GDPR Compliance

Last updated: 5/30/2025

Introduction

The General Data Protection Regulation (GDPR) is a European Union regulation that governs how we collect, process, and protect your personal data. This page explains how DevKitly complies with GDPR requirements.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Information

You have the right to know:

  • What personal data we collect
  • Why we collect it
  • How we use it
  • Who we share it with
  • How long we keep it

Right of Access

You can request:

  • Confirmation that we process your personal data
  • A copy of your personal data
  • Information about how we process your data

Right to Rectification

You can:

  • Correct inaccurate personal data
  • Complete incomplete personal data
  • Update outdated information

Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when:

  • It's no longer necessary for the original purpose
  • You withdraw consent
  • You object to processing
  • Data has been unlawfully processed

Right to Restrict Processing

You can limit how we use your data when:

  • You contest the accuracy of the data
  • Processing is unlawful
  • We no longer need the data but you need it for legal claims
  • You've objected to processing

Right to Data Portability

You can:

  • Receive your data in a structured, machine-readable format
  • Transfer your data to another service provider
  • Request direct transfer where technically feasible

Right to Object

You can object to:

  • Processing based on legitimate interests
  • Direct marketing
  • Processing for scientific or historical research

Legal Basis for Processing

We process your personal data based on:

Legitimate Interest

  • Providing and improving our services
  • Analytics and performance monitoring
  • Security and fraud prevention

Consent

  • Newsletter subscriptions
  • Optional analytics cookies
  • Marketing communications

Contract Performance

  • Providing requested services
  • Customer support
  • Account management

Data We Collect

Information You Provide

  • Contact information (name, email)
  • Feedback and support requests
  • Newsletter subscriptions

Automatically Collected Data

  • Usage analytics (anonymized)
  • Technical information (browser, device)
  • Performance metrics

Data We Don't Collect

Important: Most of our tools process data entirely in your browser, meaning:

  • Tool input data never reaches our servers
  • Processing happens locally on your device
  • We cannot access your sensitive information

Data Retention

We retain personal data for:

  • Contact information: Until you request deletion or unsubscribe
  • Analytics data: 26 months (anonymized)
  • Support tickets: 3 years for quality assurance
  • Legal obligations: As required by law

Data Transfers

We may transfer data outside the EU to:

  • Cloud service providers with adequate protection
  • Analytics services (Google Analytics)
  • Support and communication tools

All transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

Security Measures

We protect your data through:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security audits
  • Employee training and confidentiality agreements

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at [email protected].

Exercising Your Rights

To exercise your GDPR rights:

  1. Email us at [email protected]
  2. Include your request type and relevant details
  3. Provide identity verification if required
  4. We'll respond within 30 days

Complaints

If you're not satisfied with our response, you can file a complaint with:

  • Your local data protection authority
  • The supervisory authority in your EU member state
  • The Information Commissioner's Office (ICO) if you're in the UK

Contact Information

For GDPR-related questions: