Privacy Policy
This Privacy Policy describes how DevPunch Software ("DevPunch," "we," "us," or "our") collects, uses, protects, and shares information when you use our website (https://devpunch.com) and software development services ("Services").
Our Commitment to Privacy
At DevPunch, we understand that trust is fundamental to our client relationships. We are committed to protecting your privacy and handling your data responsibly. This policy explains our practices in clear, straightforward language.
Website Information
When you visit our website or contact us, we may collect:
-
Contact Information: Name, email address, phone number, company name
-
Communication Records: Messages sent through contact forms, emails, or support requests
-
Technical Information: IP address, browser type, device information, pages visited
-
Analytics Data: How you interact with our website to improve user experience
Client Project Information
When you engage our services, we may collect and process:
-
Business Requirements: Project specifications, user stories, technical requirements
-
Project Assets: Existing code, designs, documentation, data files you provide
-
Access Credentials: When necessary for project work (API keys, staging environment access)
-
Project Communications: Meetings, emails, and collaboration platform discussions
How We Use Your Information
For Our Services
- • Deliver software development services as contracted
- • Communicate about project progress and requirements
- • Provide technical support and maintenance
- • Invoice and process payments
For Business Operations
- • Improve our services and website functionality
- • Analyze trends to enhance our development processes
- • Comply with legal obligations and industry standards
- • Protect against fraud and security threats
For Communication
- • Respond to inquiries and support requests
- • Send project updates and important notifications
- • Share relevant industry insights (with your consent)
Data Protection and Security
Technical Safeguards
- • Encryption: All data transmissions use SSL/TLS encryption
- • Access Controls: Role-based access with strong authentication requirements
- • Secure Storage: Data stored on secure, regularly updated servers
- • Regular Backups: Automated backups with encryption at rest
Operational Safeguards
- • Team Training: All team members receive privacy and security training
- • Non-Disclosure Agreements: All employees and contractors sign comprehensive NDAs
- • Access Logging: We monitor and log access to client data
- • Incident Response: Established procedures for addressing security incidents
Client Project Data
- • Isolated Environments: Each project maintains separate, secure development environments
- • Code Repository Security: Private repositories with access controls and audit trails
- • Data Minimization: We only collect and retain data necessary for project delivery
- • Secure Collaboration: All project communications use encrypted platforms
Data Sharing and Disclosure
We Do Not Sell Your Data
We never sell, rent, or trade your personal information or project data to third parties.
Limited Sharing Scenarios
We may share information only in these specific circumstances:
- • Service Providers: Trusted vendors who assist with hosting, analytics, or payment processing (under strict data protection agreements)
- • Legal Requirements: When required by law, court order, or to protect legal rights
- • Business Transfer: In the event of a merger or acquisition (with continued privacy protections)
- • With Your Consent: When you explicitly authorize sharing for specific purposes
Team Access
- • Only team members directly involved in your project have access to your data
- • All access is logged and monitored
- • Team members sign project-specific confidentiality agreements
Data Retention
Project Data
- • Active Projects: Retained for project duration plus 90 days for warranty support
- • Completed Projects: Source code and deliverables retained for 2 years unless otherwise specified
- • Communication Records: Retained for 3 years for business continuity
- • Custom Retention: We can accommodate specific client retention requirements
Website Data
- • Analytics Data: Aggregated data retained for 2 years
- • Contact Inquiries: Individual inquiries retained for 1 year
- • Account Information: Retained while account is active plus 1 year
Your Rights and Choices
Access and Control
- • Data Access: Request copies of data we hold about you
- • Data Correction: Update or correct inaccurate information
- • Data Deletion: Request deletion of your data (subject to legal and contractual obligations)
- • Data Portability: Receive your data in a structured, machine-readable format
Communication Preferences
- • Email Unsubscribe: Use the unsubscribe link in any email or contact us directly
- • Marketing Opt-out: We only send marketing communications with explicit consent
- • Project Communications: Essential project communications cannot be opted out of during active projects
Cookie Management
You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.
International Data Transfers
Our Approach
- • Primary Storage: Data primarily stored on servers in the United States
- • Adequate Protections: Any international transfers include appropriate safeguards
- • Client Choice: We can accommodate specific geographic requirements when possible
Remote Team Considerations
Our distributed team may access project data from various locations. We ensure:
- • All team members follow the same security protocols regardless of location
- • VPN and secure connection requirements for all remote access
- • Contractual obligations for international team members
Children's Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.
Changes to This Policy
Notification Process
- • Material Changes: We will notify clients via email at least 30 days before changes take effect
- • Minor Updates: Posted on our website with updated "Last Updated" date
- • Continued Use: Using our services after changes indicates acceptance of the updated policy
Contact Information
Privacy Questions
For questions about this Privacy Policy or our data practices:
- • Email: privacy@devpunch.com
- • Response Time: We respond to privacy inquiries within 5 business days
Data Subject Requests
To exercise your privacy rights:
- • Email: privacy@devpunch.com with "Data Request" in the subject line
- • Include: Specific request type and relevant project or account information
- • Verification: We may request identity verification for security purposes
Security Incidents
If you suspect a security issue:
This Privacy Policy demonstrates our commitment to protecting your privacy while enabling us to deliver exceptional software development services. We believe transparency and security go hand in hand with building great software.
