Privacy Policy
What this site collects, who receives it, how long it is kept, and what you can ask us to do about it.
DevPlus LLC (“DevPlus”) operates devplustech.com. This policy says what the site collects, why, who else can see it, how long it is kept, and what you can ask us to do about it.
It covers this website and the inquiries that come through it. It does not cover work performed under a signed client agreement — that work is governed by the agreement itself, and where protected health information is involved, by an executed Business Associate Agreement.
What We Collect
What you give us
The contact form asks for four things:
- Your name.
- A phone number or an email address — whichever you prefer we use.
- Your business name, which is optional.
- A description of the problem: what is broken, or what you want built.
If you call, text, or email the published business line instead, we receive whatever you choose to include.
What the site collects on its own
- Analytics. Pages viewed, time on page, the site or search that referred you, device and browser type, the general geographic area estimated from your IP address, and specific interactions such as tapping the call button. Collected through Google Analytics 4.
- Performance measurement. Cloudflare Web Analytics records page-load timing, the page requested, referrer, country, and browser and device type. Cloudflare adds it to pages as they are served. It uses no cookies and does not follow you between websites.
- Spam-check data. When you submit the form, your IP address and a one-time token go to Cloudflare so it can confirm a person sent it rather than a script.
- Server and network logs. Our hosting infrastructure and Cloudflare record IP addresses, request times, requested pages, and browser identifiers as part of delivering and protecting the site.
What we do not collect
- No payment card or bank details. No transaction happens on this site.
- No accounts, so no usernames and no passwords.
- No advertising, retargeting, or social media pixels.
- No purchased contact data. We do not buy personal information from data brokers or lead vendors for this site.
- No font tracking. Web fonts are compiled into the site and served from our own domain, so reading a page sends no request to Google Fonts.
Do not send sensitive information
DevPlus builds software for healthcare and medical billing operations. The contact form is a general business inquiry channel. It is not a secure channel for protected health information. Do not send patient names, medical records, claim data, Social Security numbers, account numbers, or credentials through the form or by text.
Where an engagement requires DevPlus to handle protected health information, that happens inside a project system under a signed Business Associate Agreement — never through this website. If sensitive information reaches us anyway, we remove it from the intake channel once the conversation has moved to an appropriate place.
How We Collect It
- Directly from you — the contact form, or a call, text, or email to the published business line or address.
- Automatically as you browse — analytics running in your browser, cookies set by that analytics, and logs written by our hosting and network providers.
- From third parties — none. We receive no information about visitors from partners, brokers, or enrichment services.
How We Use It
For these purposes, and no others:
- To answer you. Your name and contact details are used to return your call, text, or email, and to keep the conversation going while we work out whether the project is a fit.
- To scope and quote work. What you describe is read to assess whether DevPlus can build it, what it involves, and what to propose.
- To keep business records. Inquiries, proposals, and the correspondence around them are retained as ordinary records of the business.
- To stop spam and abuse. The IP address and token sent to Cloudflare separate real submissions from bot traffic. Server logs are used to investigate abuse and outages.
- To understand what the site is doing. Analytics shows which pages are read, which service pages bring in inquiries, where visitors give up, and how fast pages load, so we can fix and rewrite the ones that are not working. We read it in aggregate. We do not build a profile of an individual visitor.
- To meet tax and legal obligations. Records tied to actual engagements are kept as long as the law requires.
DevPlus does not sell, rent, or trade personal information. DevPlus does not share it for cross-context behavioral advertising. DevPlus does not operate a marketing email list or newsletter, and does not add people who use the contact form to one.
DevPlus uses AI-assisted development tooling in its work. It does not submit client-confidential material or protected health information to third-party AI services, and contact-form content is not used to train any AI model.
Who Receives It
We share information only with the providers that make the site work. Each one, and what it gets:
| Who receives it | What they get | Why |
|---|---|---|
| Pages viewed, events, device and browser details, approximate location from your IP, analytics cookie identifiers | Google Analytics 4 — measuring which pages are read and which bring in inquiries | |
| Cloudflare | Your IP address, user agent, and a one-time challenge token when you submit the form; page-load performance data; request metadata for all traffic | The spam check on the contact form, Cloudflare Web Analytics, content delivery, and network security |
| Discord | The contents of your contact submission — name, phone or email, business, and your message | Delivering the submission to a private DevPlus channel so it is seen and answered |
| No one else | Server logs, including IP address and request metadata, stay on infrastructure DevPlus runs | The site is self-hosted, so logs are not handed to a third-party hosting platform |
We also disclose information where the law requires it — a subpoena, court order, or lawful government request — and where disclosure is necessary to investigate fraud or protect the rights and safety of DevPlus or others. If DevPlus is ever sold or merged, business records transfer with it, and this policy continues to apply until it is replaced by one you are told about.
Contact submissions arrive in a Discord channel only DevPlus can read. Discord is a consumer messaging platform and is not covered by a Business Associate Agreement. It is appropriate for ordinary business inquiries and inappropriate for protected health information — which is why the section above tells you not to send it.
Where It Is Processed
DevPlus stores and processes information in the United States on servers it runs itself. Cloudflare operates a global network, so a request may pass through a data center outside the United States before it reaches those servers.
DevPlus is a United States business serving United States clients and does not target the European Economic Area or the United Kingdom. If you contact us from a jurisdiction with cross-border transfer rules, your information will be transferred to and processed in the United States. Our providers maintain their own transfer mechanisms in their data processing terms.
For visitors in those jurisdictions, the grounds we rely on are: steps taken at your request before entering a contract, for answering your inquiry; our legitimate interest in site security and in understanding how the site performs; and legal obligation, for tax and accounting records.
How Long We Keep It
| What | How long | Why |
|---|---|---|
| Contact submissions | Kept in the intake channel as a business record. Deleted on request where there is no active engagement and no legal reason to keep it. | Following up, and a record of who asked for what |
| Correspondence tied to an engagement | The life of the relationship, then the period required for tax, accounting, and legal purposes | Tax and accounting obligations, and legal defense |
| Google Analytics data | Event-level data for 2 months and user-level data for 14 months, the retention setting on our property. Aggregate reports persist separately. | Measuring the site |
| Cloudflare Web Analytics data | Held by Cloudflare under its own schedule. DevPlus keeps no copy. | Page-load performance |
| Spam-check data | Held by Cloudflare under its own schedule. DevPlus keeps no copy. | Blocking automated submissions |
| Server and network logs | Short-term, on infrastructure DevPlus runs, plus Cloudflare’s own network logs | Delivery, security, and troubleshooting |
We do not keep data in case it becomes useful. If you ask us to delete an inquiry and there is no engagement or legal reason to keep it, we delete it.
Your Rights and Choices
You can ask us to:
- Tell you what we hold about you and where it came from.
- Give you a copy of it in a readable format.
- Correct anything inaccurate.
- Delete it, where no active engagement, contract, or legal requirement obliges us to keep it.
- Stop contacting you. Say so and we stop. There is no marketing list to unsubscribe from.
Email [email protected] with what you want and enough detail to find the record — the name and the phone number or email address you used. We respond within 30 days. We may ask a question to confirm you are the person whose information is at issue. There is no charge, and asking changes nothing about how we treat you.
DevPlus offers these rights to every visitor as a matter of practice. We are a small Arizona business below the thresholds that trigger the California Consumer Privacy Act, and we do not target the EEA or the United Kingdom. We honor the requests regardless.
Do Not Sell or Share. DevPlus does not sell personal information and does not share it for cross-context behavioral advertising. There is no opt-out link because there is no such sale or sharing to opt out of.
Complaints. If you think we have mishandled your information, email us first. You may also contact the Arizona Attorney General’s Office, or the data protection authority for your jurisdiction if you are outside the United States.
Cookies and Tracking
The site sets no cookies of its own. The cookies present come from two providers:
- Google Analytics sets two identifiers — _ga and a second one ending in our property ID — so repeat visits are counted once and page views group into a session. These can last up to two years.
- Cloudflare may set a short-lived security cookie as part of bot protection and the spam check on the contact form. Scripts cannot read it. Cloudflare Web Analytics sets no cookie at all.
You can block or delete cookies in any modern browser, refuse third-party cookies specifically, or use a tracking blocker. Nothing on this site breaks if you do. There is no cookie consent banner because, for a United States business serving United States clients, none is required.
Browsers send Do Not Track signals inconsistently and no accepted standard exists for honoring them, so we do not act on them. We do not track visitors across other websites in any case.
Security
- The site is served over HTTPS. Traffic between your browser and the site is encrypted in transit.
- The site holds no visitor database. There is no stored table of contact submissions on the web server to be breached.
- Access to the intake channel and to the hosting and analytics accounts is limited to DevPlus and protected by strong authentication.
- Credentials and webhook addresses are held as server-side environment variables and are never exposed to the browser.
- Automated submissions are filtered before they reach us.
No system is completely secure, and we will not claim otherwise. If we become aware of a breach affecting your personal information, we will notify the people affected and any regulator required by Arizona law, without unreasonable delay.
Children
This is a business-to-business site. It is not directed to children, and we ask that only people 18 or older submit inquiries. DevPlus does not knowingly collect personal information from anyone under 13, and deletes it if we learn we have. A parent or guardian can email us and we will remove the record.
Changes to This Policy
We update this policy when the site’s data practices change — a new analytics tool, a new intake channel, a new provider. The version in effect is the one posted here, dated at the top.
For a material change — a new category of data, a new purpose, a new class of recipient — we post the updated policy at least 30 days before it takes effect, and where we hold your contact details and the change affects information you already gave us, we tell you directly.
Other Provisions
- Third-party links. This site links to external sites, including GitHub and LinkedIn. They have their own practices and we are not responsible for them.
- Client project data. Data held inside systems DevPlus builds for a client belongs to that client and is governed by their agreement and policy, not this one.
- Governing law. This policy is governed by the laws of the State of Arizona, without regard to conflict-of-law rules.
Contact
DevPlus LLC, an Arizona limited liability company, Scottsdale, Arizona, United States.
Privacy questions and requests: [email protected] or (623) 252-4330. We respond within 30 days.