Privacy Notice

This Privacy Notice explains how Devancore Inc. ("Devancore," "we," "us," or "our") collects, uses, and protects information when you visit our website, contact us, or use Devancore software under an agreement with us. This notice is intended for business users and describes our U.S.-focused privacy practices for the public website and related business communications.

Our Role: Controller and Service Provider

Devancore acts in different roles depending on the context:

• Website and business inquiries. For information collected through the public website, contact forms, marketing communications, and similar business interactions, Devancore generally acts as the business that determines how that information is collected and used.
• Customer platform data. When a customer uses Devancore software under a signed customer agreement, Devancore generally acts as a service provider or processor on the customer's instructions. The customer determines the purposes and means of processing customer data, subject to the applicable agreement and data processing addendum ("DPA").

This public notice primarily describes website and business-contact data handling. It does not replace a signed customer agreement, order form, or DPA for customer platform data.

1. Information We Collect

1.1. Information You Provide

We may collect information you submit to us, including:

• Name and professional contact details
• Email address and phone number
• Company name, role, and business inquiry details
• Information included in messages, requests, forms, or support communications

1.2. Information Collected Automatically

When you use the website, we may collect basic technical and usage data, including:

• IP address, browser, device, and operating system
• Pages viewed, referring pages, timestamps, and site interactions
• Cookie identifiers and similar analytics signals

1.3. Customer Data

If Devancore software is used by a customer under a written agreement, we may process customer data as a service provider or processor on the customer's instructions. The scope, retention, security controls, subprocessors, cross-border transfers, and permitted use of that data are governed by the signed customer agreement and DPA, not by this public website notice alone. Customer data is not collected through the public website unless a user submits it to us directly.

2. How We Use Information

We use information to:

• Respond to inquiries and demo requests
• Provide, operate, secure, and improve our website and software
• Communicate with customers, prospects, vendors, and partners
• Maintain security, prevent misuse, and troubleshoot technical issues
• Meet legal, contractual, and operational requirements
• Analyze website performance and usage patterns

We do not use customer platform data for cross-context behavioral advertising. Website analytics are used to understand traffic, performance, and usability, not to sell access to customer data or to run targeted advertising based on customer platform activity.

3. How We Share Information

We may share information with:

• Service providers that host, secure, support, or analyze our website and software
• Professional advisers, where needed for legal, accounting, security, or business purposes
• Authorities, regulators, courts, or other parties when required by law or valid legal process
• Successors or counterparties in a financing, merger, acquisition, restructuring, or similar transaction

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not disclose customer platform data except as authorized by the customer, required by law, or permitted under the applicable customer agreement.

4. Service Providers

Devancore uses an AWS-based environment that includes managed compute, database, storage, secrets management, logging, and network controls, including Amazon Route 53 for DNS where used. Selected security controls may use AWS KMS and AWS Secrets Manager for sensitive authentication and operational credential material where implemented.

The table below lists service providers used for the public website, business operations, and software delivery. Additional platform subprocessors for specific customer deployments may be described in the applicable signed customer agreement and DPA.

5. Cookies and Analytics

We use cookies and similar technologies to operate the website, remember preferences, measure traffic, and improve usability. Our current website analytics providers include Google Analytics / Google Tag Manager and Microsoft Clarity.

These tools help us understand how visitors use the website, diagnose technical issues, and improve content and navigation. They are used for website measurement and operations, not for selling personal information or for cross-context behavioral advertising based on customer platform data. You can control cookies through your browser settings. Some features may not work as intended if cookies are disabled.

6. Data Security

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. This includes access controls, encryption in transit, encryption at rest where supported by the relevant service, and vendor review for material service providers. No website, network, or storage system is perfectly secure.

7. Data Retention

We retain information for as long as needed for the purposes described in this notice, unless a longer period is required by law, contract, security needs, dispute resolution, or legitimate business operations. Customer platform data retention is governed by the applicable signed customer agreement and DPA.

8. Your Privacy Rights

Devancore is a U.S.-based B2B software provider. Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information. You may also have the right to object to certain processing or withdraw consent where processing is based on consent. Many U.S. state privacy laws provide exemptions or different rules for business-contact information and for data processed in a B2B context. To make a request relating to website or business-contact information, contact us using the details below. Requests relating to customer platform data should be directed to the relevant customer where Devancore acts as a service provider.

9. International Users

Devancore is based in the United States. If you access the website from outside the United States, your information may be processed in the United States and other jurisdictions where our service providers operate. Customer cross-border processing terms, if any, are governed by the applicable signed customer agreement and DPA.

10. Children's Privacy

The website and Devancore software are intended for business users. They are not directed to children under 18. We do not knowingly collect personal information from children.

11. Changes to This Notice

We may update this Privacy Notice from time to time. The "Last updated" date shows when the notice was last revised.

12. Contact

Devancore Inc.
447 Broadway, 2nd Floor Suite #3416
New York, NY 10013
United States

Email: access@devancore.com

For privacy requests, please include "Privacy Request" in the subject line.