Privacy policy

Who we are

Ayamark is run by Kojo Gyaase (“we”, “us”). For anything about your data, write to support@ayamark.com.

What we collect

Your account

• Your name and email address.
• Your password, stored only as a one-way hash, so we can't read it. If you use Continue with Google, we instead receive your Google account's ID, name and email address from Google.

What you create and upload

• Your templates and designs, including images you upload into them.
• The details you enter or upload to fill them in: usually other people's names, courses, dates and, if you email certificates, their email addresses. We call this recipient data; see below.
• The images Ayamark makes for you.
• Automations: the spreadsheet or CSV links and webhook addresses you give us, and a record of each run. API keys are stored only as a one-way hash.

Your Gmail connection, if you connect one

To email certificates from your own address, you can connect Gmail. We ask Google only for permission to send email on your behalf; we can't read, search or delete your mail. We store the access token Google gives us, encrypted, and use it only to send the emails you ask Ayamark to send. We keep the recipients' addresses and whether each email was sent. You can disconnect at any time under API keys, which also revokes our access at Google.

Technical information

Our servers see your IP address and the requests your browser makes, which we use to keep the service running and secure, for example to limit repeated login attempts. We use one cookie, to keep you signed in, and your browser remembers which code language you picked on the API reference page. We don't use advertising or analytics trackers.

How we use it

• To run Ayamark for you: store your work, make your images, run your automations, deliver webhooks and send the emails you ask for.
• For AI features: when you ask the AI to design a template, draw an image or edit a design, we send your request and, for edits, your design and a picture of it to our AI provider to produce the result.
• To keep the service secure and working, and to answer you when you write to us.
• To tell you about important changes to Ayamark or these terms. We won't send you marketing without asking.

Recipient data

When you upload details about other people, such as learners or event attendees, you decide what to collect and what to do with it; we process it on your behalf to make and send what you ask for. Please make sure you're allowed to use their details this way and, if you email them, that they expect to hear from you. We don't use recipient data for anything else.

Google user data

Ayamark's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in only to sign you in, and Gmail access only to send the certificate emails you start. We don't use Google user data for advertising, don't sell it, and don't let people read it except where you ask us to help with your account, where it's needed for security, or where the law requires it.

Services we rely on

These companies process data for us, only to provide Ayamark:

• DigitalOcean: our servers and database, in the United States.
• Backblaze: storage for the images Ayamark makes, in the United States. Images are private and shared only through links that expire.
• Ollama: runs the AI models behind the AI features, only when you use them.
• Google: sign-in and Gmail sending, only if you choose them.

When you set up an automation or webhook, Ayamark fetches from and sends to the addresses you give it, which are run by you or whoever you chose.

Where your data is kept

Your data is stored in the United States. If you use Ayamark from elsewhere, your information is transferred there. We protect it the same way wherever you are.

How long we keep it

We keep your account and content while your account is open. Deleting a template deletes its preview image. When you ask us to close your account, we delete your account and your content within 30 days, except anything the law requires us to keep.

How we protect it

• Everything travels over HTTPS.
• Passwords and API keys are stored only as one-way hashes; Google access tokens are encrypted.
• Your images are stored privately and shared only through links that expire.
• Each account sees only its own templates, images, automations and keys.

Your choices and rights

You can ask us for a copy of your data, to correct it, or to delete it and close your account, by writing to support@ayamark.com. Depending on where you live, data protection law (for example Ghana's Data Protection Act, 2012, or the EU and UK GDPR) may give you further rights, such as objecting to how we use your data or complaining to a data protection authority. We'll answer within 30 days.

If you're a recipient (someone whose details were uploaded to make your certificate), please contact the person or organisation that sent it to you first; we'll help them, and you, where we can.

Children

Ayamark isn't meant for children under 16, and we don't knowingly let them create accounts.

Changes

If we change this policy, we'll update the date at the top, and for important changes we'll tell you by email or in Ayamark before they take effect.