Our commitments
- We collect only the data we need, for clear purposes, and keep it no longer than necessary
- We use analytics cookies only with consent, and rejecting them is as easy as accepting
- We choose service providers with strong security and data protection terms
- We respond to every data request within one month
Protecting client data
When our engineers work on your systems, your data stays under your control:
- Every engagement includes an NDA, and all code and intellectual property created for you is transferred to your company
- Engineers access only the systems and data they need, through the accounts and tools you provide
- Where our engineers process personal data on your behalf, we act as your processor and sign a Data Processing Agreement (DPA) on request
- Your code only goes into AI tools you approve, under your security rules
How to make a request
Email hi@devkit.agency with the subject “Data request” and tell us which right you want to exercise: access, correction, deletion, restriction, objection, portability or withdrawing consent. We may ask you to confirm your identity before we act. We reply within one month; if a request is complex, we will tell you if we need up to two more months.
Our processors
| Provider | Service | Location |
|---|---|---|
| Amazon Web Services | Website hosting (AWS Amplify) | USA |
| Amazon Web Services | Request storage (DynamoDB) | EU (Frankfurt) |
| Slack | Internal notifications about new requests | USA |
| reCAPTCHA and, with consent, Analytics | USA / global |
Transfers outside the EEA are protected by the EU–US Data Privacy Framework or Standard Contractual Clauses.
More information
Full details are in our Privacy Policy and Cookie Policy. For anything else, email hi@devkit.agency.