Privacy Policy

This Privacy Policy explains how TechNamah collects, uses, stores, shares, and protects your personal information when you interact with our website and services. We are committed to protecting your privacy in compliance with applicable data protection laws.

1. Introduction & Data Controller

TechNamah (“we,” “us,” “our”) operates as an AI-first product design and engineering studio. This Privacy Policy applies to all personal information collected through our website at www.technamah.com, our consultation booking processes, our client engagement processes, and any communication channels including email, phone, and social media.

TechNamah acts as the Data Controller for personal information collected directly from website visitors and prospective clients. For personal information processed on behalf of our clients in connection with the development of their products, TechNamah acts as a Data Processor, and the client acts as the Data Controller.

In both roles, TechNamah is committed to responsible, lawful data handling.

By using our Site or engaging our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Site or Services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

Contact Information: Full name, email address, phone number, company name, job title, and physical address when you fill out our contact form, book a consultation, or reach out via email.
Project Information: Information about your business, project requirements, budget range, timeline, technology preferences, and any other details you share during consultation or project engagement.
Account & Contract Data: Information required to create and manage a client account, execute Project Agreements, and process invoices, including billing address, payment method details (processed securely through third-party payment processors), and VAT/tax identification numbers.
Communication Data: Content of emails, messages, meeting notes, and other communications you exchange with TechNamah, including feedback, revision requests, and support inquiries.
Survey & Testimonial Data: Responses to satisfaction surveys, testimonials, and case study participation if you voluntarily provide these.

2.2 Information We Collect Automatically

When you visit our Site, we automatically collect:

Usage Data: Pages visited, time spent on pages, navigation paths, links clicked, referral source, and search terms used to find our Site.
Device & Technical Data: IP address, browser type and version, operating system, screen resolution, device type, and language settings.
Cookie Data: Information stored through cookies, web beacons, and similar technologies as described in Section 8 (Cookies & Tracking Technologies).
Log Data: Server logs including access times, error logs, and other diagnostic information.

2.3 Information from Third Parties

We may receive information about you from:

Social Media Platforms: If you engage with TechNamah through LinkedIn, Twitter/X, Instagram, or other platforms, we may receive profile information in accordance with your privacy settings on those platforms.
Referral Partners: If you were referred by a business partner or affiliate, we may receive basic contact information from them.
Publicly Available Sources: We may research company websites, LinkedIn profiles, or other publicly available information when evaluating a business inquiry.

3. Services Description

Contact & Inquiry Forms: Our website contains forms for general inquiries, consultation booking, and project quotes. Information submitted through these forms is collected and stored in our CRM and project management systems.

Email & Direct Communication: When you email us or communicate via any channel, we collect and store the content of those communications.

Consultation Calls & Video Meetings: Notes from discovery calls and meetings may be stored in our project management system. We do not record video meetings without explicit consent.

Cookies & Analytics: Our website uses analytics tools and cookies to understand visitor behavior. See Section 8 for details.

Social Media Interactions: Comments, messages, or engagement on our social media profiles.

Project Collaboration Tools: During active engagements, we may use project management tools (such as Notion, Jira, or Slack) where client data may be processed. Use of these tools is subject to their respective privacy policies.

4. Legal Basis for Processing Personal Data

Where data protection laws require a legal basis for processing personal data (such as the GDPR for EU/EEAresidents), TechNamah relies on the following:

4.1 Contractual Necessity

We process personal data where necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes processing your contact and project information to provide quotes, execute Project Agreements, deliver Services, and manage billing.

4.2 Legitimate Interests

We process personal data where we have a legitimate business interest, such as: (a) operating and improving our Site and Services; (b) analyzing how visitors use our Site to optimize user experience; (c) maintaining security and preventing fraud; (d) sending relevant follow-up communications to prospective clients who have made an inquiry; and (e) building and maintaining business relationships. We balance our interests against your rights and freedoms and will not process data where our interests are overridden by your rights.

Where required by law, we obtain your explicit consent before processing, such as for marketing communications and non-essential cookies. You may withdraw consent at any time, but this will not affect the lawfulness of processing based on consent before withdrawal.

4.4 Legal Obligation

We may process personal data to comply with legal obligations, such as tax laws, regulatory requirements, court orders, and legal proceedings. Retention of financial records is a common example.

4.5 Vital Interests

In rare circumstances, we may process data to protect the vital interests of you or another natural person.

5. How We Use Your Information

TechNamah uses collected information for the following purposes:

5.1 Service Delivery

Responding to inquiries, providing project quotes, and onboarding new clients

Executing Project Agreements and delivering contracted services

Communicating project status, sharing deliverables, and collecting feedback

Managing billing, invoicing, and payment processing

Providing post-launch support and maintenance services

5.2 Business Operations

Operating and maintaining our website and internal systems

Managing our client relationship management (CRM) system

Conducting quality assurance and internal audits

Complying with legal and regulatory obligations

Enforcing our Terms of Service and Project Agreements

5.3 Communication

Sending project updates, meeting confirmations, and service notifications

Responding to support requests and service inquiries

Sending marketing emails or newsletters where you have provided consent or where permitted by law(you may opt-out at any time)

Announcing new services, case studies, or relevant content we believe may interest you based on your prior inquiries

5.4 Analytics & Improvement

Analyzing website traffic, user behavior, and conversion rates to improve our Site

Measuring the effectiveness of our marketing campaigns

Understanding which services are most in demand to guide our business strategy

Identifying technical issues and improving site performance

5.5 Legal & Security

Detecting, investigating, and preventing fraudulent transactions, abuse, and security incidents

Protecting the rights, property, and safety of TechNamah, our clients, and the public

Complying with applicable laws, regulations, court orders, and government requests

Establishing, exercising, or defending legal claims

6.1 We Do Not Sell Your Data

TechNamah does not sell, rent, or trade your personal information to third parties for their marketing purposes.

We share your information only as described in this Section.

6.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our business, subject to confidentiality and data protection agreements. These include:

Cloud Infrastructure & Hosting: AWS, Google Cloud Platform, or similar providers for website and application hosting
Payment Processing: Stripe, Razorpay, or similar PCI-DSS compliant payment processors
Communication Tools: Email platforms (e.g., Gmail/Google Workspace), video conferencing (e.g., Zoom, Google Meet), and project collaboration tools
Analytics: Google Analytics or similar analytics platforms (see Section 8)
CRM & Project Management: Tools such as Notion, Hubspot, or similar platforms for managing client relationships and projects
AI Platforms: Where necessary for service delivery, client data may be processed through AI APIs such as OpenAI, Anthropic, ElevenLabs, subject to strict data handling controls

6.3 Legal Requirements

We may disclose your information if required by law, legal process, or government authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure safety. We will notify you of such requests where legally permitted.

6.4 Business Transfers

If TechNamah undergoes a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent Site notice prior to your information being transferred and becoming subject to a different privacy policy.

We may share your information with third parties when you have provided explicit consent, such as for case studies, testimonials, or referral partnerships.

7. AI & Automated Processing

7.1 Use of AI in Internal Operations

TechNamah uses AI tools internally to enhance productivity, including for drafting communications, generating code, creating design suggestions, and analyzing project requirements. When AI tools process client information internally, we ensure such processing is subject to appropriate confidentiality and data handling standards.

7.2 AI in Client Products

When TechNamah develops AI-powered products on behalf of clients (such as chatbots, voice agents, AIassistants, or RAG systems), we process client-provided data solely for the purpose of building and training those systems. Such data is handled in accordance with the applicable Project Agreement and our confidentiality obligations.

7.3 No Solely Automated Decision-Making

TechNamah does not make decisions that produce legal or similarly significant effects on individuals through solely automated processing. Our engagement decisions (such as accepting or declining a project) involve human review and judgment.

7.4 Third-Party AI Platform Data Practices

When client data is processed through third-party AI platforms (e.g., OpenAI API, Anthropic API), such processing is subject to the respective platform’s data usage policies. TechNamah uses API access where data is not used for model training by default (e.g., OpenAI’s API terms), and we select platforms with appropriate enterprise data protection commitments. Clients are advised to review the privacy policies of any AI platforms integrated into their products.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, understand how you interact with the site, and improve your experience. We also use similar technologies like web beacons, pixels, and local storage.

8.2 Types of Cookies We Use

Essential Cookies: Necessary for the website to function properly. They enable core features such as security, accessibility, and session management. These cannot be disabled without affecting site functionality.

Analytics Cookies: Collect anonymous data about how visitors use the Site, including pages visited, time spent, and navigation paths. We use these to improve our website (e.g., Google Analytics).

Functional Cookies: Remember your preferences (e.g., language, region) to provide a personalized experience.

Marketing & Targeting Cookies: Track your browsing activity across sites to deliver relevant advertising.

These are only used with your explicit consent.

8.3 Managing Cookies

You can control cookies through: (a) your browser settings, most browsers allow you to block or delete cookies (note this may affect site functionality); (b) our cookie consent banner, you may accept or decline non-essential cookies when first visiting the Site; (c) opt-out tools, for Google Analytics, you can opt out at tools.google.com/dlpage/gaoptout.

8.4 Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. Our Site currently does not respond to DNT signals because there is no universal standard for interpreting them. We apply the cookie settings you select through our cookie consent mechanism regardless of DNT settings.

9. Data Retention

9.1 Retention Periods

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

Client Data & Project Records: Retained for 7 years from project completion or termination of the client relationship for tax, accounting, and legal purposes.
Inquiry & Prospect Data: If a project does not proceed, contact and inquiry data is retained for up to 2years in case you wish to re-engage, then deleted or anonymized.
Communication Records: Email and communication archives retained for 3 years, or as required by law.
Website Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely; IPaddresses and identifiable analytics data are anonymized after 26 months.
Financial & Invoice Records: Retained for at least 7 years as required by tax and financial regulations.
Cookie Data: Retained as specified in each cookie’s lifespan (session cookies expire when you close your browser; persistent cookies expire per their set duration).

9.2 Deletion & Anonymization

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized.

Anonymized data (which can no longer identify you) may be retained indefinitely for analytical and research purposes. You may request earlier deletion of your data as described in Section 10.

10. Your Rights & Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

10.1 Right of Access

You have the right to request a copy of the personal information we hold about you, including information about how we process it, the categories of data, the purposes of processing, and any third parties with whom we share it. We will respond to access requests within 30 days.

10.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

We will update your data promptly upon verification of the correct information.

10.3 Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your personal information where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis; (c) you object to processing and there are no overriding legitimate interests; or (d) the data has been unlawfully processed. Deletion may not be possible where retention is required by law or for legal claims.

10.4 Right to Restriction of Processing

You may request that we restrict processing of your data in certain circumstances, such as while we verify the accuracy of disputed data or while an objection is being assessed.

10.5 Right to Data Portability

Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.

10.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will cease such processing immediately. For other processing, we will cease unless we can demonstrate compelling legitimate grounds.

You have the right not to be subject to solely automated decision-making that produces significant legal effects.

As noted in Section 7.3, TechNamah does not engage in such processing.

10.8 How to Exercise Your Rights

To exercise any of these rights, submit a written request to legal@technamah.com. We will verify your identity before processing the request and respond within 30 days (or the applicable legal deadline). We do not charge for reasonable requests. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

10.9 Marketing Opt-Out

You may opt out of marketing communications at any time by: (a) clicking the “unsubscribe” link in any marketing email; (b) emailing legal@technamah.com with the subject line “Unsubscribe”; or (c) contacting us directly. Transactional communications related to your active project or account are not subject to opt-out.

11. Data Security

11.1 Security Measures

TechNamah implements industry-standard technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

Encryption: All data transmitted between your browser and our Site is encrypted using TLS/SSL. Sensitive data at rest is encrypted using AES-256 or equivalent standards.
Access Controls: Personal information is accessible only to authorized TechNamah personnel and contractors who require access to perform their duties, governed by role-based access controls and least-privilege principles.
Authentication: Secure password policies, multi-factor authentication (MFA) for internal systems, and regular credential rotation.
Secure Development: Security considerations are integrated into our development lifecycle. We followOWASP security guidelines and conduct regular code reviews.
Third-Party Security: We assess the security practices of third-party service providers before sharing data with them and require them to maintain appropriate security standards.
Incident Response: We maintain an incident response plan to detect, respond to, and notify affected parties of security breaches in accordance with applicable law.

11.2 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, TechNamah will notify affected individuals and relevant supervisory authorities within the timeframes required by applicable law (e.g.,72 hours under GDPR). We will provide information about the nature of the breach, categories of data affected, likely consequences, and measures taken to address it.

11.3 No Absolute Security

While we use commercially reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the security of any credentials or access you use to communicate with TechNamah. Please notify us immediately at legal@technamah.com if you suspect any unauthorized access to your information.

12. International Data Transfers

12.1 Cross-Border Processing

TechNamah operates globally and may process, store, and transfer your personal information in countries other than your own, including countries that may not provide the same level of data protection as your home country.

This includes transfers to cloud infrastructure providers and AI platforms located in the United States or other jurisdictions.

12.2 Transfer Safeguards

For transfers from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, TechNamah relies on appropriate safeguards including: (a) Standard Contractual Clauses (SCCs)approved by the European Commission; (b) adequacy decisions where applicable; (c) binding corporate rules or similar mechanisms; or (d) your explicit consent for specific transfers where required. By using our Services, you acknowledge and agree to the transfer of your information to countries outside your jurisdiction as described in this Policy.

13. Children’s Privacy

TechNamah’s Services are directed to businesses and professionals and are not intended for individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18 years of age. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information. If you are a parent or guardian and believe your child under 18 has provided personal information toTechNamah, please contact us at legal@technamah.com and we will promptly investigate and delete the information.

14. Third-Party Links & Services

Our Site may contain links to third-party websites, plugins, or services (such as social media platforms, partner sites, or embedded tools). Clicking on a third-party link will take you away from our Site. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices or content.

We encourage you to review the privacy policy of every website you visit. The inclusion of a link on our Site does not imply endorsement of the linked site or service, or any association with its operators.

For clients whose products integrate third-party APIs and platforms, those platforms’ own privacy policies govern their data handling practices. TechNamah will disclose significant third-party integrations in the applicable Project Agreement.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Posting the revised Policy on our website with an updated effective date prominently displayed

Sending an email notification to active clients or registered contacts where material changes affect them

Providing a summary of key changes where the update is significant

Your continued use of our Site or Services after the effective date of the updated Privacy Policy constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically. If changes are material and you object, you may discontinue use of our Services.

16. Contact & Data Protection Officer Information

TechNamah reserves the right to update or modify these Terms at any time. We will provide notice of materialchanges by: (a) posting the updated Terms on our website with a new effective date; (b) sending an emailnotification to existing clients; or (c) providing in-platform notification where applicable. Your continued use of our Services after the effective date of any changes constitutes acceptance of the revised Terms. If you disagreewith any changes, you may terminate the engagement in accordance with Section 14. Changes do notretroactively affect ongoing Project Agreements unless agreed in writing by both parties.

16.1 General Privacy Inquiries

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Privacy team:

Email: contact@technamah.com
Subject Line: “Privacy Request, [Your Name]”
Website: www.technamah.com (use the Contact form and indicate it is a privacy request)
Response Time: We aim to respond to all privacy inquiries within 5 business days and will acknowledge data subject rights requests within 72 hours

16.2 Supervisory Authority

If you are located in the EEA or UK and believe we have violated applicable data protection laws, you have theright to lodge a complaint with your local data protection supervisory authority. For example: the Information Commissioner’s Office (ICO) in the UK, or the relevant Data Protection Authority (DPA) in your EU member state. We encourage you to contact us first so we can attempt to resolve your concern directly.

16.3 Jurisdiction-Specific Rights

Depending on your location, you may have additional rights under applicable laws:

California Residents (CCPA/CPRA): You have the right to know, delete, correct, and opt-out of the sale/sharing of personal information, and the right to non-discrimination for exercising these rights. TechNamah does not sell personal information. Submit requests to legal@technamah.com.
EU/EEA Residents (GDPR): The rights described in Section 10 apply in full. Our legal bases for processing are described in Section 4.
UK Residents (UK GDPR): Equivalent rights as EU/EEA residents apply under UK data protection law.
Australian Residents (Privacy Act): You have the right to access and correct your personal information and to complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy rights have been breached.
Indian Residents (DPDP Act): Rights under the Digital Personal Data Protection Act 2023 apply, including rights to access, correction, and grievance redressal.

Ready to Build?