, and accounting purposes, then delete or de-identify it. We use reasonable technical and organizational safeguards. Depending on where you live, you may have rights to access, correct, or delete your customer account data; contact drew@amalgament.com.

B. Public-Record Data

We use information compiled from publicly accessible U.S. government and public-record sources in our research (for example, the aggregate counts we publish on our blog) and in any public-record data access we provide (for example: Secretary of State business filings, federal award and spending data, business licenses, liens, court and regulatory filings, county property and parcel records, and government statistical data such as the U.S. Census).

Our design and commitments regarding this data:

  • Sourced from public records. All such data is obtained from publicly accessible government and public-record sources, or derived from them. We do not create it.
  • No person-level profiling. Our research and data access are built around business entities and places, and we publish aggregate findings without naming the businesses involved. We do not resolve, index, or build profiles of natural persons, and we do not combine records to create identity profiles of individuals. Where an individual's name appears (for example, as it is published in a government property record), it appears as in the source record and is not enriched into a personal profile.
  • Not for eligibility or targeting. Our Terms and Acceptable Use Policy prohibit using the data to make decisions about individuals' eligibility (credit, insurance, employment, housing) or to profile, surveil, harass, or target any person.
  • Suppression / removal. Individuals and authorized parties may request suppression or removal of specific records where required by law or our policies, at drew@amalgament.com.

Note on "Publicly Available Information"

Much of the data offered through the Service constitutes "publicly available information" lawfully obtained from government records, which is treated differently under many privacy laws. This Policy does not change the public nature of those underlying records maintained by the originating government agencies.

C. Authorized Business Connections

If you authorize a tool connection, the connection provider manages the credentials or access tokens needed for the grant. We can access information within the granted permissions for your assessment and agreed work. The particular information depends on the tool and permissions you select, and may include business contacts, messages, spreadsheets and operational records. Do not connect information you lack authority to share.

We keep your private business information separate from the public-record offering. It is not added to the public API dataset simply because you connect a tool. Our staff may review your brief and authorized information to provide the requested service. Contact drew@amalgament.com to request disconnection, correction or deletion. Revoking a provider grant does not automatically erase copies already imported; deletion requests also require review of any applicable legal, security and accounting retention needs.

Cookies and Measurement

Our website and documentation may use essential cookies for functionality and security. We also use analytics services (Vercel Analytics, Google Analytics and PostHog) to measure how visitors use our website, including sign-up, account and workspace pages. PostHog also records which business a page was prepared for when you visit a page we prepared for a specific business. When you create an account or sign in, we link that visit to your email address; if you have accepted analytics cookies, your earlier visits from the same browser are linked as well, so we can understand how you found us and what you read. When you book a call, we record that a booking was made. We do not sell this information or use it for advertising, and we do not use the Service's public-record data for advertising. PostHog session recording is turned off.

Your choice

The first time you visit, a notice at the bottom of the page asks whether we may set analytics cookies. "Accept" and "Decline" are the only options and neither is pre-selected.

  • Before you choose, and if you decline: we set no analytics cookies and store no analytics identifier in your browser. Google Analytics runs with consent denied for analytics and advertising storage, so it sends Google page measurements without a cookie identifier. PostHog keeps its visitor identifier in the page's memory only, so it is gone when you reload or close the page. Vercel Analytics does not use cookies.
  • If you accept: Google Analytics and PostHog store the identifiers listed below so that repeat visits can be recognized as the same browser.
  • Changing your mind: the "Cookie settings" link in the footer of every page reopens the notice. If you decline after accepting, we delete the analytics cookies and stored entries listed below from your browser.
  • Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as a decline. The notice is not shown and no analytics cookies are set.
  • Turning measurement off entirely: visiting any page of our website with ?notrack added to the address turns this measurement off for your browser. Google Analytics and PostHog do not run at all, Vercel Analytics is not loaded, and the setting is remembered for later visits. Visiting with ?track turns measurement back on.

What is stored

Only after you accept:

  • _ga and _ga_6MRE6YQ8QV (the second takes the form _ga_<id>, where the id is our Google Analytics measurement ID): Google Analytics cookies that distinguish one browser and one visit from another. As set today they expire after about 13 months.
  • ph_<project key>_posthog: a PostHog cookie holding an anonymous visitor identifier and the current session, which expires after one year. PostHog keeps a copy under the same name in your browser's local storage and session storage.

Whether or not you accept:

  • amalgament_consent: an entry in your browser's local storage (not a cookie) that records "granted" or "denied" once you choose, so we do not ask again.
  • amalgament_notrack: an entry in local storage that is set only if you use ?notrack.

Other services that load on our pages

  • Google Fonts. Our typefaces load from Google Fonts, so Google receives your IP address and standard browser details when a page loads them. This sets no cookie on our website.
  • Cal.com. The booking calendar is embedded on our homepage and on our booking page (amalgament.com/talk). It loads from Cal.com when the page opens and sets Cal.com's own cookies in your browser, whatever you chose in our notice. Those cookies are governed by Cal.com's privacy policy, not this one.

Children

The Service is intended for business and professional use and is not directed to children.

Changes; Contact

We may update this Policy prospectively; material changes will be posted with a new "Last updated" date. Questions or requests: drew@amalgament.com, or by mail to Simple Software LLC, 5500 DTC Parkway Apt 730, Greenwood Village, CO 80111.