Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account, use our services, or contact support. This includes your name, email address, company information, and usage data related to our APIs and dashboard.

We also automatically collect technical information such as IP addresses, browser type, device identifiers, and interaction data when you use the Orbit platform. API request metadata (endpoints called, response codes, latency) is logged for service reliability and billing purposes.

2. How We Use Your Information

Your data is used to provide, maintain, and improve our services, process transactions, send communications about your account, and ensure the security of our platform.

Specifically, we use your information to: operate and deliver the Orbit platform and APIs; calculate usage-based billing; detect, investigate, and prevent fraudulent or unauthorized activity; comply with legal obligations; and communicate service updates, security alerts, and support messages.

3. Data Sharing & Third Parties

We do not sell your personal data. We share information only with third-party service providers that assist in operating the platform—such as cloud infrastructure (Google Cloud Platform), payment processing (Stripe), and analytics. Each provider is contractually required to protect your data and use it solely for the services they perform on our behalf.

When you send messages through Devotel (SMS, WhatsApp, RCS, Email), your message content and recipient data are transmitted to the relevant carrier or channel provider as necessary to deliver your communications.

4. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We also use analytics tools (PostHog) to understand how the platform is used and to improve the user experience. You can manage cookie preferences through your browser settings.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Message logs and API usage data are retained according to your plan's retention policy (default: 90 days). You may request earlier deletion by contacting support.

6. Data Security

We implement industry-standard security measures including encryption at rest and in transit, regular security audits, and strict access controls. All data is stored on Google Cloud Platform infrastructure in the EU (europe-west1 region).

7. International Data Transfers

Your data is primarily processed and stored within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms, to protect your data in accordance with applicable data protection laws.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You may also object to or restrict certain processing activities. To exercise any of these rights, please contact us at privacy@devotel.io. We will respond within 30 days.

9. Children's Privacy

Devotel services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the platform after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related inquiries, please contact us at privacy@devotel.io.