# Privacy Policy | DevsReady > How DevsReady processes personal data on devsready.io: the contact and application forms, cookieless audience measurement, business contacts, CRM and email, service providers, retention and your GDPR rights. URL: https://devsready.io/privacy Last updated: 2026-11-12 How we handle personal data ## Privacy Policy This policy explains which personal data DevsReady collects through devsready.io, through our contact and application forms and through our business development work, why we use it, who helps us process it, how long we keep it and how you can exercise your rights under the GDPR. It describes what our systems actually do today. Last updated: 12 November 2026 ### Who we are DevsReady is a software development company from Romania and the controller of the personal data described in this policy. Address: Iuliu Maniu Boulevard 13D, Bucharest, Romania. Email: [contact@devsready.io](mailto:contact@devsready.io). Phone: +40-735-891-972. This policy covers devsready.io and the data we process in our internal admin tool and CRM. ### The website contact form When you send the contact form, your browser sends the data to our own API at https://api.devsready.io. We receive: - **What you type :** your name, email address and phone number (at least one of the two), company, role, type of collaboration, timeline, your message, and how you heard about us (with the detail you add when you choose "Other"). - **Where you came from :** the campaign parameters of the link that brought you to the site (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the address of the external page that linked to us, the first page you opened on devsready.io and the name of the site (devsready.io). Your message is stored as a "possible lead" in our internal admin tool. Our team is told about it by a push notification on their phones that contains your name ("New lead: "). Someone from our team reviews it, replies to you and may convert it into a lead in our CRM (see [CRM and email](https://devsready.io/privacy#crm-and-email)). Why we use it: to answer your request and to take the steps you ask for before a possible contract (Art. 6(1)(b) GDPR), and our legitimate interest in knowing which channels bring us enquiries (Art. 6(1)(f) GDPR). Giving us your data is voluntary, but without a name, a way to contact you and a message we cannot answer. If you write to [contact@devsready.io](mailto:contact@devsready.io), your email is handled by our email provider, Microsoft 365. If you choose to message us on WhatsApp, WhatsApp processes that conversation under its own terms and privacy policy. ### Job and internship applications When you apply for a job on the [Careers](https://devsready.io/join-us) page, send a general application, or apply for an internship on the [Community](https://devsready.io/community) page, we receive your name, email address, phone number, the text you write and, if you attach it, your CV (stored in our database). Our team receives a push notification with your name ("New candidate: "). If we add you to our candidate pool, we may use the AI service of Anthropic to extract the technologies from your CV or to prepare a CV in our standard format. Before the CV text is sent, your email address, phone numbers, links (such as LinkedIn or GitHub) and your name are masked. Why we use it: to assess your application and to take the steps you ask for before a possible contract (Art. 6(1)(b) GDPR). ### Audience measurement We count page views with our own first-party tool. On each page view, your browser sends a small request to https://api.devsready.io/api/public/website-visits with the page address, the address of the previous page, the site language (en) and your screen width. Nothing is sent if your browser sends Do Not Track or Global Privacy Control, or if it is controlled by automation software. From that request we store only: - **Page :** the page path, without the query string. - **Source :** the domain of an external referring site (never the full address), the UTM campaign parameters and, for ad clicks, only the type of the click identifier (for example Google Ads or LinkedIn), never the identifier itself. - **Device :** the device class (mobile, tablet or desktop) and the language. - **Anonymous visitor hash :** a hash computed from your IP address, your browser user agent, the site and a secret that changes every day. It lets us estimate unique visitors within one day only; it cannot be linked across days and the IP address and user agent themselves are not stored. Your IP address is used only in memory, to compute that hash and to limit the number of requests (rate limiting with a hashed key). This data is deleted automatically after 13 months. Why we use it: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR). ### Cookies and browser storage devsready.io sets no cookies and uses no advertising, social media or third-party analytics trackers. When you open the site, it saves in your browser session storage (key "devsready-attribution") the campaign parameters of the link that brought you, the external referring page and the first page you opened. It stays in your browser, is deleted when you close the tab and is sent to us only if you submit the contact form, as described above. ### Hosting, server logs and fonts The website is hosted on Amazon Web Services (Amazon S3 and the Amazon CloudFront content delivery network). Like any web server, CloudFront records standard access logs for each request: your IP address, the date and time, the requested address, the referring page and your browser user agent. We use these logs to keep the site secure and working and to see which search engines and AI crawlers visit it. They are stored in our AWS account in the EU (Ireland) and deleted automatically after 90 days. Why: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). The site loads its fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To deliver the fonts, your browser connects to Google, which receives your IP address and browser details. ### Business contacts from public and commercial sources This section is for people we contact without a prior request from them. We look for companies that are hiring software developers, using public job advertisements. We then research the company (not any person) with the AI service of Anthropic, using public information about the company. No personal data is sent to the AI for that research. For a company that fits, we may obtain the business contact details of relevant decision makers from Apollo.io, a B2B contact database (this is the source of the data, Art. 14(2)(f) GDPR): name, job title, company, work email address, LinkedIn profile address, city and country, and, only when we specifically request it, a work phone number. - **How we contact you :** only by individual emails, written and sent manually by a person from our team. We do not send automated email campaigns or sequences. - **Privacy notice :** our first email to you includes a short notice explaining where we found your details, why we contact you and how to object. - **If we do not contact you :** possible leads found this way that we do not convert into leads are deleted automatically after 30 days. - **If you object :** we stop and add you to a suppression list, so that we do not contact you again. The list stores only one-way hashes of your email address or LinkedIn profile address, not the values themselves. Why we use it: our legitimate interest in business-to-business communication about services that may be relevant to your company (Art. 6(1)(f) GDPR). We have weighed that interest against your rights and limit the data to work contact details. You can object at any time, see [Your rights](https://devsready.io/privacy#your-rights). ### CRM and email Leads (people from the contact form, from our business development work or from our own contacts) and our email conversations with them are kept in our internal CRM. Emails are sent and synchronized through Microsoft 365 (Exchange Online, Microsoft Graph). When a new person joins an email conversation that is already linked to a lead, their address may be added as a possible lead for our team to review. Our team may ask the AI service of Anthropic to draft an email. For that draft, the AI receives the lead's name, company and position and the notes and emails our team selects. Phone numbers, IBANs and email addresses in those texts are removed automatically before they are sent. Email data in the CRM (messages and AI drafts) is deleted automatically 24 months after the last interaction with the lead; our team is warned 30 days before. You can ask us at any time for a copy of your data or for its deletion. ### Service providers we use We do not sell personal data. We share it only with these providers, which process it on our behalf under their data processing terms: - **Amazon Web Services :** hosting of the website (Amazon S3, Amazon CloudFront) and of our API, database and admin tool, in the AWS region eu-west-1 (Ireland). - **Microsoft (Microsoft 365) :** our email, including the emails sent and synchronized by our CRM. - **Anthropic (Claude API) :** AI drafting of CRM emails, AI research about companies, and the processing of masked CV text described above. - **Google (Firebase Cloud Messaging) :** push notifications to our team's phones, which contain the name of a new lead or candidate. Apollo.io is the source of the business contact data described in [Business contacts](https://devsready.io/privacy#b2b-prospecting); we send it the company we are researching and the identifiers of the people it returns. Google Fonts is described in [Hosting, server logs and fonts](https://devsready.io/privacy#hosting-and-fonts). ### International transfers Some of these providers (Anthropic, Apollo.io, Microsoft, Google and Amazon Web Services) are companies based in the United States, so personal data may be processed outside the European Economic Area. For these transfers we rely on the EU Standard Contractual Clauses (and, where applicable, the EU-US Data Privacy Framework). ### How long we keep data - **Contact form messages :** kept while we handle your request and, if we start working together, for the business relationship. They are not deleted automatically today; ask us and we delete them. - **CRM email data :** deleted automatically 24 months after the last interaction. The lead record itself (name, company, contact details, notes) is kept for the business relationship or until you ask us to delete it. - **Business contacts we do not convert :** deleted automatically after 30 days. - **Suppression list :** kept as long as needed to respect your objection (hashes only). - **Job and internship applications :** kept for the recruitment process and, if we add you to our candidate pool, while you are in it. They are not deleted automatically today; ask us and we delete them. - **Audience measurement :** 13 months. - **Website access logs :** 90 days. - **Session storage in your browser :** until you close the tab. ### Your rights Under the GDPR you have the right to: - **Access :** get a copy of the personal data we hold about you. - **Rectification :** have inaccurate data corrected. - **Erasure :** have your data deleted. - **Restriction :** ask us to limit how we use your data. - **Portability :** receive the data you gave us in a commonly used format. - **Objection :** object to processing based on our legitimate interest, and to direct marketing at any time. When you object to being contacted, we stop and add you to our suppression list. - **Complaint :** complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro, B-dul G-ral. Gheorghe Magheru 28-30, Bucharest), or to the data protection authority in your EU country. To exercise a right, email [contact@devsready.io](mailto:contact@devsready.io) or reply to any email from us. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. ### Changes to this policy When our processing changes, we update this page and the "Last updated" date at the top. ### Contact For any question about this policy or your personal data, write to [contact@devsready.io](mailto:contact@devsready.io), call +40-735-891-972 or write to DevsReady, Iuliu Maniu Boulevard 13D, Bucharest, Romania. BOUTIQUE SOFTWARE ENGINEERING - [Fintech software](https://devsready.io/fintech-software-development) - [Banking software](https://devsready.io/banking-software-development) - [Payments](https://devsready.io/payment-systems-integrations) - [Java modernization](https://devsready.io/application-modernization) - [ERP integration](https://devsready.io/erp-integration) - [Mobile apps](https://devsready.io/mobile-app-development) - [Case studies](https://devsready.io/case-studies) - [FAQ](https://devsready.io/faq) - [Community](https://devsready.io/community) - [Careers](https://devsready.io/join-us) - [Privacy policy](https://devsready.io/privacy) - [DevsReady Romania: custom software for Romanian companies (devsready.ro)](https://devsready.ro/) Iuliu Maniu Boulevard 13D, Bucharest Romania [contact@devsready.io](mailto:contact@devsready.io) | [+40 735 891 972](tel:+40735891972) © 2026 DevsReady - All Rights Reserved.