Comprehensive Privacy Policy

1. Categories of Information We Collect

In operating our enterprise referral and lead-generation platform, we collect both personal information directly provided by you and technical data automatically transmitted by your device or network browser:

1.1 Information You Voluntarily Provide

• Contact Identifiers: Full legal name, professional email address, telephone number, business job title, and physical corporate address.
• Business & Technical Project Data: Target industry vertical (e.g., Legal Tech, Fintech, Healthcare, Manufacturing, Logistics), estimated project budget range, desired timeline, technical stack requirements, legacy architecture parameters, and strategic goals.
• Communication Records: Transcripts of inquiry form submissions, email correspondence, scheduling requests, custom note attachments, and calendar booking details.

1.2 Information Automatically Collected

• Device & Telemetry Data: IP address, operating system, browser type, language preferences, device model, and network ISP information.
• Analytics & Usage Behavior: Clickstream sequences, time spent on landing pages, scroll depth, referrer URLs, Google Ads/PPC campaign parameters (UTM tags), and conversion telemetry.
• Cookies & Local Storage: Session cookies, local storage keys, and security tokens utilized for form state retention and spam prevention.

2. Lawful Basis and Purposes of Data Processing

We process your personal information strictly under legitimate business interests, contractual obligations, and statutory requirements:

1. Facilitating Partner Matches: Evaluating submitted project requirements to identify, match, and introduce your business to qualified, independent third-party development providers ("Development Partners").
2. Service Delivery & Operational Communications: Sending automated email submission receipts, scheduling calendar invites, project audit confirmations, and administrative updates via transaction services (such as Brevo).
3. Platform Optimization & Analytics: Analyzing campaign performance, measuring traffic quality, preventing fraudulent form submissions, and refining conversion interfaces.
4. Legal & Regulatory Compliance: Fulfilling record-keeping mandates, responding to legal subpoenas, defending against potential disputes, and enforcing our Terms of Service.

3. Information Sharing, Disclosure & Third-Party Transfers

Because DevEngine functions as a specialized referral network platform, sharing project data with external partners is fundamental to our core service:

3.1 Referral Network Sharing

When you submit an inquiry form or schedule a consultation, you explicitly authorize DevEngine to disclose your submitted contact information, company details, and project specifications to selected Development Partners within our vetted network to facilitate direct introductory discussions and project proposals.

3.2 Service Providers & Infrastructure Vendors

We share data with trusted third-party service providers who assist in operating our technical infrastructure, subject to strict confidentiality agreements:

• Hosting & Cloud Compute: Linode/Akamai, Vercel, or AWS server infrastructure.
• Email & Messaging Automation: Brevo (formerly Sendinblue) for transaction and confirmation emails.
• Analytics & Performance Telemetry: Google Analytics and privacy-compliant event loggers.

3.3 No Data Sale Guarantee

DevEngine does not sell, rent, trade, or monetize your personal data to unaffiliated third-party data brokers or marketing list aggregators.

4. Data Security, Storage & Encryption Standards

We employ industry-standard technical, administrative, and organizational safety controls to safeguard your data against accidental loss, unauthorized access, unauthorized alteration, or unlawful disclosure:

• Encryption: All web traffic is encrypted in transit using Transport Layer Security (TLS 1.3/HTTPS). Data at rest is encrypted using AES-256 standard encryption algorithms.
• Access Controls: Access to submitted lead records is strictly restricted to authorized DevEngine administrators via multi-factor authenticated management interfaces.
• Vulnerability Management: Periodic vulnerability scans and dependency updates are conducted across our Nuxt/Nitro server deployment stack.

5. Data Retention & Deletion Schedule

We retain personal data only for as long as necessary to fulfill the operational purposes described in this Privacy Policy. Specifically:

• Inquiry & Match Records: Retained for a period of up to 36 months following submission to support audit trails, referral reconciliation, and ongoing customer support.
• Analytics Logs: Aggregated, non-identifying telemetry data is retained indefinitely for comparative historical reporting.
• Data Deletion Requests: Users may request complete erasure of their personal submission data at any time by contacting our privacy compliance team.

6. International Data Transfers

Our web application and database infrastructure are hosted primarily within the United States. If you access our platform from the European Economic Area (EEA), United Kingdom, or other international regions, please note that your information will be transferred to, stored, and processed in the United States under standard contractual clauses (SCCs) and applicable cross-border data transfer safeguards.

7. Your Rights & Privacy Choices

Depending on your jurisdiction (including rights under CCPA/CPRA in California, GDPR in Europe, and state-specific US privacy acts), you possess the following rights regarding your personal information:

• Right to Know / Access: Request a copy of the specific personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete contact information.
• Right to Erasure (Right to be Forgotten): Request permanent deletion of your submission records from our systems.
• Right to Opt-Out: Opt-out of any future promotional notifications or referral distributions.

8. Third-Party Web Links

Our landing pages and case study documentation may contain links to external third-party websites or client applications. DevEngine is not responsible for the privacy practices, security standards, or content of external third-party sites. We encourage users to review the privacy notices of any linked site they visit.

9. Policy Revisions & Updates

We reserve the right to revise or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Revised" timestamp. Your continued use of the website or referral services following published updates signifies your acceptance of the amended policy terms.

10. Privacy Officer Contact Details

If you have any questions, data subject access requests, or privacy concerns regarding this policy, please contact our compliance team: