Privacy Policy

This Privacy Policy explains how Ameyy Digital Services ("Ameyy", "we", "our", or "us"), registered with the Ministry of MSME, Government of India (UDYAM: UDYAM-TN-13-0043166), collects, uses, protects, and discloses personal information obtained through our website (https://www.ameyy.in), email communications, and client development engagements.

This policy is formulated in compliance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") of the Republic of India, as well as recognized international data privacy standards.

We collect information that you directly provide to us, as well as limited technical data automatically generated when visiting our website:

• Directly Provided Information: When you submit a project inquiry, request a quote, schedule a consultation, or contact us via web form or email, we may collect:
  • Full Name
  • Business Email Address
  • Telephone / WhatsApp Contact Number
  • Company / Organization Name
  • Project Description, Requirements, and Budgetary Specifications
• Development & Staging Credentials: In the course of executing software engineering contracts, clients may provide server access, staging credentials, third-party API keys, or test databases. All such credentials are stored in encrypted vaults and used strictly for designated development work.
• Automatically Collected Technical Data: When you navigate our website, our web servers and performance monitoring tools may log:
  • Internet Protocol (IP) address
  • Browser type and version
  • Operating system and device screen resolution
  • Referring website URL and exit pages
  • Date, timestamp, and duration of page views

We utilize the information collected for legitimate commercial and engineering purposes:

• Service Delivery: To analyze requirements, prepare proposals, develop websites and software, execute integrations, and deliver contracted services.
• Communication: To respond to your project inquiries, provide milestone updates, schedule technical calls, and handle customer service requests.
• Invoicing & Administration: To process payments, generate tax invoices, verify purchase orders, and fulfill legal accounting requirements.
• Technical Support: To provide post-launch maintenance, diagnose system bugs, and assist with infrastructure hosting.
• Website Security & Optimization: To prevent cyber attacks, detect unauthorized access, analyze browsing traffic, and improve user experience across our digital properties.

We do not sell, rent, trade, or monetize your personal information or business data.

We only disclose information in the following limited and necessary situations:

• With Your Consent: When you have explicitly authorized disclosure for a specific purpose (e.g., registering a domain in your name, provisioning an AWS/Vercel instance with your email).
• Authorized Subprocessors: With vetted infrastructure partners (such as cloud hosting and email service providers) strictly bound by confidentiality agreements to perform services on our behalf.
• Legal & Regulatory Compliance: If required to do so by applicable Indian or international law, court summons, or regulatory authorities where we reasonably believe disclosure is mandatory.

To deliver modern, secure web services, we utilize industry-standard cloud providers:

• Hosting & Edge Network: Vercel and AWS for resilient, globally distributed website hosting and serverless functions.
• Email Services: Nodemailer and secure SMTP gateways for routing contact form notifications and client correspondence.
• Domain & DNS Management: Enterprise DNS providers for secure domain routing and SSL certificate issuance.

These third-party providers have access only to the data necessary to perform their respective duties and are legally bound to uphold data security standards equivalent to or higher than our own.

Ameyy Digital Services implements rigorous administrative, physical, and technical security measures:

• Transport Layer Security (TLS/HTTPS): All website traffic is encrypted in transit using 256-bit SSL/TLS encryption.
• Access Controls: Client codebases, credentials, and databases are protected by multi-factor authentication and role-based permissions restricted strictly to designated developers.
• Safe Development Practices: Regular code reviews, automated vulnerability scans, and security patches to protect software against injection, XSS, and CSRF attacks.

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected:

• Inquiry Records: General business inquiries that do not result in a contract are purged after twelve (12) months.
• Client Engagement Records: Project contracts, communications, and tax invoices are retained for seven (7) years to comply with Indian statutory taxation and accounting obligations.
• Staging Access & Temp Keys: Any temporary credentials, database snapshots, or staging keys provided during active development are purged within thirty (30) days following final deployment and project sign-off.

Under applicable data protection laws, you possess the following rights regarding your personal information:

• Right to Access: You may request a summary of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated information.
• Right to Erasure: You may request the deletion of your personal data from our marketing and inquiry records, subject to statutory retention obligations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time by notifying our support desk.

To exercise any of these rights, contact our privacy desk at ameyy.support@gmail.com. We will respond to verified requests within thirty (30) calendar days.

Our website uses minimal, essential cookies and local storage tokens to ensure secure page rendering, remember navigation preferences, and assess aggregated site traffic.

We do not use invasive third-party cross-site advertising trackers. You can configure your browser to refuse all cookies or notify you when a cookie is sent. However, certain parts of the website may function with limited capabilities if cookies are disabled.

Our services and website are targeted strictly at business entities, professionals, and adults over the age of eighteen (18). We do not knowingly solicit or collect personal information from minors. If you believe a minor has submitted personal information to us, please notify us immediately, and we will delete the data without delay.

We may update this Privacy Policy periodically to reflect changes in our operational procedures, technologies, or relevant legal statutes. Any modifications will be posted directly on this page with an updated "Effective Date". Continued interaction with our services following updates constitutes your acceptance of the revised policy.

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the details of our designated Grievance Officer are provided below: