Privacy notice

Last updated 28 October 2026 · Version 2026-10-28

This notice explains how Devspeak S.A.S. handles personal data on this website (labs.devspeak.dev/investors). It applies wherever you visit the site. We apply it together with the data protection laws that apply to you; where those laws give you more protection, they prevail.

1. Who is responsible

   Devspeak S.A.S. is the controller of the personal data described in this notice: the company that decides why and how it is processed. Devspeak S.A.S. is a simplified stock company (S.A.S.) incorporated in Colombia, Cll. 7D # 43A - 40, Piso 8, Medellín, Antioquia 050022, Colombia. Contact for privacy questions and requests: info@devspeak.dev.

2. What we collect and why

   Request data. To deliver pages and block abuse, our hosting provider processes standard request data such as IP address, browser type and the page requested. We do not use it to identify you.

   Performance measurement. We measure how fast pages load and respond (Core Web Vitals) with Vercel Speed Insights. It sets no cookies, collects no personal data and identifies no visitor. We do not run advertising tools.

   Visit statistics without cookies. This website (labs.devspeak.dev/investors) also counts visits with Umami, an analytics tool we host on our own servers. It sets no cookies and stores nothing on your device. It records the page, the website or campaign that referred the visit, browser, operating system, device type, language and a country derived from the IP address. It does not store the IP address, and it identifies a visit only with a code that changes periodically, so visits cannot be linked to you over time. We use these totals to understand which pages and sources bring visitors and to improve the site.

   Language. The home page opens in Spanish when your browser prefers Spanish, and in English otherwise. If you choose a language with the language switch, one functional cookie (labs-locale) remembers that choice for a year. It holds only the language code and identifies no one.

   Contact form. When you send a message, your name, email, organisation, reason and message are delivered once by email to info@devspeak.dev so we can reply. They are not stored in any database, file or analytics tool on this site. A bot check runs before sending; it does not read the form fields.

3. Legal basis and authorization

   By sending the contact form you authorize Devspeak S.A.S. to process the data in it to answer you and follow up on your message. Where the law allows it, we also rely on our legitimate interest in operating and securing the site.

   We do not sell personal data, share it for cross-context advertising, or use it to make automated decisions about you.

4. Processors

   We use these service providers, which process data on our behalf and under their own security commitments: Vercel (hosting and performance measurement, United States); Resend (delivery of contact-form emails, United States; it keeps a send log for its retention period); Cloudflare Turnstile (bot check on the contact form). Our mailbox provider stores the emails we receive.

5. International transfers

   We and our providers store and process data mainly in the United States. This means your data may be processed outside the country where you live, under laws that may protect personal data differently. Each provider is bound by a contract that requires it to protect the data and to use it only to provide its service to us, and we give each one only what it needs. You can ask us for more information at info@devspeak.dev.

6. Retention

   We keep contact emails while we need them to handle the conversation and any follow-up, and delete them when they are no longer needed, unless a law requires us to keep them longer. Request data is kept by our hosting provider for its short log retention period.

7. Your rights

   Depending on the law that applies to you, you have the right to:

   • know whether we process your personal data, and access it free of charge;
   • correct or update data that is inaccurate or incomplete;
   • have your data deleted when we have no legal or contractual duty to keep it;
   • receive your data in a portable, commonly used format, or have it sent to another provider;
   • object to, or ask us to restrict, certain processing, including processing based on our legitimate interests;
   • withdraw your consent or authorization at any time, and ask for proof of the authorization you gave;
   • be told how we have used your data;
   • not be treated differently for exercising these rights.

   We do not sell personal data or share it for cross-context behavioral advertising, and we do not take decisions about you based solely on automated processing that have legal or similarly significant effects.

   How to exercise them. Write to info@devspeak.dev from the email address you used to contact us, or tell us how we can verify your identity. We answer questions about your data within ten business days and requests to correct, update or delete data or to withdraw your authorization within fifteen business days. If we need more time, we tell you why before the deadline and answer within five more business days for questions or eight more for other requests. If the law that applies to you sets a shorter period, we follow it. If a claim is incomplete we will ask you for the missing information within five business days.

   Complaints. If you are not satisfied with our answer, you can complain to the data protection authority of the country where you live or work, or of the country where we are established. Please contact us first, so we can try to solve it.

8. Children

   This site is meant for investors, partners and professionals. It is not directed to children and we do not knowingly collect personal data from anyone under eighteen. If you believe a minor has sent us data, write to info@devspeak.dev and we will delete it.

9. Security

   Pages are served over encrypted connections (HTTPS), the contact form is protected by a bot check and rate limits, and access to our mailbox is restricted. No system is completely secure, so we cannot guarantee absolute security.

10. Changes to this notice

    We will post any change on this page with a new date and version. If a change materially affects how we use data you already gave us, we will ask for your authorization again where the law requires it.