Privacy Policy

Attenomy ("Attenomy," "we," "us," or "our") is committed to the highest standards of data governance, security, and privacy protection. This Privacy Policy governs the collection, processing, transfer, storage, and safeguarding of personal and technical data obtained through attenomy.com, our software platforms, AI automation systems, APIs, client consulting engagements, and related digital properties (collectively, the "Services").

This Policy applies globally to all visitors, clients, enterprise partners, end-users, and individuals who access our Services. We adhere to applicable global privacy regulations, including the Digital Personal Data Protection Act, 2023 (India DPDPA), the General Data Protection Regulation (EU & UK GDPR), and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

We collect personal and technical information in four primary categories:

• Directly Provided Information: Names, corporate email addresses, phone numbers, job titles, company names, billing information, consultation questionnaires, and communication content submitted via contact forms, inquiries, or service onboarding.
• Automated Telemetry & Device Data: Internet Protocol (IP) addresses, device architecture, operating system versions, browser engine details, screen resolutions, language preferences, referring URLs, timestamps, page response times, and clickstream paths.
• Pseudonymous Identifier & Analytics Data: Google Analytics client identifiers (e.g., _ga cookie values), session tokens, event telemetry, scroll depth, conversion tracking signals, and engagement duration.
• Enterprise Project & Operational Data: API configurations, workflow schemas, database connections, and technical requirements provided under non-disclosure and consulting agreements.

We do not intentionally solicit or process sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, genetic information, or health data) through public web interfaces.

Our website utilizes Google Analytics 4 (GA4), an enterprise web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), under Measurement ID G-QWHZNJYPLW and Google Tag Manager infrastructure.

In compliance with the European Economic Area (EEA), UK GDPR, and Google's EU User Consent Policy, Attenomy implements Google Consent Mode v2. Our architecture dynamically controls tag execution based on user consent signals across four distinct parameters:

• analytics_storage: Controls whether cookies related to analytics (e.g. visit duration, page flow) can be written and read.
• ad_storage: Controls whether cookies related to advertising can be written or read on the visitor's device.
• ad_user_data: Controls whether personal user data can be sent to Google for online advertising purposes.
• ad_personalization: Controls whether data can be used for personalized advertising and remarketing campaigns.

For visitors within the EEA/UK, advertising and personalization storage defaults to a restricted state (denied) until explicit user affirmative action is registered, ensuring full adherence to the ePrivacy Directive and GDPR Article 6.

Attenomy displays advertisements served by Google AdSense (Publisher Account: ca-pub-9596215709723960) and third-party advertising partners.

• Third-party vendors, including Google, use cookies and web beacons to serve ads based on prior visits to our website or other websites across the Internet.
• Google's use of advertising cookies (such as DoubleClick / IDE cookies) enables it and its partners to serve ads to users based on their navigation history.
• Users may opt out of personalized advertising by visiting Google's Ads Settings at https://adssettings.google.com or via www.aboutads.info.
• Non-personalized ads served to EEA users do not use cookies for ad personalization but may utilize essential cookies for frequency capping, aggregated ad reporting, and fraud prevention.

Under Article 6 of the General Data Protection Regulation (GDPR) and international privacy frameworks, we process personal data under the following lawful bases:

• To engineer, operate, maintain, and upgrade our SaaS platforms, software solutions, and website infrastructure.
• To facilitate enterprise client consultations, technical discovery sessions, and project management deliverables.
• To process billing transactions, generate invoices, and fulfill accounting requirements.
• To monitor real-time network health, conduct DDoS mitigation, and protect against security breaches.
• To analyze aggregated traffic telemetry and user engagement to optimize interface designs and feature sets.
• To send operational notifications, security advisories, and administrative updates regarding our Services.

We do not sell, rent, monetize, or lease your personal or enterprise data to data brokers. Data is shared strictly under the following controlled conditions:

• Authorized Cloud & Infrastructure Sub-processors: Hosting providers (e.g. Vercel, AWS), email deliverability gateways (Resend), database providers, and security firewalls bound by strict Data Processing Agreements (DPAs).
• Analytics & Measurement Partners: Google LLC / Google Ireland Limited for aggregated web telemetry and ad delivery under standard contractual safeguards.
• Legal & Regulatory Compulsion: When mandatory under binding court orders, search warrants, statutory regulations, or to prevent immediate physical harm or defend against legal claims.
• Corporate Restructuring: In connection with a merger, divestiture, acquisition, or sale of assets, where the successor entity is legally bound to honor this Privacy Policy.

Attenomy implements defense-in-depth technical, physical, and organizational security controls to protect information assets:

• Cryptographic Protection: Data in transit is enforced over TLS 1.3 encryption; data at rest is secured using industry-standard AES-256 encryption.
• Strict AI Isolation Guarantee: Proprietary client workflows, source code, data payloads, and prompt inputs are strictly isolated per enterprise tenant and are NEVER used to train foundational public LLM models.
• Access Control & Governance: Principle of Least Privilege (PoLP), mandatory Multi-Factor Authentication (MFA), and automated audit trails for all administrative systems.

While we maintain rigorous enterprise safeguards, no method of transmission over the Internet or electronic storage is completely impenetrable. Users transmit information to us acknowledging this inherent network reality.

Personal data is retained only for the duration necessary to accomplish the purposes described in this policy, unless an extended retention period is mandated by law (e.g., tax, audit, legal compliance).

Attenomy is headquartered in India with global edge network infrastructure. By accessing our Services, your data may be transferred to, processed, and stored in jurisdictions outside your country of residence, including India, the United States, and the European Union.

Where international transfers occur from the EEA, UK, or Switzerland, we ensure adequate cross-border data transfer mechanisms, including the European Commission Standard Contractual Clauses (SCCs), UK International Data Transfer Addendum, and equivalent contractual commitments with sub-processors.

Depending on your location, you hold statutory rights under applicable privacy legislation:

You have multiple direct technical mechanisms to opt out of tracking and analytics:

• Google Analytics Opt-Out Browser Add-on: You can prevent Google Analytics from collecting telemetry across all websites by downloading and installing the official browser extension from tools.google.com/dlpage/gaoptout.
• Global Privacy Control (GPC): Our systems honor browser-enabled Global Privacy Control signals as a valid opt-out request under CCPA/CPRA where technically received.
• Industry Advertising Opt-Out Portals: You may opt out of participating behavioral ad networks via the Digital Advertising Alliance (aboutads.info/choices), Network Advertising Initiative (optout.networkadvertising.org), or European Interactive Digital Advertising Alliance (youronlinechoices.eu).

Attenomy Services are strictly directed toward businesses, professionals, and adults aged 18 and older. We do not knowingly solicit, collect, or process personal data from children under the age of 18 (or under 16/13 as defined by regional jurisdiction). If you suspect a minor has provided personal information to our systems, please notify us immediately at legal@attenomy.com, and we will take immediate steps to permanently delete the corresponding records.

Attenomy reserves the right to revise, amend, or update this Privacy Policy at any time to reflect updates in operational practices, technology, or legal mandates. Any revisions will take effect immediately upon posting with an updated "Last Updated" revision date. Continued engagement with our Services following updates constitutes affirmative acknowledgement and acceptance of the modified Privacy Policy.

To exercise any statutory privacy rights (DSAR), submit compliance inquiries, or file a grievance under the India DPDP Act 2023 or GDPR, please contact our designated Privacy Office: