Privacy Policy

1. Information We Collect

Information you provide directly

• Contact form submissions — name, email address, phone number, and message content when you reach out to us.
• Account registration — name, email address, and password when you create an Aumfig account.
• Google Sign-In — if you choose to sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service.

Information collected automatically

• Usage data — pages visited, time spent, browser type, device type, and referring URL.
• Authentication tokens — a secure JWT token stored in an HttpOnly cookie to keep you logged in.

2. How We Use Your Information

• To respond to your enquiries and provide customer support.
• To create and manage your account on our platform.
• To improve our website, services, and user experience.
• To send transactional emails (e.g., account confirmations, project updates).
• To comply with legal obligations.

We do not sell, rent, or trade your personal information to any third party.

3. Cookies & Local Storage

We use a single HttpOnly cookie (aumfig_token) to authenticate your session. This cookie:

• Is set only when you log in.
• Cannot be accessed by JavaScript (HttpOnly flag).
• Expires automatically after 7 days.
• Is cleared immediately when you log out.

We do not use advertising cookies or third-party tracking cookies.

4. Data Storage & Security

Your data is stored on secure servers hosted via Hostinger. We implement industry-standard security measures including:

• Password hashing using bcrypt before storage — we never store plain-text passwords.
• HTTPS encryption for all data in transit.
• JWT-based authentication with server-side secret keys.
• Access restricted to authorised personnel only.

While we take all reasonable measures to protect your data, no system is 100% immune to security risks. We will notify you promptly if a breach affects your information.

5. Third-Party Services

We use the following third-party services which may process your data under their own privacy policies:

• Google OAuth — for social login (optional). Google Privacy Policy →
• Google Fonts — for typography, loaded from Google's CDN.
• Hostinger — for server hosting and infrastructure.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent at any time for data processing activities based on consent.

To exercise any of these rights, email us at support@aumfig.com.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Contact form submissions are retained for up to 12 months. You may request deletion at any time by contacting us.

8. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out: