1. Introduction
DevKey Technologies (“DevKey”, “we”, “us”, or “our”) is a Pakistan-based software house headquartered in Islamabad. We build web, mobile, desktop, AI, and IoT solutions for clients worldwide. This Privacy Policy describes how we handle personal data collected through devkeytech.com, our client portals, and any related services. By using our website or engaging us for services you agree to the practices described here.
2. What we collect
We collect only what we need to operate our business and deliver the services you ask for. The categories below cover the data we may process:
- Contact information — name, email address, phone number, company name, and any other details you submit through forms, email, or meetings.
- Project information — requirements, briefs, files, credentials, and any material you share with us so we can deliver the engagement.
- Account & billing data — invoicing details, tax identifiers, and payment references for active engagements.
- Usage data — pages visited, referring URLs, device and browser type, IP address, and aggregated analytics events from our website.
- Communications — emails, chat messages, and meeting notes you exchange with us.
3. How we use it
We process personal data on the legal bases of contract performance, legitimate interests, legal obligation, and consent (where required). Specifically, we use it to:
- Respond to enquiries and provide quotes.
- Deliver, support, and improve the software services you contracted us for.
- Issue invoices, take payments, and meet our accounting obligations.
- Operate, secure, and improve our website and internal systems.
- Send transactional or service-related notices about your project.
- Send marketing updates only where you have opted in, with a clear way to unsubscribe at any time.
4. Cookies
Our website uses cookies and similar technologies. We use strictly necessary cookies to keep the site working, preference cookies to remember your locale and theme, and analytics cookies to understand how the site is used. You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality.
Where required by law, we will request consent before dropping non-essential cookies and will respect your choice.
5. Third-party services
We rely on a small set of trusted vendors to run our website and operations. Each processes data only as needed for its stated purpose and is bound by its own privacy terms.
- Supabase — database, authentication, and storage for our internal applications and client portals.
- Vercel — hosting, edge delivery, and serverless compute for this website.
- Cloudflare — DNS, content delivery, and protection against abusive traffic.
- OpenAI — AI model APIs powering specific assistant or automation features.
- Google Analytics — aggregated traffic analytics with IP anonymisation enabled where supported.
We do not sell your personal data to anyone.
6. Data retention
We keep personal data only for as long as needed to deliver our services, comply with legal and tax obligations (typically up to seven years for accounting records under Pakistani law), resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port the personal data we hold about you, and to object to certain processing. Under the EU and UK GDPR you also have the right to withdraw consent and to lodge a complaint with your local data protection authority.
To exercise any of these rights, write to us at the contact address below. We will respond within a reasonable timeframe and at the latest within thirty days.
8. International transfers
We are based in Pakistan and our vendors operate infrastructure in multiple regions including the European Union, the United Kingdom, and the United States. When personal data is transferred across borders we rely on the safeguards offered by these vendors, such as Standard Contractual Clauses and equivalent mechanisms, to ensure an adequate level of protection.
9. Children’s privacy
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
10. Compliance & legal basis
We aim to align our practices with the EU and UK General Data Protection Regulation (GDPR), and we operate in accordance with Pakistan’s Prevention of Electronic Crimes Act, 2016 (PECA) and other applicable local laws. This document is provided for general information and does not constitute legal advice; for a binding interpretation of your rights, consult a qualified lawyer in your jurisdiction.
11. Contact
Questions, requests, or concerns about this Privacy Policy can be sent to:
- Email: dev.dilawar@cruxlabs.com.au
- Address: DevKey Technologies, Islamabad, Islamabad Capital Territory, Pakistan
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised “last updated” date. Material changes will be highlighted on our website or notified to you by email where appropriate.