Privacy Policy

1. Information We Collect

We collect information necessary to provide our secure asset delivery service. This includes:

• Account Information: Name, email address, and password hash when you create an account.
• Payment Information: Processed securely via Stripe. We never store credit card numbers directly.
• Technical Logs: IP addresses, user agents, referrer headers, and timestamps for every asset request. These are essential for our security enforcement.
• Steganographic Data: Our invisible watermarking embeds unique session identifiers in pixel streams to identify authorized viewers.

2. How We Use Information

• To decrypt and stream requested assets to verified domains.
• To enforce geolocation and domain-locking restrictions.
• To detect and block automated scraping attempts.
• To generate usage reports and analytics for your dashboard.
• To embed forensic watermarks for ownership verification.
• To process payments and manage subscriptions.

3. Data Security

We employ military-grade encryption (AES-256-CBC) for all stored assets. Encryption keys are rotated daily. All data in transit is protected by TLS 1.3. Our infrastructure runs on Cloudflare's global edge network with DDoS protection.

We do not sell, rent, or share your data with third parties. We are a security-first company and treat your data with the same level of protection we provide for your images.

4. Data Retention

Account data is retained for the duration of your subscription plus 30 days after cancellation. Audit logs are retained for 90 days (Pro) or 1 year (Enterprise). You may request deletion of your data at any time.

5. GDPR Compliance

aFFirmFirst is fully compliant with the UK GDPR and EU GDPR. You have the right to access, rectify, port, and erase your personal data. To exercise these rights, contact our Data Protection Officer.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics are processed server-side without client-side trackers.

7. Contact Us

For any privacy concerns, please contact our Data Protection Officer at privacy@affirmfirst.com or write to: aFFIRMfirst, Cheshire, United Kingdom.