Clear, honest data practices.

1. Information We Collect & External Tools

At Assam Labs, we believe in minimizing data collection to only what is strictly necessary to deliver our services effectively and securely. We collect information through the following channels:

• Information You Provide Directly: When you fill out a contact form, submit a project inquiry, apply for a job, or communicate with us via email, we collect personal identifiers such as your name, email address, phone number, and project/company details.
• Spam & Bot Protection (Cloudflare Turnstile): To protect our website and interactive forms from automated spam, brute-force attacks, and abusive bot traffic, we utilize Cloudflare Turnstile. This service verifies legitimate device interaction by processing limited technical parameters (such as browser headers, timestamps, and anonymized network signals) without tracking you across external websites.
• Anonymized Site Analytics (Google Analytics): To understand overall website performance and improve user experience, we use Google Analytics. We measure aggregate metrics such as page views, referring domains, and general device types. We ensure IP addresses are anonymized or masked, and we do not use tracking pixels that build invasive personal profiles across the web.
• Privacy-Focused Site Analytics (Self-Hosted Umami): We use a self-hosted instance of Umami Analytics to understand how visitors use our website and improve its content, performance, and user experience. Umami does not use cookies for analytics or track visitors across different websites. It collects anonymized usage information such as page views, referring URLs, browser type, operating system, device type, approximate geographic location, and session activity. Analytics data is processed through our self-hosted instance and stored on infrastructure operated and controlled by us. We do not intentionally use this information to identify individual visitors or build personal profiles.

2. How We Use Your Information

The personal information we collect is used solely for legitimate business purposes directly related to your interactions with us:

• To evaluate and respond to your inquiries, proposals, or project applications.
• To deliver contracted services and manage our professional relationship.
• To maintain the technical integrity, security, and performance of our website.

We do not use your information for automated profiling, nor do we enroll you in unsolicited marketing newsletters without your explicit, opt-in consent.

3. Strict Commitment Against Third-Party Selling

Your data remains strictly safeguarded. The only external entities that process data on our behalf are:

• Infrastructure & Service Providers: Trusted enterprise vendors (such as cloud hosting, our database management via Payload CMS, and our security/analytics tools named above) who process minimal data strictly under binding data processing agreements (DPAs).
• Legal Compliance: If strictly required by valid legal process, applicable law, or binding judicial order.

4. Data Security & Retention

We are committed to protecting our clients and site users. We implement robust, industry-standard administrative, technical, and physical security measures to protect your personal data from unauthorized access, loss, alteration, or disclosure. All web traffic is encrypted via HTTPS/TLS.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with mandatory legal, fiscal, and accounting obligations.

5. Your Data Protection Rights

Depending on your jurisdiction, you hold specific rights regarding your personal data under global privacy regulations (such as GDPR, UK-GDPR, or CCPA). You have the right to:

• Request a copy of the personal information we hold about you.
• Request correction of any inaccurate or incomplete data.
• Request permanent deletion of your personal data from our systems.
• Withdraw consent or object to specific data processing activities.