Legal

Privacy Policy

Effective 24 October 2026.

Who we are

CAMF Solutions Inc. runs this site and is the data controller for the personal data it processes. We are based in the United States (Wyoming). For any privacy question, write to info@camfsolutions.com.

What this policy covers

https://camfsolutions.com only. Other products we run (such as CAMF App) have their own policies.

What we collect

What you give us. Anything you type into the contact, quote, checkout or Drupal-audit forms. Typically: name, email, company, phone, contact preference, your message, plus budget, timeline and selected services where the form asks for them.

What we collect automatically. Our hosting provider keeps standard access logs (IP, user agent, request path, timestamp). The cookies listed below. Unless you opt out of analytics, aggregated information about how you use the site (pages viewed, links clicked, device type).

Live chat. If you open the chat widget, the conversation and basic visitor metadata pass through our chat provider so we can reply.

Site analysis

When you ask us to analyse a website (for example before starting a Drupal Support plan), you confirm that you own the site or are authorised by its owner. We then load its public home page and, where useful, a few other public pages (such as its change log and login page), take a screenshot of the first screen, and identify its platform and version. We never submit forms, log in, or probe administrative pages, and nothing on the site is changed.

We keep the result (platform, version, the evidence behind it) and reuse it for up to seven days if anyone asks about the same site again. Screenshots are deleted after 30 days. With each request we record the consent you gave, a one-way hash of your IP address (never the address itself) used only to limit abuse, your browser's user agent and your language. To tell people from bots we use Cloudflare Turnstile, which processes your IP address and browser signals for that purpose.

Base: our legitimate interest in preparing the service you asked for, and your declaration that the site is yours to have analysed.

Profile autofill

When you start a landing page from your Instagram or TikTok profile, you confirm that the account is your business's or that you are authorised to use it. We then read its public profile only: name, bio, profile photo, link, follower count and the captions of a few recent posts. We never log in, follow, like, message or post anything.

The reading is done for us by Apify (Apify Technologies s.r.o., Czech Republic). The bio, captions and photo are then sent to an AI model through OpenRouter (OpenRouter, Inc., United States) to draft your brief. We keep the profile details and the draft, and reuse them for up to 24 hours if anyone asks about the same profile again. With each request we also record your consent, a one-way hash of your IP address, your browser's user agent and your language, as described under Site analysis. If you order, what you kept in the form becomes part of your order.

Base: our legitimate interest in preparing the service you asked for, and your declaration that the account is yours to have read.

Agreeing to our terms

When you order a service, we record which versions of our Terms of Service and plan conditions you accepted and when, together with a one-way hash of your IP address (never the address itself), your browser's user agent and your language. We keep this so we can show what was agreed if a question about the order ever comes up.

Base: performing our contract with you, and our legitimate interest in being able to prove its terms.

How we use it

• To reply to you, send quotes and deliver work. Basis: performance of a contract or pre-contractual steps you asked for.
• To keep the site running and stop spam on the forms. Basis: our legitimate interest in running a working, secure site.
• To measure aggregate site usage. Basis: our legitimate interest in understanding how the site is used. Opt out any time via Cookie preferences in the footer; we also honour Global Privacy Control signals.
• To keep tax and accounting records once an enquiry becomes a customer. Basis: legal obligation.

Who else sees it

Only the service providers we hire to run the site, acting on our instructions:

• A cloud hosting and email-delivery provider in the United States. Hosts the site and receives form submissions.
• An analytics provider in the United States. Unless you opt out of analytics.
• An anti-spam provider owned by a US company. Scores form submissions to block automated abuse.
• A live-chat provider. Only if you open the chat.

We do not sell personal data, and we do not share it for anyone else's marketing.

Where it goes

Several of the providers above operate from the United States. When personal data leaves the European Economic Area we rely on the European Commission's Standard Contractual Clauses (and adequacy decisions where they apply). Email us if you want a copy of the safeguards.

How long we keep it

• Form submissions and the correspondence around them: as long as we need to handle your request. If you become a customer, plus the periods Italian tax and commercial law require (roughly ten years for accounting records).
• Records of the terms you accepted at checkout: for as long as your subscription runs, plus three years after it ends.
• Analytics: held by our analytics provider per its default retention. Opting out stops further collection; email us to have past data deleted.
• Cookies: see below.

Cookies and similar storage

• Always on: the cookie that stores your consent choices, session storage that remembers a draft service selection while you browse, and security cookies set by the anti-spam provider.
• On unless you opt out: analytics cookies. A Global Privacy Control signal from your browser counts as opting out.
• Off by default: live-chat cookies (only if you open the widget).

Manage your choices any time through Cookie preferences in the footer.

Your rights

Under US privacy law, including the CCPA / CPRA where it applies you can ask us to:

• show you the data we hold on you,
• correct it,
• delete it,
• restrict or object to how we use it,
• give it back to you in a portable form,
• withdraw a consent you gave earlier (without undoing what we already did with it).

Write to info@camfsolutions.com and we'll handle it.

Complaints

If you think we've handled your data wrongly, you can complain to the California Privacy Protection Agency, or your state attorney general: https://cppa.ca.gov/.

Children

This site isn't aimed at children under 16, and we don't knowingly collect their data.

Updates

If we change this policy, the effective date above changes too. If the change is significant we'll ask for your cookie consent again.

Last updated: 2026-10-24.