Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you fill out a contact form, request a consultation, make a payment, or communicate with us. This may include your name, email address, company name, phone number, billing address, and project details.

We may also collect information automatically when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.

2. Payment Information

When you make a payment for our services, your payment information (such as credit card numbers, billing address, and related financial data) is collected and processed by our third-party payment processor, Stripe, Inc. Devstead does not store your full credit card number or CVV on our servers. Stripe's collection and use of your payment information is governed by their privacy policy at stripe.com/privacy.

We may retain transaction records, including the last four digits of your payment method, transaction amounts, dates, and invoice details for accounting and legal compliance purposes.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide our services
• Process payments and send invoices
• Communicate with you about projects, updates, and service-related matters
• Improve our website, services, and customer experience
• Comply with legal obligations and protect our rights
• Detect and prevent fraud or unauthorized access

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Contact form submissions are retained for up to 2 years after your last interaction
• Payment and transaction records are retained for 7 years for tax and legal compliance
• Project-related communications are retained for the duration of the business relationship plus 3 years
• Website analytics data is retained in anonymized form for up to 26 months

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmissions are encrypted using industry-standard TLS protocols. Payment processing is handled by PCI DSS-compliant service providers.

6. Cookies and Tracking

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. You can control cookie settings through your browser preferences. Disabling cookies may affect certain features of our website.

7. Third-Party Services

We use the following categories of third-party services that may process your data:

• Payment Processing: Stripe, Inc. for secure payment handling
• Email Services: For transactional and project-related communications
• Analytics: For website traffic analysis and performance monitoring
• Hosting: Cloud infrastructure providers for website and application hosting

Each third-party service provider has their own privacy policy governing their use of your information.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Portability: Request your data in a structured, commonly used format
• Opt-Out: Opt out of marketing communications at any time

To exercise any of these rights, please contact us at hello@devstead.net. We will respond to your request within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. Devstead does not sell personal information.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Devstead
Email: hello@devstead.net
Address: 1500 N Grant St, Ste N, Denver, CO 80203, United States