Privacy Policy
This Privacy Policy explains how TechNamah collects, uses, stores, shares, and protects your personal informationwhen you interact with our website and services. We are committed to protecting your privacy in compliance withapplicable data protection laws.
1. Introduction & Data Controller
TechNamah ("we," "us," "our") operates as an AI-first product design and engineering studio. This Privacy Policyapplies to all personal information collected through our website at www.technamah.com, our consultationbooking processes, our client engagement processes, and any communication channels including email, phone,and social media.
TechNamah acts as the Data Controller for personal information collected directly from website visitors andprospective clients. For personal information processed on behalf of our clients in connection with thedevelopment of their products, TechNamah acts as a Data Processor, and the client acts as the Data Controller.In both roles, TechNamah is committed to responsible, lawful data handling.
By using our Site or engaging our Services, you consent to the practices described in this Privacy Policy. If youdo not agree, please do not use our Site or Services.
TechNamah acts as the Data Controller for personal information collected directly from website visitors andprospective clients. For personal information processed on behalf of our clients in connection with thedevelopment of their products, TechNamah acts as a Data Processor, and the client acts as the Data Controller.In both roles, TechNamah is committed to responsible, lawful data handling.
By using our Site or engaging our Services, you consent to the practices described in this Privacy Policy. If youdo not agree, please do not use our Site or Services.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Contact Information: Full name, email address, phone number, company name, job title, and physicaladdress when you fill out our contact form, book a consultation, or reach out via email.
- Project Information: Information about your business, project requirements, budget range, timeline,technology preferences, and any other details you share during consultation or project engagement.
- Account & Contract Data: Information required to create and manage a client account, execute ProjectAgreements, and process invoices, including billing address, payment method details (processedsecurely through third-party payment processors), and VAT/tax identification numbers.
- Communication Data: Content of emails, messages, meeting notes, and other communications youexchange with TechNamah, including feedback, revision requests, and support inquiries.
- Survey & Testimonial Data: Responses to satisfaction surveys, testimonials, and case study participationif you voluntarily provide these.
2.2 Information We Collect Automatically
When you visit our Site, we automatically collect:
- Usage Data: Pages visited, time spent on pages, navigation paths, links clicked, referral source, andsearch terms used to find our Site.
- Device & Technical Data: IP address, browser type and version, operating system, screen resolution,device type, and language settings.
- Cookie Data: Information stored through cookies, web beacons, and similar technologies as described inSection 8 (Cookies & Tracking Technologies).
- Log Data: Server logs including access times, error logs, and other diagnostic information.
2.3 Information from Third Parties
We may receive information about you from:
- Social Media Platforms: If you engage with TechNamah through LinkedIn, Twitter/X, Instagram, or other platforms, we may receive profile information in accordance with your privacy settings on those platforms.
- Referral Partners: If you were referred by a business partner or affiliate, we may receive basic contactinformation from them.
- Publicly Available Sources: We may research company websites, LinkedIn profiles, or other publiclyavailable information when evaluating a business inquiry.
3. Services Description
- Contact & Inquiry Forms: Our website contains forms for general inquiries, consultation booking, andproject quotes. Information submitted through these forms is collected and stored in our CRM and projectmanagement systems.
- Email & Direct Communication: When you email us or communicate via any channel, we collect and storethe content of those communications.
- Consultation Calls & Video Meetings: Notes from discovery calls and meetings may be stored in ourproject management system. We do not record video meetings without explicit consent.
- Cookies & Analytics: Our website uses analytics tools and cookies to understand visitor behavior. SeeSection 8 for details.
- Social Media Interactions: Comments, messages, or engagement on our social media profiles.
- Project Collaboration Tools: During active engagements, we may use project management tools (such asNotion, Jira, or Slack) where client data may be processed. Use of these tools is subject to theirrespective privacy policies.
4. Legal Basis for Processing Personal Data
Where data protection laws require a legal basis for processing personal data (such as the GDPR for EU/EEAresidents), TechNamah relies on the following:
4.1 Contractual Necessity
We process personal data where necessary to perform a contract with you or to take steps at your requestbefore entering into a contract. This includes processing your contact and project information to provide quotes,execute Project Agreements, deliver Services, and manage billing.
4.2 Legitimate Interests
We process personal data where we have a legitimate business interest, such as: (a) operating and improvingour Site and Services; (b) analyzing how visitors use our Site to optimize user experience; (c) maintainingsecurity and preventing fraud; (d) sending relevant follow-up communications to prospective clients who havemade an inquiry; and (e) building and maintaining business relationships. We balance our interests against yourrights and freedoms and will not process data where our interests are overridden by your rights.
4.3 Consent
Where required by law, we obtain your explicit consent before processing, such as for marketingcommunications and non-essential cookies. You may withdraw consent at any time, but this will not affect thelawfulness of processing based on consent before withdrawal.
4.4 Legal Obligation
We may process personal data to comply with legal obligations, such as tax laws, regulatory requirements,court orders, and legal proceedings. Retention of financial records is a common example.
4.5 Vital Interests
In rare circumstances, we may process data to protect the vital interests of you or another natural person.
5. How We Use Your Information
TechNamah uses collected information for the following purposes:
5.1 Service Delivery
- Responding to inquiries, providing project quotes, and onboarding new clients
- Executing Project Agreements and delivering contracted services
- Communicating project status, sharing deliverables, and collecting feedback
- Managing billing, invoicing, and payment processing
- Providing post-launch support and maintenance services
5.2 Business Operations
- Operating and maintaining our website and internal systems
- Managing our client relationship management (CRM) system
- Conducting quality assurance and internal audits
- Complying with legal and regulatory obligations
- Enforcing our Terms of Service and Project Agreements
5.3 Communication
- Sending project updates, meeting confirmations, and service notifications
- Responding to support requests and service inquiries
- Sending marketing emails or newsletters where you have provided consent or where permitted by law(you may opt-out at any time)
- Announcing new services, case studies, or relevant content we believe may interest you based on yourprior inquiries
5.4 Analytics & Improvement
- Analyzing website traffic, user behavior, and conversion rates to improve our Site
- Measuring the effectiveness of our marketing campaigns
- Understanding which services are most in demand to guide our business strategy
- Identifying technical issues and improving site performance
5.5 Legal & Security
- Detecting, investigating, and preventing fraudulent transactions, abuse, and security incidents
- Protecting the rights, property, and safety of TechNamah, our clients, and the public
- Complying with applicable laws, regulations, court orders, and government requests
- Establishing, exercising, or defending legal claims
6. Sharing & Disclosure of Information
6.1 We Do Not Sell Your Data
TechNamah does not sell, rent, or trade your personal information to third parties for their marketing purposes.We share your information only as described in this Section.
6.2 Service Providers
We share information with trusted third-party service providers who assist us in operating our business, subjectto confidentiality and data protection agreements. These include:
- Cloud Infrastructure & Hosting: AWS, Google Cloud Platform, or similar providers for website andapplication hosting
- Payment Processing: Stripe, Razorpay, or similar PCI-DSS compliant payment processors
- Communication Tools: Email platforms (e.g., Gmail/Google Workspace), video conferencing (e.g., Zoom,Google Meet), and project collaboration tools
- Analytics: Google Analytics or similar analytics platforms (see Section 8)
- CRM & Project Management: Tools such as Notion, Hubspot, or similar platforms for managing clientrelationships and projects
- AI Platforms: Where necessary for service delivery, client data may be processed through AI APIs suchas OpenAI, Anthropic, ElevenLabs, subject to strict data handling controls
6.3 Legal Requirements
We may disclose your information if required by law, legal process, or government authority, or if we believedisclosure is necessary to protect our rights, prevent fraud, or ensure safety. We will notify you of such requestswhere legally permitted.
6.4 Business Transfers
If TechNamah undergoes a merger, acquisition, restructuring, or sale of assets, your information may betransferred as part of that transaction. We will notify you via email or prominent Site notice prior to yourinformation being transferred and becoming subject to a different privacy policy.
6.5 With Your Consent
We may share your information with third parties when you have provided explicit consent, such as for casestudies, testimonials, or referral partnerships.
7. AI & Automated Processing
7.1 Use of AI in Internal Operations
TechNamah uses AI tools internally to enhance productivity, including for drafting communications, generatingcode, creating design suggestions, and analyzing project requirements. When AI tools process clientinformation internally, we ensure such processing is subject to appropriate confidentiality and data handlingstandards.
7.2 AI in Client Products
When TechNamah develops AI-powered products on behalf of clients (such as chatbots, voice agents, AIassistants, or RAG systems), we process client-provided data solely for the purpose of building and trainingthose systems. Such data is handled in accordance with the applicable Project Agreement and ourconfidentiality obligations.
7.3 No Solely Automated Decision-Making
TechNamah does not make decisions that produce legal or similarly significant effects on individuals throughsolely automated processing. Our engagement decisions (such as accepting or declining a project) involvehuman review and judgment.
7.4 Third-Party AI Platform Data Practices
When client data is processed through third-party AI platforms (e.g., OpenAI API, Anthropic API), suchprocessing is subject to the respective platform's data usage policies. TechNamah uses API access where datais not used for model training by default (e.g., OpenAI's API terms), and we select platforms with appropriateenterprise data protection commitments. Clients are advised to review the privacy policies of any AI platformsintegrated into their products.
8. Cookies & Tracking Technologies
8.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They help websites remember yourpreferences, understand how you interact with the site, and improve your experience. We also use similartechnologies like web beacons, pixels, and local storage.
8.2 Types of Cookies We Use
- Essential Cookies: Necessary for the website to function properly. They enable core features such assecurity, accessibility, and session management. These cannot be disabled without affecting sitefunctionality.
- Analytics Cookies: Collect anonymous data about how visitors use the Site, including pages visited, timespent, and navigation paths. We use these to improve our website (e.g., Google Analytics).
- Functional Cookies: Remember your preferences (e.g., language, region) to provide a personalizedexperience.
- Marketing & Targeting Cookies: Track your browsing activity across sites to deliver relevant advertising.These are only used with your explicit consent.
8.3 Managing Cookies
You can control cookies through: (a) your browser settings — most browsers allow you to block or deletecookies (note this may affect site functionality); (b) our cookie consent banner — you may accept or declinenon-essential cookies when first visiting the Site; (c) opt-out tools — for Google Analytics, you can opt out attools.google.com/dlpage/gaoptout.
8.4 Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. Our Site currently does not respond to DNT signalsbecause there is no universal standard for interpreting them. We apply the cookie settings you select throughour cookie consent mechanism regardless of DNT settings.
9. Data Retention
9.1 Retention Periods
We retain personal information only for as long as necessary for the purposes for which it was collected, or asrequired by applicable law. Our standard retention periods are:
- Client Data & Project Records: Retained for 7 years from project completion or termination of the clientrelationship for tax, accounting, and legal purposes.
- Inquiry & Prospect Data: If a project does not proceed, contact and inquiry data is retained for up to 2years in case you wish to re-engage, then deleted or anonymized.
- Communication Records: Email and communication archives retained for 3 years, or as required by law.
- Website Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely; IPaddresses and identifiable analytics data are anonymized after 26 months.
- Financial & Invoice Records: Retained for at least 7 years as required by tax and financial regulations.
- Cookie Data: Retained as specified in each cookie's lifespan (session cookies expire when you closeyour browser; persistent cookies expire per their set duration).
9.2 Deletion & Anonymization
Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized.Anonymized data (which can no longer identify you) may be retained indefinitely for analytical and researchpurposes. You may request earlier deletion of your data as described in Section 10.
10. Your Rights & Choices
Depending on your location and applicable law, you may have the following rights regarding your personalinformation:
10.1 Right of Access
You have the right to request a copy of the personal information we hold about you, including information abouthow we process it, the categories of data, the purposes of processing, and any third parties with whom weshare it. We will respond to access requests within 30 days.
10.2 Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal information we hold about you.We will update your data promptly upon verification of the correct information.
10.3 Right to Erasure ("Right to Be Forgotten")
You may request deletion of your personal information where: (a) it is no longer necessary for the purpose forwhich it was collected; (b) you withdraw consent and there is no other legal basis; (c) you object to processingand there are no overriding legitimate interests; or (d) the data has been unlawfully processed. Deletion may notbe possible where retention is required by law or for legal claims.
10.4 Right to Restriction of Processing
You may request that we restrict processing of your data in certain circumstances, such as while we verify theaccuracy of disputed data or while an objection is being assessed.
10.5 Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you havethe right to receive your personal data in a structured, commonly used, machine-readable format, and totransmit it to another controller.
10.6 Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. If youobject to direct marketing, we will cease such processing immediately. For other processing, we will ceaseunless we can demonstrate compelling legitimate grounds.
10.7 Rights Related to Automated Decision-Making
You have the right not to be subject to solely automated decision-making that produces significant legal effects.As noted in Section 7.3, TechNamah does not engage in such processing.
10.8 How to Exercise Your Rights
To exercise any of these rights, submit a written request to legal@technamah.com. We will verify your identitybefore processing the request and respond within 30 days (or the applicable legal deadline). We do not chargefor reasonable requests. If you are not satisfied with our response, you have the right to lodge a complaint withthe relevant data protection supervisory authority in your jurisdiction.
10.9 Marketing Opt-Out
You may opt out of marketing communications at any time by: (a) clicking the "unsubscribe" link in anymarketing email; (b) emailing legal@technamah.com with the subject line "Unsubscribe"; or (c) contacting usdirectly. Transactional communications related to your active project or account are not subject to opt-out.
11. Data Security
11.1 Security Measures
TechNamah implements industry-standard technical, administrative, and physical security measures to protectyour personal information against unauthorized access, disclosure, alteration, or destruction. Our securitymeasures include:
- Encryption: All data transmitted between your browser and our Site is encrypted using TLS/SSL. Sensitive data at rest is encrypted using AES-256 or equivalent standards.
- Access Controls: Personal information is accessible only to authorized TechNamah personnel andcontractors who require access to perform their duties, governed by role-based access controls andleast-privilege principles.
- Authentication: Secure password policies, multi-factor authentication (MFA) for internal systems, andregular credential rotation.
- Secure Development: Security considerations are integrated into our development lifecycle. We followOWASP security guidelines and conduct regular code reviews.
- Third-Party Security: We assess the security practices of third-party service providers before sharing datawith them and require them to maintain appropriate security standards.
- Incident Response: We maintain an incident response plan to detect, respond to, and notify affectedparties of security breaches in accordance with applicable law.
11.2 Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, TechNamah will notifyaffected individuals and relevant supervisory authorities within the timeframes required by applicable law (e.g.,72 hours under GDPR). We will provide information about the nature of the breach, categories of data affected,likely consequences, and measures taken to address it.
11.3 No Absolute Security
While we use commercially reasonable security measures, no method of transmission over the Internet orelectronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintainingthe security of any credentials or access you use to communicate with TechNamah. Please notify usimmediately at legal@technamah.com if you suspect any unauthorized access to your information.
12. International Data Transfers
12.1 Cross-Border Processing
TechNamah operates globally and may process, store, and transfer your personal information in countries otherthan your own, including countries that may not provide the same level of data protection as your home country.This includes transfers to cloud infrastructure providers and AI platforms located in the United States or otherjurisdictions.
12.2 Transfer Safeguards
For transfers from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transferrestrictions, TechNamah relies on appropriate safeguards including: (a) Standard Contractual Clauses (SCCs)approved by the European Commission; (b) adequacy decisions where applicable; (c) binding corporate rules orsimilar mechanisms; or (d) your explicit consent for specific transfers where required. By using our Services,you acknowledge and agree to the transfer of your information to countries outside your jurisdiction asdescribed in this Policy.
13. Children's Privacy
TechNamah's Services are directed to businesses and professionals and are not intended for individuals underthe age of 18. We do not knowingly collect, use, or disclose personal information from children under 18 yearsof age. If we become aware that we have inadvertently collected personal information from a child under 18, wewill take prompt steps to delete such information.
If you are a parent or guardian and believe your child under 18 has provided personal information toTechNamah, please contact us at legal@technamah.com and we will promptly investigate and delete theinformation.
If you are a parent or guardian and believe your child under 18 has provided personal information toTechNamah, please contact us at legal@technamah.com and we will promptly investigate and delete theinformation.
14. Third-Party Links & Services
Our Site may contain links to third-party websites, plugins, or services (such as social media platforms, partnersites, or embedded tools). Clicking on a third-party link will take you away from our Site. This Privacy Policydoes not apply to third-party websites, and we are not responsible for their privacy practices or content.
We encourage you to review the privacy policy of every website you visit. The inclusion of a link on our Sitedoes not imply endorsement of the linked site or service, or any association with its operators.
For clients whose products integrate third-party APIs and platforms, those platforms' own privacy policiesgovern their data handling practices. TechNamah will disclose significant third-party integrations in theapplicable Project Agreement.
We encourage you to review the privacy policy of every website you visit. The inclusion of a link on our Sitedoes not imply endorsement of the linked site or service, or any association with its operators.
For clients whose products integrate third-party APIs and platforms, those platforms' own privacy policiesgovern their data handling practices. TechNamah will disclose significant third-party integrations in theapplicable Project Agreement.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legalrequirements, or other factors. We will notify you of material changes by:
- Posting the revised Policy on our website with an updated effective date prominently displayed
- Sending an email notification to active clients or registered contacts where material changes affect them
- Providing a summary of key changes where the update is significant
Your continued use of our Site or Services after the effective date of the updated Privacy Policy constitutesacceptance of the revised Policy. We encourage you to review this Policy periodically. If changes are materialand you object, you may discontinue use of our Services.
16. Contact & Data Protection Officer Information
TechNamah reserves the right to update or modify these Terms at any time. We will provide notice of materialchanges by: (a) posting the updated Terms on our website with a new effective date; (b) sending an emailnotification to existing clients; or (c) providing in-platform notification where applicable. Your continued use of ourServices after the effective date of any changes constitutes acceptance of the revised Terms. If you disagreewith any changes, you may terminate the engagement in accordance with Section 14. Changes do notretroactively affect ongoing Project Agreements unless agreed in writing by both parties.
16.1 General Privacy Inquiries
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact ourPrivacy team:
- Email: legal@technamah.com
- Subject Line: "Privacy Request — [Your Name]"
- Website: www.technamah.com (use the Contact form and indicate it is a privacy request)
- Response Time: We aim to respond to all privacy inquiries within 5 business days and will acknowledgedata subject rights requests within 72 hours
16.2 Supervisory Authority
If you are located in the EEA or UK and believe we have violated applicable data protection laws, you have theright to lodge a complaint with your local data protection supervisory authority. For example: the InformationCommissioner's Office (ICO) in the UK, or the relevant Data Protection Authority (DPA) in your EU memberstate. We encourage you to contact us first so we can attempt to resolve your concern directly.
16.3 Jurisdiction-Specific Rights
Depending on your location, you may have additional rights under applicable laws:
- California Residents (CCPA/CPRA): You have the right to know, delete, correct, and opt-out of thesale/sharing of personal information, and the right to non-discrimination for exercising these rights.TechNamah does not sell personal information. Submit requests to legal@technamah.com.
- EU/EEA Residents (GDPR): The rights described in Section 10 apply in full. Our legal bases forprocessing are described in Section 4.
- UK Residents (UK GDPR): Equivalent rights as EU/EEA residents apply under UK data protection law.
- Australian Residents (Privacy Act): You have the right to access and correct your personal informationand to complain to the Office of the Australian Information Commissioner (OAIC) if you believe yourprivacy rights have been breached.
- Indian Residents (DPDP Act): Rights under the Digital Personal Data Protection Act 2023 apply, includingrights to access, correction, and grievance redressal.

Ready to Build?
Have an Idea? Let's Build It.
Building your first product? Scaling an existing platform? Integrating AI workflows?

No commitment required

Response within 24 hours

Free 30-min strategy session







