Privacy notice

This site runs no analytics, no advertising pixels and no session recording, and it sets no cookies of its own. If you do not contact us, we do not hold anything about you beyond ordinary server logs.

If you do contact us, we keep what you sent so we can reply, and we use it for nothing else. There is no mailing list, because we do not run one.

UVAMAI Technology Services operates this site and decides how the personal data described here is handled. In data protection terms we are the controller for that data.

For anything in this notice, including a request to see or delete your data, write to hello@uvam.ai. A person reads that address.

Nothing that identifies you is collected by the pages themselves. Every page is static HTML built ahead of time, there are no third-party scripts, and the typefaces are served from our own domain rather than a font network.

Our web server and reverse proxy keep ordinary technical logs of requests: the IP address the request came from, the time, the path requested, the response status, the user agent string and the referring page. These exist so we can keep the service running and investigate abuse. We do not use them to build a profile of you and we do not combine them with anything else.

Your theme and high-contrast preferences are stored in your browser's local storage under the keys uv-theme and uv-contrast. That is on your device, it never reaches us, and clearing your browser storage removes it.

The contact form asks for your name, your email address, the topic of your enquiry and your message. Organisation is optional. We store exactly those fields, plus the time we received them and a reference number.

We also apply a rate limit based on your IP address so that automated submissions cannot flood the form. That check happens in memory and the address is not written to the stored enquiry.

If you email or call us instead, we hold whatever you chose to tell us in that message, for the same reasons and the same length of time.

For enquiries, we rely on your consent, which you give by ticking the box on the form, and on our legitimate interest in responding to someone who has asked us a question. You can withdraw consent at any time and we will delete the enquiry.

For server logs, we rely on our legitimate interest in operating the service securely and diagnosing faults. The interest is narrow, the data is technical, and the retention is short.

Enquiries are kept for 24 months from the date of your last contact with us, then deleted. If an enquiry becomes a client relationship, the records that belong to that relationship are governed by our contract with you rather than by this notice.

Server and proxy logs are kept for 30 days and then rotated out, except where a specific entry is being retained as part of investigating a security incident.

Ask us to delete something sooner and we will, unless we are required to keep it.

We do not sell personal data, we do not share it for advertising, and we do not pass it to data brokers. There is no third-party form service between you and us — the contact form posts to our own application.

Two categories of provider are unavoidably involved: the infrastructure provider that operates the server this site runs on, and the email provider that carries our correspondence. They process data on our instructions in order to provide those services and for no purpose of their own. We will name them on request.

We may disclose data where we are legally required to. If that happens and we are permitted to tell you, we will.

The site and its data are hosted on infrastructure we operate ourselves rather than on a third-party platform. Our team works across Australia and India, so an enquiry may be read by a colleague in a different country from the one you sent it from.

Where personal data moves between countries, we rely on the safeguards required by the applicable data protection law for that transfer.

Depending on where you live, you may have some or all of the following rights. We apply them to everyone who asks rather than checking your jurisdiction first, because the alternative is deciding who deserves them.

• Ask what we hold about you, and get a copy of it.
• Have something corrected if it is wrong.
• Have it deleted.
• Ask us to stop using it, or to restrict how we use it, while a question about it is resolved.
• Object to our processing where we have relied on legitimate interest.
• Withdraw consent you previously gave, without that affecting anything done before you withdrew it.
• Complain to your data protection regulator if you think we have got this wrong. We would rather you told us first, but it is your call.

Email hello@uvam.ai and say what you want. We will respond within 30 days, and usually a great deal sooner.

We may ask you to confirm that you are the person the data is about — not to obstruct you, but because handing someone's enquiry history to whoever asks for it is its own privacy failure. We will not charge you for this.

How this site is built, deployed and hardened is described in full on our trust page, including the parts we have not certified and the limits we know about. It is deliberately more specific than the sentence a privacy notice usually offers here.

No system is perfect. If you find a weakness in ours, the reporting route and what we commit to in return are also on that page.

This is a business site and it is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.

When this notice changes, the effective date at the top changes with it. The site's full revision history is public, so you can see exactly what changed and when rather than taking our word for it.

If a change materially affects how we handle enquiries we already hold, we will contact the people affected rather than relying on you to re-read this page.