Privacy Policy

Devix ("we", "us", or "our") operates the Devix website and related services. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our site, use our project estimator, or contact us.

We may collect the following information when you interact with our website:

• **Contact details** — name and email address when you submit our contact form or schedule a consultation through the project estimator. • **Project information** — details you provide in the estimator (project type, scope, timeline, budget preferences, and related selections). • **Messages** — any text you include in inquiry or consultation forms. • **Technical data** — standard server logs such as IP address, browser type, and pages visited, used for security and rate limiting.

We use your information to:

• Respond to inquiries and consultation requests • Review and follow up on project estimator submissions • Improve our website and services • Protect against abuse, spam, and unauthorized access • Comply with legal obligations where applicable

We process your data based on your consent when you submit a form, and our legitimate interest in responding to business inquiries and operating our website securely.

Inquiry and lead records are retained for as long as needed to manage our client relationships and business operations, unless you request deletion and we are not required to retain them by law.

We use trusted third-party providers to operate our services, including:

• **Hosting** — Vercel (website delivery) • **Database** — Supabase / PostgreSQL (data storage) • **Email** — Resend (transactional notifications) • **Analytics** — Vercel Speed Insights (performance monitoring)

These providers process data only as needed to deliver their services to us.

Depending on your location, you may have rights regarding your personal data. These include:

• **Right to access** — request a copy of the personal data we hold about you. • **Right to rectification** — ask us to correct inaccurate or incomplete data. • **Right to erasure** — request deletion of your personal data where we have no legal obligation to retain it. • **Right to restriction** — ask us to limit how we process your data in certain circumstances. • **Right to data portability** — receive your data in a structured, machine-readable format. • **Right to object** — object to processing based on legitimate interests.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively.

To exercise any of these rights, contact us at hello@devix.id. We will respond within 30 days.

For privacy-related questions, contact us at hello@devix.id or through the contact form on our website.