Privacy Policy

Ameeryx Global Technologies ("Ameeryx", "we", "us" or "our") is a global IT solutions and digital engineering agency operating delivery hubs in the United States, the United Kingdom, the United Arab Emirates, Singapore and Bangladesh. This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you visit ameeryx.com (the "Site"), submit an inquiry, apply for a role or subscribe to our communications.

By using the Site you acknowledge the practices described in this policy. If you do not agree, please discontinue use of the Site.

We only collect personal data you provide voluntarily, plus minimal technical data required to operate the Site securely. We do not buy or harvest personal data from third-party brokers.

• Contact inquiries — name, email address, company (optional), service of interest, project budget range and the content of your message, submitted through the contact form.
• Job applications — full name, email address, phone number (optional), the role you are applying for, links to your LinkedIn profile and portfolio (optional) and the content of your message, submitted through the careers form.
• Newsletter — email address, submitted through the footer subscription form or the "Ameeryx Brief" subscription popup.
• Technical data — IP address, browser type, operating system, referring URL and pages visited, processed automatically in hosting and server logs for security and performance monitoring.

Please do not include sensitive personal data (for example government identification numbers, health information or financial account details) in form messages. We do not request it and do not need it.

• To respond to project inquiries and prepare proposals you have requested.
• To evaluate and process job applications and contact you about recruitment.
• To deliver newsletters and marketing updates you have subscribed to.
• To operate, secure, troubleshoot and improve the Site, including protection against spam, abuse and automated attacks.
• To comply with legal, regulatory and contractual obligations.

We do not sell, rent or trade your personal data. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Where the EU/UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Consent — newsletter subscriptions and optional form data you choose to provide. You may withdraw consent at any time.
• Contract or steps prior to entering a contract — responding to project inquiries and processing applications.
• Legitimate interests — securing the Site, preventing abuse, keeping server logs and improving our services, balanced against your rights and expectations.
• Legal obligation — retaining or disclosing data where required by applicable law.

The Site is designed to work without third-party tracking cookies or advertising identifiers. We use strictly necessary browser storage (local and session storage) for:

• Your cookie-consent choice (stored on your device), so we do not ask again on every visit.
• Your theme preference (dark or light) and interface settings.
• Short-lived session flags that remember which informational popups you have already seen during your visit.

These entries are stored on your device, never transmitted to us, and you can clear them at any time through your browser settings or the cookie banner. The contact section of the Site also embeds a Google Maps map, which is loaded directly from Google and may receive your IP address; see section 6. If we ever introduce optional analytics or advertising cookies, we will request your consent first and update this policy.

Your personal data is shared only with the categories of recipients listed below, each bound by data-protection obligations appropriate to the services they provide:

• Cloud hosting — the Site and its content store are hosted on Vercel, Inc.
• Cloud database — form submissions are stored in MongoDB Atlas, operated by MongoDB, Inc.
• Professional advisers — auditors, lawyers and insurers, where reasonably required.
• Authorities — regulators, law enforcement or courts, where required by law or to protect our rights, safety or property.
• Corporate transactions — acquirers or successors in the event of a merger, acquisition or asset sale, under this policy's protections.

Embedded content — the contact section displays a map embedded from Google Maps. When this embed loads, Google receives your IP address and standard request data under its own privacy terms. Links to third-party services (such as WhatsApp, Calendly, LinkedIn, X, GitHub and YouTube) load only when you click them, at which point those providers receive your request data under their own privacy policies.

• Contact inquiries — retained for up to 24 months after our last interaction, then deleted or anonymized.
• Job applications — retained for up to 12 months after the hiring decision, unless you ask us to keep them longer for future roles.
• Newsletter subscriptions — retained until you unsubscribe. You can unsubscribe at any time by emailing privacy@ameeryx.com or using any unsubscribe link provided in our communications.
• Server logs — retained for up to 90 days for security monitoring.

We may retain data longer where required by law, in ongoing litigation or to establish and defend legal claims.

We apply security by design across our infrastructure: all traffic is encrypted in transit with TLS, form submissions are strictly validated, our APIs are rate-limited against abuse and our administrative endpoints are protected by signed session cookies and token-based access control. Access to stored submissions is restricted to authorized personnel on a need-to-know basis.

No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. If a breach affecting your personal data occurs, we will notify you and the relevant supervisory authority as required by applicable law.

Ameeryx operates globally, and your personal data may be processed in the United States and other countries where we or our service providers maintain facilities. Where personal data is transferred out of the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You may contact us for details of these safeguards.

Depending on your jurisdiction — including the GDPR, the UK GDPR, the California Consumer Privacy Act (CCPA) and similar laws — you may have the right to:

1. Access the personal data we hold about you and receive a copy of it.
2. Rectify inaccurate or incomplete personal data.
3. Erase your personal data (the "right to be forgotten").
4. Restrict or object to our processing of your personal data.
5. Receive your personal data in a portable, machine-readable format.
6. Withdraw consent at any time, without affecting prior lawful processing.
7. Opt out of the "sale" or "sharing" of personal data — we do not sell personal data, so no action is needed.
8. Lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, email privacy@ameeryx.com. We will verify your request and respond within the timeframe required by applicable law, and in any event within 30 days. You will never be discriminated against for exercising your rights.

The Site is a business-to-business service and is not directed to children. We do not knowingly collect personal data from anyone under 16 years of age. If you believe a child has provided us personal data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The revised version will be posted on this page with an updated "last updated" date. Material changes will be highlighted on the Site. Continued use of the Site after an update constitutes acceptance of the revised policy.

Questions, requests or concerns about this policy or our data practices can be directed to:

• Privacy inquiries — privacy@ameeryx.com
• General inquiries — hello@ameeryx.com
• Ameeryx Global Technologies, One World Trade Center, New York, USA