Privacy Policy

1) Who we are & scope

This policy covers the XDevOps marketing site and pre-launch interactions (email, demo requests, call bookings). When you become a customer, our Data Processing Addendum (DPA) will also apply.

• Controller: XDevOps (“we”, “our”, “us”).
• Contact: feedback@xdevops.ai
• Territorial scope: We respect applicable laws (e.g., GDPR/UK GDPR, CCPA/CPRA) proportional to our operations.

2) Information we collect

• Contact info you provide: Email content and address when you write to us or join the launch list.
• Operational metadata: Basic logs (IP, browser, pages, timestamps) for security and diagnostics.
• Cookie-lite analytics: First-party, minimal metrics to understand traffic—no ad networks.
• No sensitive categories: We do not seek special-category data.

3) How we use data

• Respond to inquiries, demos, and bookings.
• Operate, secure, and improve the site.
• Send service updates you request (e.g., launch list).
• Comply with law and enforce terms.

4) Legal bases (GDPR)

• Consent: Launch list emails, optional communications.
• Contract: Pre-contract steps when you request a demo.
• Legitimate interests: Site security, basic analytics.
• Legal obligation: Compliance with lawful requests.

5) Retention

• Keep only as long as needed for the stated purpose.
• Launch-list records until you unsubscribe or we sunset the list.
• Security logs for a short, rolling window unless investigating abuse.

6) Sharing

• No selling of personal data.
• Limited service providers (e.g., hosting, email). Bound by contracts & confidentiality.
• Disclosures required by law, court order, or to protect rights.

7) International transfers

• Where data crosses borders, we rely on safeguards such as Standard Contractual Clauses (SCCs) where applicable.
• We evaluate provider security practices and locations.

8) Security

• Encryption in transit, hardened infrastructure, least-privilege access.
• Security monitoring and vulnerability management.
• Incident response procedures proportionate to our size and risk.

9) Cookies & analytics

• We use limited, first-party cookies or equivalent tech for essential operations and basic usage analytics.
• No advertising or cross-site tracking cookies.
• You can control cookies via your browser settings.

10) Your rights

• Access/Export: Ask for a copy of your data.
• Rectify/Delete: Request corrections or deletion.
• Object/Restrict: In certain cases, limit processing.
• Withdraw consent: For consent-based emails, unsubscribe anytime.
• Appeals/Regulators: If unresolved, you may contact your data protection authority.

11) Regional notices

• CCPA/CPRA (California): We do not “sell” or “share” personal information as defined by CPRA. You may exercise access/deletion rights via the links above.
• EEA/UK/Swiss: For SCCs and details about processors, contact us. We respond within applicable timelines.

12) Children

• Our services are not directed to children under 16.
• We do not knowingly collect children’s personal data. If you believe we have, contact us to delete it.

13) Changes to this policy

We may update this policy as we evolve. Material changes will be posted here with an updated effective date.

14) Contact

Questions or concerns?

• Email: feedback@xdevops.ai
• Subject line: Privacy Question — XDevOps