Privacy Policy

Last updated: August 3, 2026

1. Introduction

DevX ("we," "our," or "us"), operating the website at devx.cloud, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or contact us about our services.

This policy is a notice of our practices. It does not create contractual rights beyond those required by applicable law. Use of the website is also subject to our Terms of Service. Cookie details are in our Cookie Policy.

Separate products (for example, the NxtFlow application) may have their own privacy policies that apply instead of or in addition to this one.

2. Who We Are

DevX is based in the Commonwealth of Virginia, United States. For privacy requests and questions, contact privacy@devx.cloud. For general business inquiries, use info@devx.cloud.

3. Information We Collect

Our website is a static informational site. We do not operate public user accounts on the website, and we do not run first-party advertising or analytics cookies.

3.1 Information You Choose to Send Us

If you contact us (for example via email to info@devx.cloud, or by using the contact form that opens your own email client with a pre-filled message), we receive whatever information you include. That typically includes:

Name
Email address
Subject and message content
Any business or project details you choose to share

The contact form does not submit data to our servers; it opens your mail application so you can send the message. We only process that information after you send the email.

If you engage us as a client, we may also receive information you provide under a service agreement (for example contact details, company information, and project materials). That engagement data is handled under the service agreement and this policy as applicable.

3.2 Technical and Security Data

When you visit the website, our hosting and security provider (Cloudflare) may automatically process technical data needed to deliver and protect the site. That may include IP address, approximate location derived from IP, browser and device type, request URL, referrer, timestamps, and security-related signals. We do not use this data to build marketing profiles.

3.3 Cookies and Similar Technologies

We currently use only strictly necessary cookies set by our hosting and security provider, as described in our Cookie Policy. We do not set advertising, analytics, or social-media tracking cookies of our own. If that changes, we will update this policy and the Cookie Policy.

4. How We Use Your Information

We use the information described above to:

Operate, secure, and maintain the website
Respond to inquiries and communicate with you about potential or ongoing work
Provide professional services under a service agreement
Protect against abuse, fraud, and security threats
Comply with legal obligations and enforce our terms
Keep internal records for administration and quality

We do not sell your personal information. We do not use website data for third-party advertising. If we ever send marketing emails, we will do so only where permitted by law and provide a way to opt out.

5. Legal Bases (Where Applicable)

If data protection laws that require a legal basis apply to you (for example GDPR in the EEA/UK), we process personal data on one or more of these bases:

Legitimate interests: operating and securing the website, responding to business inquiries, and improving our services in ways that do not override your rights
Contract: performing a service agreement or taking steps at your request before entering one
Legal obligation: complying with applicable law
Consent: where we ask for it and rely on it (for example certain optional communications)

6. Disclosure of Your Information

We may share information in these situations:

Service providers: We use third parties to host and secure the website (currently Cloudflare) and to operate business email. They process data on our behalf to provide those services.
Professional advisors: Lawyers, accountants, or similar advisors when needed for legitimate business purposes under confidentiality obligations.
Business transfers: In connection with a merger, sale of assets, financing, or acquisition, subject to appropriate safeguards.
Legal requirements: When required by law, regulation, legal process, or to protect rights, safety, and security.
With your direction: When you ask us to share information or consent to a specific disclosure.

7. International Transfers

DevX is based in the United States. The website is delivered through Cloudflare's global network, so technical data may be processed in the United States and other countries where Cloudflare or our email provider operate. If you contact us from outside the United States, your message will be received and processed in the United States. Where required, we rely on appropriate safeguards or legal mechanisms for cross-border transfers.

8. Data Retention

We keep information only as long as needed for the purposes above:

Inquiry emails: typically for up to 24 months after the last meaningful contact, unless a longer period is needed for an ongoing relationship or legal reasons
Client engagement records: for the duration of the engagement and thereafter as required by the service agreement, tax, accounting, or legal retention rules
Security and hosting logs: according to our providers' standard retention and our security needs (often short-lived)

When retention is no longer necessary, we delete or de-identify the information where reasonably practicable.

9. Data Security

We implement appropriate technical and organizational measures to protect personal information, including reliance on reputable hosting and security infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal data we hold about you, and to withdraw consent where processing is based on consent.

To exercise these rights, email privacy@devx.cloud with "Privacy Request" in the subject line and enough detail for us to locate your information (for example the email address you used to contact us). We may need to verify your identity before responding. We will respond within the time required by applicable law (generally within 30 days where GDPR applies, or within the timeframes required under California law).

You may also have the right to lodge a complaint with a supervisory authority in your country or state of residence.

11. California Privacy Notice (CCPA/CPRA)

If you are a California resident, California law may provide additional rights regarding personal information. In the last 12 months, for the website and ordinary business inquiries, the categories of personal information we may have collected include identifiers (such as name and email), commercial or project-related information you send us, and internet/technical activity data processed by our hosting provider.

We collect this information for the business purposes described in this policy (including providing services, security, and responding to requests). We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA, based on our current practices.

California residents may request to know, access, correct, or delete personal information, and to not be discriminated against for exercising these rights. Submit requests to privacy@devx.cloud. You may use an authorized agent as permitted by law; we may require proof of authorization.

12. European and UK Privacy Rights (GDPR)

If you are in the European Economic Area, United Kingdom, or a similar jurisdiction, you may have the rights described in Section 10, including access, rectification, erasure, restriction, objection, and data portability, subject to legal limits. Our legal bases are described in Section 5. For questions about transfers or to exercise rights, contact privacy@devx.cloud. You may complain to your local data protection authority.

13. Children's Privacy

The website and our services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact privacy@devx.cloud and we will take reasonable steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes will be reflected in the updated policy; please review this page periodically.

15. Contact Us

Privacy questions and requests:

Email: privacy@devx.cloud
General: info@devx.cloud
Location: Commonwealth of Virginia, United States