Summary of Sections
1. Introduction & Operational Scope
This Privacy Policy applies to AMflix (“we,” “us,” or “our”), a digital studio operating from Bangalore, Karnataka, India. AMflix provides professional digital disciplines including Branding, Social Media Management, Digital Marketing, Design & Video, Website Design & Development, Mobile Application Development, and AI Solutions.
This document details our transparent practices regarding the collection, processing, storage, and protection of information obtained through our website (amflix.in), interactive enquiry modals, contact forms, and related digital communications. We are committed to processing data responsibly and in alignment with applicable Indian laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP), as well as recognized international data privacy standards where applicable.
2. Information We Collect
We collect only the information necessary to provide, protect, and evaluate our digital studio services. We categorize collected information into two categories:
A. Information You Voluntarily Provide
When you submit a project enquiry, request a proposal, or contact us through our website, you provide details that may include:
- Contact Details: Your full name, corporate or personal email address, and telephone or WhatsApp number.
- Business Profile: Your company or brand name, existing website URL, and industry sector.
- Project Parameters: Selected service disciplines (e.g., Software Development, AI Solutions, Branding), estimated project budget ranges, and anticipated delivery timelines.
- Message Content: Qualitative briefs, project descriptions, and background notes submitted in our contact forms.
- Consent Records: Affirmative confirmation of your agreement to our Terms & Conditions and acknowledgement of this Privacy Policy.
B. Technical & Operational Information Collected Automatically
When you interact with our website, our serverless hosting infrastructure and security filters automatically collect minimal technical telemetry:
- Network Telemetry: Client IP address (used for rate-limiting, bot challenge verification, and recording audit evidence of terms consent).
- Device & Browser Metadata: Browser type, operating system, language preference, and referring URLs collected as standard diagnostic logs.
- Security Tokens: Cryptographic idempotency keys and Cloudflare Turnstile verification challenge tokens to block automated bot spam.
3. How We Use Collected Data
We use collected information strictly for legitimate commercial and technical operations:
- Evaluating Project Inquiries: Scoping project feasibility, estimating engineering effort, and preparing tailored technical proposals or pricing quotes.
- Direct Business Communication: Responding to client enquiries via email, telephone, or scheduled video consultations.
- Audit & Consent Records: Maintaining immutable records of form submissions and terms consent in our system audit log to comply with legal record-keeping standards.
- Infrastructure Protection: Preventing spam submissions, automated denial-of-service attempts, unauthorized administrative access, and malicious script execution.
We do not engage in automated individual decision-making, profiling, or algorithmic scoring that produces legal or significant consequences for visitors.
4. Verified Service Providers & Processors
AMflix does not sell, rent, monetize, or trade your personal information to third parties. We share data only with verified cloud infrastructure and technology providers essential to operating our digital studio:
| Service Provider | Role / Processing Function | Data Handled |
|---|---|---|
| Vercel Inc. | Application hosting, edge routing, serverless execution | Standard HTTP request logs, incoming API payloads |
| Neon, Inc. | Managed serverless PostgreSQL database infrastructure | Stored enquiries, service records, and audit logs |
| Cloudflare, Inc. | DNS resolution, WAF protection, Turnstile bot challenges | Visitor IP addresses, challenge tokens, edge CDN logs |
| Resend Technologies, Inc. | Transactional email notification delivery | Enquiry notification emails dispatched to studio admins |
| Cloudflare R2 | Media asset object storage (media.amflix.in) | Public media assets and uploaded portfolio graphics |
| Sentry (Functional Software) | Runtime error reporting and diagnostics (when enabled) | Anonymized stack traces and system runtime errors |
5. Data Storage, Security & Retention
We implement administrative and technical security measures commensurate with the sensitivity of information we process:
- Encryption in Transit: All data transmitted between your browser and our servers is secured using modern Transport Layer Security (TLS 1.2 / TLS 1.3).
- Administrative Access Controls: Studio administrative access requires Argon2id password hashing and Time-based One-Time Password (TOTP) two-factor authentication.
- Database Protection: Database connections use pooled SSL/TLS endpoints with isolated database credentials and parameterized queries through Prisma ORM to prevent SQL injection.
*Notice: While we implement industry-standard security safeguards, no method of electronic transmission or cloud storage is 100% impenetrable. We cannot guarantee absolute immunity from unforeseen security events.
6. Cookies & Tracking Technologies
We operate a privacy-first website architecture:
- No Advertising Cookies: We do not deploy third-party advertising cookies, retargeting pixels, social tracking widgets, or invasive trackers on our public pages.
- Administrative Authentication Cookies: A secure, HTTP-only session cookie is set only when an authorized administrator logs into the /admin workspace. This cookie is not issued to general visitors.
- Local Storage for UI Preferences: We use your browser's localStorage exclusively to remember your visual theme preference (Light or Dark mode). This setting remains strictly on your device and is never transmitted to our servers.
7. User Rights & Data Protection Choices
Depending on your jurisdiction and subject to applicable legal exceptions, you possess the following rights regarding personal data you have submitted:
- Right to Access: You may request confirmation of whether we hold personal data concerning you and obtain a copy of such information.
- Right to Correction: You may request the rectification of incomplete or inaccurate contact details in our records.
- Right to Erasure: You may request the deletion of your personal data from our active databases where retention is no longer necessary for legitimate business or legal purposes.
- Right to Withdraw Consent: You may revoke consent for future project communications at any time.
To exercise your rights, please submit a written request to contact@amflix.in with the subject line “Data Privacy Request.” We will verify your identity and respond within thirty (30) calendar days.
8. Children's Privacy
Our digital studio services, software consulting, and website are directed exclusively to business enterprises, commercial founders, and adults aged 18 and older. We do not knowingly solicit or collect personal information from children or minors under 18 years of age. If you believe a minor has submitted information through our forms without parental consent, please contact us immediately to have the data removed.
9. International Data Transfers
AMflix is headquartered in India. Because our cloud hosting and security partners (such as Vercel, Cloudflare, Neon, and Resend) maintain globally distributed server infrastructures, your data may be transferred to, routed through, or stored in server locations in India, the European Union, or the United States. In all such cases, transfers occur across encrypted channels governed by standardized cloud security benchmarks.
10. Policy Updates & Contact Information
We reserve the right to revise this Privacy Policy periodically to reflect technological updates, changes to our service offerings, or evolving legal frameworks. Any revisions will be published on this page with an updated “Effective Date.” Continued interaction with our website constitutes acknowledgement of the updated terms.