Privacy notice

Who is responsible

Devspeak S.A.S. is the controller of the personal data described in this notice: the company that decides why and how it is processed. Devspeak S.A.S. is a simplified stock company (S.A.S.) incorporated in Colombia, Cll. 7D # 43A - 40, Piso 8, Medellín, Antioquia 050022, Colombia. Contact for privacy questions and requests: info@devspeak.dev.

What we collect and why

Request data. To deliver pages and block abuse, our hosting provider processes standard request data such as IP address, browser type and the page requested. We do not use it to identify you.

Analytics, only with your consent. If you choose “Accept analytics”, we load Google Tag Manager and Google Analytics, which set cookies to count visits and show which pages are used. Nothing from Google loads until you accept, and advertising features stay off. Google signals and ad personalization are off, and Google keeps the data for 14 months. If your browser sends a Global Privacy Control signal, we treat it as a rejection. Your choice is kept in your browser's local storage (labs-consent); you can change it at any time with “Cookie settings” at the bottom of every page. The cookies are listed in our cookie policy.

Visit statistics without cookies. This website (labs.devspeak.dev) also counts visits with Umami, an analytics tool we host on our own servers. It sets no cookies and stores nothing on your device. It records the page, the website or campaign that referred the visit, browser, operating system, device type, language and a country derived from the IP address. It does not store the IP address, and it identifies a visit only with a code that changes periodically, so visits cannot be linked to you over time. We use these totals to understand which pages and sources bring visitors and to improve the site.

Contact form. When you send a message, your name, work email, company, region and the description of your workflow are delivered once by email to info@devspeak.dev so we can reply. They are not stored in any database, file or analytics tool on this site. A bot check runs before sending; it does not read the form fields.

Booking a call. “Book a call” opens Cal.com, a scheduling service, in a new tab. What you enter there is processed by Cal.com and reaches us as a calendar booking; Cal.com's own privacy policy applies to its pages. The link carries campaign tags (utm parameters) that tell us which button was used; they identify no one.

Free online consultancy chat

What we collect. To start the chat you give us your name, email, phone or WhatsApp number and, if you want, your company. While the conversation is open we keep what you write and the assistant's answers. When it ends (you press “End conversation”, or after a period without activity), our AI provider turns it into a short summary and structured notes about your business needs (for example your industry, the process you described, the tools involved, your pains, what success looks like and which of our services fit), together with your diagnosis if you received one; that is what we keep. The messages themselves are deleted a few days after this processing, and never later than seven days after the conversation ends. We also record your consent (which text you accepted, its version, the date, the page language, a keyed hash of your IP address and your browser's user agent), a hash of your IP address for rate limits, and technical data about each answer (model, tokens used, cost, timing). A cookie (labs_chat) keeps your chat session on this device for up to thirty days; it holds a random identifier, not your details.

Why. (1) To provide the chat and answer you; (2) to improve our service and for research and development: to understand which problems businesses want to solve, to create new products and services, to improve the knowledge of our assistants, and to review the quality of the answers; (3) to follow up on your request if you ask us to. A person from our team may read conversations for these purposes. Only if you also tick the separate, optional marketing box will we contact you later by email, WhatsApp or phone with proposals and news; without it we do not use your details for marketing. You can withdraw either authorization at any time by writing to info@devspeak.dev.

Who answers. The assistant is an AI system. Its answers are generated by Anthropic (United States), which processes the conversation on our behalf to produce each answer under its commercial terms, which do not allow it to train its models on that data. Our database runs on servers we operate at Amazon Web Services in the United States. When a conversation ends we send one short internal email through Resend to our team (info@devspeak.dev, our founder, and the inbox of our AI operations assistant, hosted by AgentMail in the United States) with your name, company, preferred contact channel, marketing choice, the summary, the diagnosis and the structured notes; it never contains the conversation itself or your contact details. If you press “Email it to me”, we send your diagnosis to the email address you gave us. The chat form uses the same bot check as the contact form (Cloudflare Turnstile). By using the chat you authorize these transfers to the United States.

What we do not do. The assistant does not quote prices, make offers or take decisions about you; any proposal comes from a person, in writing. Please do not share sensitive data (health, identity numbers, financial or bank details, passwords) or other people's personal data in the chat.

Retention. We keep chat leads, the summaries and structured notes of their conversations, and consent records for up to twenty-four months from your last conversation, then delete or anonymize them (the raw messages are deleted within days, as described above), unless you ask us to delete them earlier or a law requires us to keep them. We may keep the proof of your authorization for as long as the law requires.

Analytics on the chat page. Only if you accepted analytics, we count three events: that the chat form was sent (with the page language and whether the marketing box was ticked), that a message was sent (its number in the conversation), and that a contact button was used (call, WhatsApp or email). These events never include your name, contact details or what you write.

Your rights over chat data are the same as in “Your rights” below. Write to info@devspeak.dev to know, update, correct or delete your data, to see the authorization you gave, or to stop marketing contact.

Legal basis and authorization

By sending the contact form or booking a call you authorize Devspeak S.A.S. to process the data you give us to answer you and follow up on your request. Analytics runs only on your consent, which you can withdraw at any time. Where the law allows it, we also rely on our legitimate interest in operating and securing the site.

We do not sell personal data, share it for cross-context advertising, or use it to make automated decisions about you.

Processors

We use these service providers, which process data on our behalf and under their own security commitments: Vercel (hosting, United States); Amazon Web Services (servers we operate for the consultancy chat database, United States); Anthropic (AI answers and summaries in the consultancy chat, United States); AgentMail (inbox of our AI operations assistant, which receives the chat summary email, United States); Resend (delivery of contact-form emails, United States; it keeps a send log for its retention period); Cloudflare Turnstile (bot check on the contact form); Google (Tag Manager and Analytics, only after you accept analytics, United States); Cal.com (scheduling, when you book a call). Our mailbox provider stores the emails we receive.

International transfers

We and our providers store and process data mainly in the United States. This means your data may be processed outside the country where you live, under laws that may protect personal data differently. Each provider is bound by a contract that requires it to protect the data and to use it only to provide its service to us, and we give each one only what it needs. You can ask us for more information at info@devspeak.dev.

Retention

We keep contact emails and bookings while we need them to handle the conversation and any follow-up, and delete them when they are no longer needed, unless a law requires us to keep them longer. Request data is kept by our hosting provider for its short log retention period. Analytics data is kept by Google for 14 months, then deleted. Your cookie choice stays in your browser for 12 months, then we ask again.

Your rights

Depending on the law that applies to you, you have the right to:

• know whether we process your personal data, and access it free of charge;
• correct or update data that is inaccurate or incomplete;
• have your data deleted when we have no legal or contractual duty to keep it;
• receive your data in a portable, commonly used format, or have it sent to another provider;
• object to, or ask us to restrict, certain processing, including processing based on our legitimate interests;
• withdraw your consent or authorization at any time, and ask for proof of the authorization you gave;
• be told how we have used your data;
• not be treated differently for exercising these rights.

We do not sell personal data or share it for cross-context behavioral advertising, and we do not take decisions about you based solely on automated processing that have legal or similarly significant effects.

How to exercise them. Write to info@devspeak.dev from the email address you gave us, or tell us how we can verify your identity. We answer questions about your data within 10 business days and requests to correct, update or delete data or to withdraw your authorization within 15 business days. If we need more time, we tell you why before the deadline and answer within 5 more business days for questions or 8 more for other requests. If the law that applies to you sets a shorter period, we follow it. If a claim is incomplete we will ask you for the missing information within five business days.

Complaints. If you are not satisfied with our answer, you can complain to the data protection authority of the country where you live or work, or of the country where we are established. Please contact us first, so we can try to solve it.

Children

This site is meant for businesses and professionals. It is not directed to children and we do not knowingly collect personal data from anyone under eighteen. If you believe a minor has sent us data, write to info@devspeak.dev and we will delete it.

Security

Pages are served over encrypted connections (HTTPS), the contact form is protected by a bot check and rate limits, and access to our mailbox is restricted. No system is completely secure, so we cannot guarantee absolute security.

Changes to this notice

We will post any change on this page with a new date and version. If a change materially affects how we use data you already gave us, we will ask for your authorization again where the law requires it.