Privacy Policy

1. Introduction

Devclosure ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. We specialize in compliance automation for game studios, and we hold ourselves to the highest standards of data protection.

By using our website, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Join our waitlist (email address, company name, role)
• Contact us through forms or email
• Subscribe to newsletters or updates
• Participate in surveys or feedback requests

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address and device identifiers
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Device operating system and screen resolution

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze site usage, and support our marketing efforts. You can control cookie preferences through our cookie consent banner and your browser settings. Essential cookies necessary for site functionality are always enabled.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process and respond to your inquiries and requests
• Send you updates about our services and waitlist status
• Improve and optimize our website and user experience
• Analyze usage patterns and site performance
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms
• Send marketing communications (with your consent where required)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to provide services you've requested
• Legal Obligations: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests, balanced against your privacy rights (e.g., analytics, security, fraud prevention)

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our website and services, including:

• Web hosting and infrastructure providers
• Analytics services (with appropriate data processing agreements)
• Email service providers
• Customer support tools

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and choices you may have.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we securely delete or anonymize it.

Typical retention periods include:

• Waitlist data: Until service launch or until you request deletion
• Analytics data: 26 months (in line with industry standards)
• Support correspondence: 3 years after case closure

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 GDPR Rights (EEA/UK Residents)

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where consent is the legal basis)

8.2 California Privacy Rights (CCPA/CPRA)

California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell personal information).

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@devclosure.com. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

9. Children's Privacy

Our services are not directed to children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all processors
• Adequacy decisions where available

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For GDPR-related inquiries from EEA residents, you also have the right to lodge a complaint with your local supervisory authority.