1. Introduction
Amex Technology (“we,” “our,” or “us”) operates amextechnology.com (the “Site”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have.
By using the Site you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Site.
2. Information We Collect
2.1 Information you provide directly
- Contact form submissions — When you fill out our contact or project inquiry form, we collect your name, email address, company name, project description, and any other details you include in the message.
- Account information — If you create an account via our client dashboard (/login, /dashboard), we collect your email address and a hashed password managed through Supabase Auth. You may also provide additional profile details voluntarily.
- Payment information — If you make a payment through our Site, payment data is processed directly by Stripe. We do not store your full card number, CVV, or other sensitive payment credentials on our servers.
2.2 Information collected automatically
- Usage and analytics data — We use Google Analytics to collect information about how visitors interact with the Site, including pages visited, time spent, referral source, browser type, device type, and approximate geographic location (country/city level). This data is anonymised and aggregated.
- Log data — Our hosting infrastructure (Vercel) and CDN (Cloudflare) automatically record standard server logs, including IP addresses, request timestamps, HTTP status codes, and referring URLs. These logs are retained for security and debugging purposes.
- Cookies — See Section 4 below for full details.
3. How We Use Your Information
We use the information we collect to:
- Respond to project inquiries and contact form submissions.
- Provide, maintain, and improve the Site and our services.
- Authenticate users and manage client dashboard access.
- Process payments and send transactional confirmations.
- Analyse site usage to understand what content is most valuable and to improve user experience.
- Detect, investigate, and prevent fraudulent transactions and other illegal activities.
- Comply with applicable laws and legal obligations.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
5. Third-Party Services
We use the following third-party services that may process your data. Each is governed by its own privacy policy.
| Service | Purpose | Policy |
|---|---|---|
| Google Analytics | Website usage analytics | Google Privacy Policy |
| Vercel | Site hosting & deployment | Vercel Privacy Policy |
| Cloudflare | CDN, DDoS protection & DNS | Cloudflare Privacy Policy |
| Supabase | Authentication & database | Supabase Privacy Policy |
| Stripe | Payment processing | Stripe Privacy Policy |
| Resend | Transactional email delivery | Resend Privacy Policy |
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy:
- Contact form submissions — Retained for up to 3 years for business and correspondence records, then deleted.
- Account data — Retained for the lifetime of your account. If you request deletion, we will remove your account and associated data within 30 days.
- Analytics data — Retained in Google Analytics for 14 months per our GA4 data retention settings.
- Server logs — Retained by Vercel and Cloudflare per their own retention policies (typically 30–90 days).
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Correction — Ask us to correct inaccurate or incomplete data.
- Deletion — Request that we delete your personal data. We will comply within 30 days, subject to any legal obligations to retain it.
- Restriction — Ask us to restrict processing of your data in certain circumstances.
- Objection — Object to processing based on legitimate interests.
- Portability — Request your data in a machine-readable format.
To exercise any of these rights, email us at abhipatel8675@gmail.com with the subject line “Privacy Request.” We will respond within 30 days.
8. Children's Privacy
The Site is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Site after changes are posted constitutes your acceptance of the updated policy. For material changes, we will make reasonable efforts to notify users directly (e.g., via email or a notice on the Site).
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: