Privacy Policy
What this site collects, who receives it, how long it is kept, and what you can ask us to do about it.
DevPlus LLC (“DevPlus,” “we”) runs devplustech.com. This policy covers the site, its free site checker, and the calls, texts, and emails people send us.
It doesn’t cover work we do for a client. A signed agreement covers that. Where patient information is involved, a signed Business Associate Agreement covers it too.
The Short Version
- We collect what you send us, plus basic analytics about how the site is used.
- The contact form goes to a private Discord channel. There is no database of visitors.
- The site checker doesn’t store the address you check.
- We don’t sell your information, and we don’t run a mailing list.
- Don’t send patient information through the form or by text.
What You Give Us
The contact form asks for four things:
- Your name.
- A phone number or an email address, whichever you want us to use.
- Your business name, if you want to give it.
- What’s broken, or what you want built.
If you call, text, or email us instead, we get whatever you choose to say. Calls and texts to (623) 252-4330 go through our mobile carrier to our phone. Email is handled by Cloudflare, Google (Gmail), and Resend.
The Site Checker
If you use the free check at /check, the web address you type goes to our server. It travels inside the request, not in the page address, so it never shows up in a link or a page view.
Our server then looks the site up the way a browser would. It loads the home page and contact page, reads the security certificate, and asks the domain’s public registry when it is due for renewal. It never fills in a form. The site and its registry see a request from our server, not from you.
- We don’t store the address you check or what we found. The answer goes to your browser and nowhere else.
- Your IP address is held in our server’s memory for about an hour after your last check. That limits how many checks one visitor can run. Then it is dropped.
- Google Analytics records that a check ran, how many problems it found, and what kinds. It never gets the address.
What the Site Collects on Its Own
- Google Analytics 4. Pages viewed, the site or search that sent you, device and browser, and a rough location from your IP. It also records tapping Call or Text, using the menu, whether the contact form went through, and the result of a site check. It notes when you start a form, but not what you type.
- Cloudflare Web Analytics. How fast each page loads, the page, the referring site, country, and browser. Cloudflare adds this to pages as they are served, so it isn’t in our code. It sets no cookie and doesn’t follow you to other sites.
- The spam check. On the contact page, Cloudflare Turnstile runs in your browser to tell a person from a script. When you send the form, our server passes your IP and a one-time token to Cloudflare to confirm it.
- Logs. Cloudflare records IP addresses, times, and the pages asked for. Our server may too. If a page fails to load, your browser may send Cloudflare a short error report.
We don’t take payments or card details here. There are no accounts or passwords, and no advertising or social media pixels. We don’t buy contact lists. Fonts are served from our own domain, so reading a page sends nothing to Google Fonts.
Patient and Other Sensitive Information
We build software for medical practices and billing companies. The contact form, our phone line, and our email are not secure channels for protected health information.
Don’t send patient names, medical records, claim data, Social Security numbers, account numbers, or passwords that way. Discord, where the form goes, is not covered by a Business Associate Agreement.
When a job involves patient information, we sign a Business Associate Agreement first. The information then stays inside systems set up for that job, never on this website. If sensitive information reaches us anyway, we move the conversation somewhere safe and delete what we can.
How We Use It
- To answer you, and to work out whether we can help.
- To scope and price the job.
- To keep ordinary business records.
- To stop spam and abuse, and to fix outages.
- To see which pages work and which don’t. We read analytics in totals, not as a profile of you.
- To meet tax and legal duties.
We don’t sell, rent, or trade personal information. We don’t run a newsletter, and using the form doesn’t add you to a list.
We use AI tools in our work. That can include reading and sorting the messages you send us. It is one more reason not to send patient information by form, text, or email.
Who Receives It
Only the companies that make the site and our business run. Each one, and what it gets:
| Who | What they get | Why |
|---|---|---|
| Google Analytics 4 gets pages viewed, events, device and browser, and a rough location from your IP. Email you send us is handled by Google (Gmail). | Measuring the site, and our email | |
| Cloudflare | Every visit passes through Cloudflare: your IP, browser, and the page asked for. It also gets page-load timing and the spam check on the contact page. It also handles email you send us. | Delivering and protecting the site, Cloudflare Web Analytics, the spam check, and our email |
| Discord | What you type in the contact form: name, phone or email, business, and your message. | Delivering your note to a private DevPlus channel |
| Resend | Email we send you: your address and what we write. | Sending our email |
| Our phone carrier | Calls and texts to the business line. | Carrying them to our phone |
| AI tools we use | Messages you send us, when we use AI to read or sort them. | Working faster |
| The site you check, and its registry | The address you type into the site checker. They see a request from our server, not from you. | Running the check you asked for |
The site runs on a server DevPlus manages. Each company above works under its own privacy policy.
We also share information when the law requires it, or to deal with fraud or protect someone’s safety. If DevPlus is ever sold, its records go with it, and this policy keeps applying to them.
How Long We Keep It
| What | How long |
|---|---|
| Contact form notes, calls, texts, and emails | Kept as business records. If you ask, we delete what we can find, unless a job or a legal reason means we keep it. |
| Records tied to a job | At least as long as tax and legal rules require. |
| The address you check, and its results | Not stored. Gone once the answer reaches your browser. |
| Your IP address, for the checker’s limit | Held in memory for about an hour after your last check, then dropped. |
| Google Analytics data | Event data for 2 months and user data for 14 months. Reports that count totals are kept longer. |
| Cloudflare data | Kept by Cloudflare on its own schedule. We keep no copy. |
| Server logs | On the server we manage, used only to fix problems and stop abuse. |
We don’t keep things just in case. If you ask us to delete a note and nothing requires us to keep it, we delete it.
Cookies
The site sets no cookies of its own. Google Analytics sets two: _ga and _ga_7NXMBQ62WQ. They let it count a repeat visit once. They last up to 2 years, or less where your browser sets a shorter limit.
Cloudflare Web Analytics and the spam check set none on this site. Cloudflare may add a short-lived security cookie if it decides a visitor needs a bot check.
You can block or delete cookies, or use a tracking blocker. Nothing on the site breaks. There is no cookie banner, because US law doesn’t require one here. We don’t act on Do Not Track signals, since there is no agreed way to honor them.
Your Rights
You can ask us to:
- Tell you what we hold about you, and where it came from.
- Send you a copy.
- Correct it.
- Delete it. We delete what we can find, unless a job, a contract, or the law means we must keep it.
- Stop contacting you.
Email isaac@devplustech.com with the name and the phone number or email you used. We answer within 30 days. We may ask a question to confirm it’s you. It costs nothing, and asking changes nothing about how we treat you.
We don’t sell personal information, so there is no sale to opt out of. If you think we mishandled your information, email us first. You can also contact the Arizona Attorney General.
Security
- The site is served over HTTPS, so traffic to it is encrypted.
- There is no database of visitors or contact notes on the web server.
- Only DevPlus can get into the intake channel and the hosting and analytics accounts.
- Passwords and webhook addresses stay on the server and never reach your browser.
No system is perfectly secure. If a breach exposes your personal information, we will tell you as Arizona law requires.
Where This Applies
DevPlus is an Arizona business serving US clients. Your information is stored and processed in the United States. Cloudflare may route a request through a data center in another country on the way.
We don’t aim this site at Europe or the UK. We are below the size where California’s privacy law applies. We offer the rights above to everyone anyway. Arizona law governs this policy.
This is a site for businesses. It isn’t meant for children, and we ask that only adults contact us. If we learn a child under 13 sent us information, we delete it.
Data inside systems we build for a client belongs to that client, and their agreement covers it. Links to other sites, like our LinkedIn page, follow those sites’ own policies.
Changes
When what the site does changes, we update this page and the date at the top. We won’t use information you already gave us in a new way without telling you first.
Contact
DevPlus LLC, an Arizona limited liability company, Scottsdale, Arizona.
Privacy questions and requests: isaac@devplustech.com or (623) 252-4330.