Privacy Policy

This policy explains how Devloy Technologies ("Devloy", "we") handles personal data when you visit devloytech.in, contact us, or use our bot audit service. We follow the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

Two kinds of data

• Your data: the name, work email, company, and messages you send us, plus basic website usage data.
• Your customers' data: bot conversations you share with us for an audit. For this data you are the Data Fiduciary and we act as your Data Processor. We process it only on your instructions.

What we collect and why

• Contact details and messages, to reply to you and run the audit you asked for.
• Website usage data (pages viewed, device, approximate location, clicks on contact links), to understand how the site is used. We use Google Analytics for this when it is enabled.
• Bot conversations and related ticket data, only to check them for wrong answers, failed handoffs, and exposed personal data, and to produce your findings report.

What we don't do

• We don't sell personal data.
• We don't use your conversations to train AI models.
• We don't contact your customers.

Service providers

We use these providers to run the service: Vercel (website and application hosting), Supabase (database, sign-in, and storage), Anthropic (AI analysis of conversations, under commercial terms that do not allow training on your data), Razorpay (payments), and Google Analytics (website usage, when enabled). If you connect Slack, alerts are sent to your workspace. If you add your own Anthropic key, analysis runs under your Anthropic account instead. Some of these providers process data outside India, including in the United States, as permitted under the DPDP Act.

How long we keep data

• Free audit conversations: deleted automatically 30 days after the audit finishes.
• Paid plans: conversations are kept for 90 days (Monitor) or 365 days (Compliance), then deleted automatically.
• You can delete an audit, or all conversation data in your workspace, at any time from the dashboard.
• Contact messages: kept while we are in touch and for up to 2 years after.

Security

We only request read-only access to your helpdesk. Personal identifiers such as Aadhaar, PAN, card, account, and phone numbers are masked before conversations are stored. Helpdesk keys, Slack webhooks, and AI keys are encrypted with AES-256. Data is encrypted in transit and at rest, and access is limited to people who need it to run the service.

Your rights

You can ask to access, correct, or erase your personal data, withdraw consent, or nominate someone to act for you. If your data came to us through a company that uses Devloy, please contact that company first. We will help them respond.

Grievance officer

Shivam Awasthi, Founder. Email contact@devloytech.in. We respond within 7 days. If you are not satisfied, you can complain to the Data Protection Board of India.

Changes

We will update this page when our practices change and change the date at the top.