Privacy Policy

1. Who We Are

2. Scope of This Policy

This Privacy Policy applies to personal data we process:

• when you visit our website;
• when you register for or use DevAI Suite;
• when you request a demo, trial, or support;
• when you communicate with us by email, forms, or other channels;
• when we send product, service, or marketing communications.

3. Our Role

Depending on the context, DevAI may act as:

• a controller of personal data for website operations, account creation, billing, authentication, support, marketing, compliance, and security; and
• a processor or similar service provider when we process customer workspace data on behalf of a business customer under that customer's instructions.

If you use DevAI Suite through your employer or organization, that organization may control certain workspace data and administrative settings.

The controller/processor distinction and cross-border transfer issues reflected here follow current EU/UK data protection guidance and standard transfer practice.

4. Personal Data We Collect

We may collect the following categories of personal data:

Account and contact information

• name
• company name
• job title
• email address
• phone number
• account credentials or authentication metadata

Commercial and billing information

• subscription plan
• transaction identifiers
• billing contact details
• payment-related metadata from payment processors

Technical and usage information

• IP address
• browser type
• device identifiers
• operating system
• access logs
• session data
• diagnostic and performance information

Support and communications data

• email correspondence
• support tickets
• meeting notes
• feature requests
• chat messages
• survey responses

Customer-provided content

• prompts
• uploaded files
• documents
• project records
• operational or workflow data
• data included in integrations or imported systems

Marketing and preference data

• newsletter subscriptions
• event registrations
• communication preferences
• cookie preferences

5. Sources of Personal Data

We collect personal data:

• directly from you;
• from your organization or workspace administrator;
• automatically through the Service and website;
• from payment processors and service providers;
• from integrations you enable;
• from publicly available or lawful business sources where relevant for sales or partnership activity.

6. How We Use Personal Data

We use personal data to:

• provide, operate, and maintain the Service;
• authenticate users and manage accounts;
• process subscriptions and payments;
• provide customer support;
• secure the Service and investigate abuse, fraud, or incidents;
• improve performance, usability, and product quality;
• communicate with you about the Service;
• comply with law and enforce our legal rights;
• send marketing communications where permitted by law.

7. Legal Bases for EEA and UK Users

Where EEA or UK data protection law applies, we process personal data under one or more of the following legal bases:

• performance of a contract;
• legitimate interests, such as security, service administration, fraud prevention, and product improvement;
• consent, where required;
• compliance with legal obligations;
• establishment, exercise, or defense of legal claims.

8. AI Processing

DevAI may use artificial intelligence-enabled functionality to process prompts, files, and workflow data submitted through the Service in order to generate responses, summaries, analyses, drafts, classifications, and related outputs requested by users.

We do not use Customer Data to train general-purpose models for unrelated customers unless we expressly state otherwise and obtain any permissions required by applicable law or contract.

Human review may occur on a limited basis for support, security, abuse prevention, troubleshooting, or legal compliance.

9. Sharing of Personal Data

We may disclose personal data to:

• cloud hosting and infrastructure providers;
• authentication and identity providers;
• payment processors;
• support, CRM, and communications vendors;
• analytics and monitoring providers;
• subprocessors engaged to deliver the Service;
• professional advisers, auditors, insurers, and legal counsel;
• regulators, law enforcement, or courts when required by law or to protect rights, safety, and security;
• a buyer or successor in a merger, acquisition, financing, reorganization, or asset sale.

We do not sell personal data in the ordinary meaning of that term.

10. International Data Transfers

DevAI is based in the United States and may process or store personal data in the United States and other countries where we or our service providers operate.

Where required by applicable law, we use appropriate safeguards for cross-border transfers, such as contractual protections or other lawful transfer mechanisms.

Current EU and UK transfer practice still relies on SCC-based or equivalent safeguards where applicable.

11. Data Retention

We retain personal data for as long as reasonably necessary to:

• provide the Service;
• maintain business and financial records;
• resolve disputes;
• enforce agreements;
• meet security and legal obligations.

Retention periods vary depending on the type of data, the nature of the relationship, legal obligations, and operational needs. We may retain de-identified or aggregated information for longer where permitted by law.

12. Security

We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Your Rights

Depending on your location and applicable law, you may have rights to:

• access your personal data;
• correct inaccurate personal data;
• delete personal data;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request portability of certain personal data;
• lodge a complaint with a supervisory or regulatory authority.

Where we process personal data on behalf of a customer, we may direct your request to the relevant customer as appropriate.

14. Region-Specific Information

EEA and UK

If EEA or UK law applies, you may have rights under applicable data protection law, including the right to access, rectify, erase, restrict, object, and request portability, subject to legal limitations. Requests are typically handled without undue delay and within one month, subject to lawful extensions where permitted.

Switzerland

If Swiss data protection law applies, you may request access, correction, or deletion of your personal data in accordance with applicable Swiss law. Swiss guidance states that access information should generally be provided within 30 days.

California and Other U.S. State Privacy Laws

If and when applicable U.S. state privacy laws apply to DevAI, we will honor rights requests in accordance with those laws and update this Privacy Policy as needed. At this time, DevAI is an early-stage business and does not currently publish a separate California-specific notice based on your stated assumptions. California's public threshold tests and consumer-request response windows are set by state authorities and can be added later if your business profile changes.

15. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy.

16. Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal data from children under 16 for consumer use. If you believe a child has provided personal data to us in violation of applicable law, please contact us.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version and revise the "Last Updated" date.

18. Contact Us

For privacy questions or requests, contact:

info@devaisuite.com

or write to: