Privacy Policy

1. Overview & Commitment to Privacy

DevGenXai ("we", "our", or "the Studio") operates as a senior software and AI engineering studio. We respect the confidentiality and privacy of our visitors, prospective clients, and enterprise partners. This Privacy Policy details the types of information we collect, how it is processed and safeguarded, and your rights under applicable data protection regulations including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We only collect information necessary to provide software engineering consultations, scoping assessments, and custom software delivery:

• Direct Inquiries: When you submit our contact, calculator, or discovery forms, we collect your name, work email address, company name, optional telephone number, project budget tier, and project specifications.
• Calendly Appointments: When booking a scoping call via our scheduling integration, your name, email, and meeting notes are processed in accordance with Calendly's security standards.
• Technical & Telemetry Data: Standard server logs, browser user agents, and anonymous traffic metrics to ensure site availability, prevent malicious abuse, and optimize responsive performance.

3. Client Intellectual Property & Code Sovereignty

Under our standard Master Services Agreement (MSA) and Non-Disclosure Agreements (NDA):

• We do not use client proprietary codebases, database records, training datasets, or business logic to train public or foundational AI models.
• All LLM integrations deployed for clients leverage commercial Zero Data Retention (ZDR) APIs or self-hosted VPC endpoints where client telemetry is strictly isolated.
• All code written by DevGenXai engineering squads is assigned 100% to the client upon milestone delivery.

4. How We Use Information

We process collected information solely for:

• Responding to project inquiries and delivering architectural proposals within 24 hours.
• Conducting technical scoping sessions and milestone delivery discussions.
• Distributing our bi-weekly engineering newsletter (only with explicit opt-in; you can unsubscribe at any time).
• Maintaining cybersecurity defenses, protecting against fraud, and complying with legal obligations.

5. Data Retention & Security Controls

All contact data is encrypted in transit using TLS 1.3 and at rest with AES-256 encryption. We enforce least-privilege role-based access control (RBAC). We retain inquiry data only as long as necessary to fulfill project requirements or comply with statutory requirements.

6. Your Rights

Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please contact us at privacy@devgenxai.com or hello@devgenxai.com.