Privacy statement

Last updated: 28 October 2026

1. Who we are

ammo.host is operated by AMMO Solutions, a sole proprietorship (eenmanszaak), registered in the Netherlands at Kloosterdijk 6, 1141 PJ Monnickendam, Chamber of Commerce (KvK) number 68679750, VAT number NL001694241B13. We are the controller of the account data below. For personal data inside your apps, you are the controller and we are your processor.

Privacy contact: privacy@ammo.solutions. Report security issues to security@ammo.solutions.

2. What we collect

ammo.host is only for people aged 18 or over. We do not knowingly collect data from anyone younger.

• Account data: email, and when that email was confirmed.
• Billing data: handled by our payment provider. We receive the plan, payment status, the last 4 digits and country of your card, and invoices. We never see full card numbers. A card is optional; you can use the free period without one.
• App files and telemetry: timestamps, app name, build status, durations, resource usage, error codes and region. We keep the files your agent sends so we can build and run your app. We use them for nothing else. They are deleted when you delete the app. A deleted app's database can remain in a backup for up to 7 days.
• Logs and security data: IP addresses, request logs and abuse-scanning signals.
• Support: messages you send us.
• Terms acceptance: records of when you accepted the terms, which version and in what context (signup, checkout), for contract and compliance purposes.

3. Why we use it (legal basis)

• To run the service and bill you: performance of the contract.
• Security, abuse prevention and improving reliability: legitimate interests.
• Tax and accounting records: legal obligation.
• Emails about your account, trial, payment, a price change, or an app we stop: performance of the contract.

We do not sell personal data. We do not use your content for advertising.

4. Where data lives

Your apps and data run on servers in Germany and Finland. The app servers, the build server and the registry are with our hosting provider in Germany (Nuremberg) and Finland (Helsinki). App database backups and the customer store are with our object storage provider, in a bucket under EU jurisdiction. The deploy control panel is self-hosted with our hosting provider. Each app's database is backed up nightly and kept for 7 days. Those backups are stored encrypted at rest and encrypted in transit.

5. Who we share it with (sub-processors)

The named sub-processors and their transfer safeguards are listed in the Data processing agreement.

We do not sell personal data. We disclose it to authorities only when the law requires it.

6. How long we keep it

• Account data and content in your apps and store: while the account exists. When you delete the account from the dashboard, we erase them immediately.
• While the account is open, you can download your account data and each app's database yourself, any time, from the dashboard.
• If we close the account, we erase it the same way, unless the law or the reason prevents it. You can ask for a copy of your data by emailing info@ammo.solutions.
• Each app's database is backed up nightly and kept for 7 days. A deleted account can remain in a backup until that backup expires.
• Waitlist entries (your email address and status): we keep them for up to 365 days, and remove them about a week after an approved entry becomes an account or when you ask us to.
• Billing records: 7 years (Dutch tax law). That is the payment provider's customer reference, the plan, payment status and invoices.
• Records of terms acceptance and withdrawal requests (user, version, time): kept for the duration of the contract plus the statutory retention period for administration.
• Active data is deleted within 14 days of an authorised deletion request sent by email, or of the end of the relevant service. Each backup copy is retained for no more than 7 days from creation.

7. Your rights

You can download your account data and each app's database yourself, any time, from the dashboard. You can delete your account from the dashboard, under Account. You can also email privacy@ammo.solutions and we will erase it within 14 days. You can ask to access, correct, restrict or port your data, and you can object to processing. You can complain to the Autoriteit Persoonsgegevens.

8. Security

We use encryption in transit, backups stored encrypted at rest, access controls and abuse scanning. If a breach affects you, we notify you as the law requires.

9. Data in your apps

For personal data you process in your apps, you are the controller and AMMO is your processor. The Data processing agreement at https://app.ammo.host/dpa/ forms part of the Terms and applies to that data. You are responsible for your own privacy notice to your users.

10. Changes

We announce material changes at least 30 days in advance by email.