Privacy Policy

Information you provide directly. When you submit our contact form, we collect your first name, last name, work email address, organization, company website, industry, and the contents of your message. We collect this because it is what you type into the form — we do not request or infer anything beyond it.

If you email us directly at contact@devencelab.com, we receive whatever information is contained in that email and any attachments, including your email address and anything else you choose to include.

Information collected automatically. Like any web server, the infrastructure hosting this site automatically logs standard technical data for every request — your IP address, browser and operating system (user agent string), the pages requested, referring page, and timestamps. These logs exist for operating, securing, and troubleshooting the site (for example, detecting abuse or diagnosing an outage), and we do not combine them with your contact-form submissions or use them to build a profile of your browsing activity.

What we do not collect. We do not use analytics, advertising, or tracking scripts on this site, and we do not collect payment information, government identifiers, or precise geolocation.

We use the information described above to:

• Respond to your inquiry and correspond with you about it;
• Evaluate and follow up on requests to work with Devence Lab;
• Operate, maintain, and secure this website;
• Detect, investigate, and prevent abuse, fraud, or security incidents; and
• Comply with applicable legal obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects concerning you, and we do not sell your personal information.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we rely on the following legal bases under data protection law:

• Consent — when you voluntarily submit the contact form or email us, you are choosing to share that information with us for the purpose of being contacted back.
• Legitimate interests — for operating and securing our website and responding to business inquiries, where those interests are not overridden by your rights and interests.
• Legal obligation — where we are required to retain or disclose information to comply with the law.

This site does not set first-party cookies to track you, and we do not use it for advertising or cross-site tracking of any kind.

Page typography is loaded from Google Fonts. Loading a font from Google's servers means your browser sends a request directly to Google, which can include your IP address and standard request headers. Google's handling of that request is governed by Google's own privacy policy, not this one. We do not control what Google does with that request beyond serving the font file.

We share information with a small number of service providers who process it on our behalf, strictly to provide the services described below. We do not permit them to use your information for their own marketing purposes.

• Fillout — our contact form is processed and stored through Fillout's form-submission platform, which receives and retains the information you submit through that form on our behalf.
• Google Fonts — as described in Section 4, this site loads typefaces from Google's font-hosting infrastructure.
• Hosting infrastructure — this website is hosted on infrastructure provided by our hosting partner, which processes standard server-log data as described in Section 1 as part of delivering the site to your browser.

We retain contact-form submissions and email correspondence for as long as reasonably necessary to respond to your inquiry, maintain a record of our business communications, and meet legal, accounting, or reporting requirements — typically no longer than three years after our last substantive interaction with you, unless a longer period is required or permitted by law. Standard server access logs are retained on a rolling basis for a limited operational window and are then routinely overwritten or deleted.

Because we operate on the internet and rely on service providers who may process data outside your home country, your information may be transferred to, stored in, or accessed from countries other than your own, including countries that may have different data protection laws. Where such transfers occur, we rely on the legal mechanisms available under applicable law (such as standard contractual clauses) to the extent required, and we work with providers that maintain appropriate safeguards for the data they process on our behalf.

We do not sell or rent your personal information. We disclose it only to:

• The service providers named in Section 5, to the extent needed to run this site and process your inquiry;
• Professional advisors (such as legal or accounting counsel) under obligations of confidentiality, where necessary;
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to the same commitments described in this policy; and
• Law enforcement, regulators, or other third parties where we believe disclosure is required by law, or necessary to protect the rights, property, or safety of Devence Lab, our users, or the public.

We apply reasonable technical and organizational measures designed to protect the information we hold from unauthorized access, alteration, disclosure, or destruction — including transmitting this site exclusively over encrypted (HTTPS) connections and limiting access to contact-form submissions to the people who need it to respond to you. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct inaccurate or incomplete information;
• Deletion — ask us to delete your personal information, subject to legal exceptions;
• Restriction or objection — ask us to limit how we use your information, or object to certain processing;
• Portability — request your information in a structured, commonly used, machine-readable format; and
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting processing that already took place.

To exercise any of these rights, email us at contact@devencelab.com. We will respond within the timeframe required by applicable law. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

This site is directed at businesses and professionals, not children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised policy on this page with an updated "Last updated" date. If changes are material, we will take reasonable steps to bring them to your attention.

If you have questions about this policy or how we handle your information, contact us at contact@devencelab.com.