Learn how we collect, use, and protect your personal information
At Devolyte, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We believe in transparency and want you to understand how your data is handled. This policy outlines our practices and your rights regarding your personal information. By using our services, you agree to the collection and use of information in accordance with this policy.
We collect information you provide directly to us, such as when you contact us, subscribe to our newsletter, or use our services.
We use the information we collect to provide, maintain, and improve our services, and to communicate with you.
We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
You have certain rights regarding your personal information, including the right to access, update, or delete your data.
Policy version 2.1 · Last updated May 2026
Devolyte processes personal data where necessary to respond to your inquiries (contract/legitimate interest), to improve our services (legitimate interest), and for analytics or marketing only where you have given consent. Data may be transferred outside your country (including to the United States) using appropriate safeguards such as Standard Contractual Clauses where required.
| Provider | Purpose | Location | Data involved |
|---|---|---|---|
| Vercel Inc. | Website hosting and edge delivery | United States (global CDN) | IP addresses, request logs, form submissions in transit |
| MongoDB Atlas | Database for leads, content, and application data | Cloud region configured in your Atlas project | Contact details, chat-derived leads, CMS content |
| OpenRouter | AI chat completions for the website assistant | United States | Chat messages you send to the assistant |
| Google (Tag Manager / Analytics) | Analytics and marketing measurement (with consent only) | United States / EU as applicable | Usage data, device identifiers, cookies |
| SMTP email provider | Transactional email (lead notifications, admin mail) | As configured in admin SMTP settings | Email addresses and message metadata |
| Data type | Retention | Legal basis |
|---|---|---|
| Contact form submissions & leads | 24 months after last interaction, then deleted or anonymized | Contract / legitimate interest |
| AI chat conversations | 12 months for quality and compliance logs | Legitimate interest |
| Analytics data (if consented) | Per Google Analytics settings (typically 14–26 months) | Consent |
| Marketing consent records | Until withdrawn, plus 3 years for proof of consent | Consent |
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
| devolyte_consent_v1 | Stores your cookie consent choices | 12 months | Devolyte |
| theme | Remembers light/dark theme preference | Persistent until cleared | Devolyte |
| _ga, _gid, _gat (if enabled) | Google Analytics measurement | Up to 24 months |
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for processing. To exercise these rights, email info@devolyte.com with the subject line "Privacy request". We respond within 30 days where GDPR applies, and within comparable timeframes under Saudi PDPL and other applicable laws.
If you have any questions about this Privacy Policy or our data practices, please don't hesitate to contact us. We're here to help and ensure your privacy is protected.
Email us at:
info@devolyte.comLast updated:
May 2026 (v2.1)
