Privacy policy
What we collect, what for, and how long we keep it. In short: the minimum, and no tracking.
Last updated: September 20, 2026
1. Who is responsible
Devly, a business based in Switzerland, is the controller for the personal data collected through this website. If you need our postal address in order to exercise your rights, we will give it to you by email.
For anything to do with privacy, write to devlysupport@gmail.com.
We are subject to the Swiss Federal Act on Data Protection (revised FADP). Where we offer services to people in the European Economic Area, the General Data Protection Regulation (GDPR) applies as well.
2. What we process
From the contact form: your name, email address, the service you are interested in, the message you write, and the language of the page you sent it from, so we know which one to reply in. To stop abusive sending we temporarily keep an irreversible fingerprint (hash) of your IP address — never the address itself — and do not link it to the message.
From visiting the site: our hosting provider records, for technical and security reasons, data such as the IP address, date and time, the page requested and the browser type.
From the business relationship: the contact and billing details needed to deliver the service and meet our accounting obligations.
We collect no sensitive data, build no profiles and take no automated decisions about you.
3. Why, and on what legal basis
- Answering your message and preparing a quote — because you asked us to, as a step towards a contract.
- Delivering the service you commissioned — to perform the contract.
- Keeping the site secure and running — our legitimate interest in protecting it from abuse.
- Keeping invoices and records — because the law requires it.
We do not use your data for advertising and we send no newsletters unless you explicitly ask for one.
5. Transfers outside Switzerland
Some of those providers run servers outside Switzerland, including in the United States. Where that happens, the transfer relies on an adequacy decision or on the standard contractual clauses recognised by the Swiss Federal Data Protection Commissioner and by the European Commission.
6. How long we keep it
Contact messages that do not lead to an engagement are deleted once they stop being useful, and at the latest after twelve months.
Client data is kept for the duration of the relationship and then for the ten years Swiss accounting rules require.
Technical server logs are kept by the provider for short periods, typically weeks.
7. Your rights
You may ask us at any time to give you access to your data, correct it, delete it, restrict its processing, hand it over in a portable format, or object to processing based on legitimate interest.
An email to devlysupport@gmail.com is enough. We answer within the statutory period and at no cost. We may ask you to confirm your identity first — precisely in order to protect your data.
If you believe we are handling your data improperly, you can contact the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or, in the EEA, your national supervisory authority.
8. Security
The site is served over HTTPS. We limit access to data to those who need it to work, and apply technical and organisational measures reasonable for the state of the art.
No system is invulnerable. Should a breach occur that puts your rights at risk, we would notify you and the competent authority as the law requires.
9. Changes
If we change this policy we will publish the new version here with its update date. If a change is substantial and affects you as a client, we will tell you.