Privacy Policy

We protect your product IP with the same rigor we build it.

From AI copilots to immersive experiences, DevX Group keeps sensitive data, research, and customer insights private at every step of delivery.

Effective October 22, 2025Applies to global engagementsVendor reviews welcome

Confidential by Design

Dedicated squads, private repos, and encrypted pipelines engineered for high-stakes SaaS, fintech, health, and IoT builds.

Responsible AI Practices

We never train external models on client data without written approval and route all AI usage through audited, access-controlled tooling.

Global Compliance Ready

Aligned to GDPR, CCPA, SOC2 expectations, and enterprise governance requirements so procurement moves fast.

01

Who We Are

DevX Group LLC ("DevX Group", "we", or "us") builds custom software, immersive experiences, AI-enabled platforms, and connected hardware for clients across finance, health, media, and emerging tech. This Privacy Policy explains how we safeguard personal data and product IP when you visit our site, schedule time, or engage our team.

By accessing our website or services you acknowledge that you understand this policy. We deliver projects from the United States with globally distributed talent and apply the same controls across every region in which we operate.

02

Information We Collect

We only collect the data needed to scope engagements, manage delivery, and support your team. This information falls into the categories below.

Business Contact Data

  • Identity details such as name, role, company, and preferred contact channels gathered via our forms, Calendly scheduling, or live events.
  • Conversation history, project briefs, and feedback shared during discovery or delivery.

Engagement Operations

  • Agreements, statements of work, invoicing records, and payment confirmations processed through secure third-party providers.
  • Access logs, version control metadata, design artifacts, and QA evidence created while delivering your solution.

Analytics & Telemetry

  • Device/browser data, IP address, locale, pages viewed, scroll depth, and campaign source captured with privacy-aware analytics (Google Analytics 4, Segment).
  • Product performance metrics (e.g., Sentry, LogRocket) only when expressly authorized in a project agreement.
03

How We Use Information

We process personal information to deliver world-class software while preserving the confidentiality of sensitive business data.

  • Collaboration & DeliveryCoordinate project teams, manage sprint rituals, share prototypes, and provide ongoing success support.
  • Product Research & ImprovementAnalyze aggregated usage to improve our methodologies, design systems, and accelerators without exposing individual client details.
  • Security MonitoringDetect unauthorized access, enforce zero-trust policies, and maintain audit trails required by enterprise procurement.
  • Legal & ComplianceMeet regulatory obligations, respond to lawful requests, and maintain accurate tax records.
  • Consent-Based MarketingSend thought leadership or event updates only when you opt in. You can unsubscribe from any non-essential communication at any time.
05

Data Security & Retention

Security is built into every DevX Group engagement. We maintain layered safeguards and audit trails appropriate for large enterprise programs.

Controls We Maintain

  • Encrypted storage, MFA, and role-based access for all collaboration tools and infrastructure.
  • Code and design repositories isolated per client with continuous vulnerability scanning.
  • Background-checked talent, confidentiality agreements, and secure device management for every contributor.

Retention Approach

  • Project data retained for the term of our engagement plus the period required to meet legal, accounting, or audit obligations.
  • Marketing contact data retained until you unsubscribe or request deletion. Logs and telemetry are minimized and rotated.
06

How We Work with Third Parties

We partner with specialized platforms to streamline delivery. Each vendor is vetted for security and contractual compliance, and only the minimum required data is shared.

  • Scheduling & CommunicationCalendly, Google Workspace, Slack, Zoom — used for meetings, notifications, and collaboration with your consent.
  • Product Development ToolsLinear, Notion, Jira, GitHub, Figma, Webflow, and similar systems that support agile delivery and design reviews.
  • Operations & FinanceStripe, QuickBooks, Gusto, and other processors that enable invoicing, payments, and compliance reporting.
  • Analytics & QualityGoogle Analytics 4, Segment, Sentry, LogRocket, and Playwright audit tooling — configured with IP anonymization and data minimization wherever available.
07

Responsible AI & Model Usage

Many engagements include AI co-pilots, generative models, or predictive analytics. We apply a strict governance framework to keep your proprietary data secure.

  • Client ControlAI-assisted features are configured in private tenants or self-hosted environments. Training on your datasets happens only with explicit approval.
  • Model ProvidersWhen we leverage third-party models (OpenAI, Anthropic, Google Vertex, AWS Bedrock, etc.) we ensure the provider contractually prohibits data retention for model improvement.
  • Explainability & AuditWe document prompts, model versions, and evaluation metrics inside project workspaces so your legal, compliance, and product teams maintain oversight.
08

Your Rights & Choices

Depending on where you reside, you may have rights to access, correct, export, or delete your personal information. DevX Group responds to requests within the timelines defined by law.

  • Access & PortabilityRequest a copy of the information we hold about you.
  • RectificationCorrect or update inaccurate or incomplete details.
  • DeletionAsk us to delete personal data when it is no longer required.
  • Restriction & ObjectionLimit how we process data or object to processing based on legitimate interests.
  • Marketing PreferencesOpt out of promotional messages directly from any email footer or by contacting us.
09

Regional Disclosures

California (CCPA/CPRA): California residents can request disclosure of data categories we collect, request deletion, and opt out of data sharing. We do not sell personal data.

European Union & United Kingdom (GDPR/UK GDPR): DevX Group acts as a data controller for marketing operations and as a data processor when delivering software on behalf of clients. You may file a complaint with your local supervisory authority if you believe we have improperly handled your data.

10

Cookies & Similar Technologies

We use essential cookies to keep the website secure and remember form progress. Optional analytics cookies help us understand the types of services visitors explore most — such as AI automation, immersive 3D experiences, or platform modernization.

You can adjust cookie preferences in your browser. Rejecting optional cookies will not block access to our site.

11

Policy Updates

We update this policy when we add new offerings, integrate critical tools, or respond to regulatory changes. We will post the revised policy with a new effective date and, when material, notify subscribed clients.

12

Acronym Reference

For your convenience, here are definitions of technical and legal acronyms used throughout this policy:

Technical Terms

  • AI — Artificial Intelligence
  • API — Application Programming Interface
  • AWS — Amazon Web Services
  • IoT — Internet of Things
  • IP — Internet Protocol or Intellectual Property (context dependent)
  • MFA — Multi-Factor Authentication
  • ML — Machine Learning
  • QA — Quality Assurance

Legal & Compliance

  • CCPA — California Consumer Privacy Act
  • CPRA — California Privacy Rights Act
  • GDPR — General Data Protection Regulation
  • SOC 2 — Service Organization Control 2
  • UK GDPR — United Kingdom General Data Protection Regulation

Business Terms

  • LLC — Limited Liability Company
  • SaaS — Software as a Service
13

Talk to Our Privacy Team

We are happy to discuss security reviews, vendor questionnaires, or custom data processing agreements. Reach us through any of the channels below:

  • Email: support@devxgroup.io
  • Phone: +1 (442) 544-0591
  • Mailing Address: DevX Group LLC, San Diego, California, USA