1. Introduction

DevRabbit IT Solutions Inc. (“DevRabbit,” “we,” “our,” or “us”) is a technology consulting and IT solutions company. DevRabbit provides technology consulting, software and application development, cloud consulting, integration services, AI solutions, enterprise technology services, and related professional services.

This Privacy Policy explains how DevRabbit may collect, use, disclose, retain, and protect personal information when you visit our websites, contact us, request an assessment or consultation, use our products or services, interact with our personnel, apply for employment, or otherwise engage with us.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires consent, we will obtain consent before carrying out processing that requires it.

2. Information We Collect

I.Information You Provide Directly

• Name and contact information, such as business email address, telephone number, and company address.
• Company name, job title, professional role, and other business information.
• Information submitted through contact forms, demo requests, technology assessments, consultation requests, partnership inquiries, and other forms.
• Information contained in communications with DevRabbit, including emails, support requests, feedback, and meeting or project-related communications.
• Account, authentication, and service information where you use a DevRabbit-hosted product, portal, or other service.
• Employment and recruiting information when you apply for a position, including your resume, professional history, skills, education, and contact details.
• Billing, invoicing, and transaction information where applicable.

II. Information Collected Automatically

• IP address and approximate location derived from IP address.
• Browser type, operating system, device type, and device identifiers.
• Pages viewed, links clicked, session information, referral information, and interaction data.
• Cookies, pixels, tags, scripts, and similar technologies.
• Security, diagnostic, and technical log information.

III. Service, Project, and Integration Data

• Depending on the DevRabbit service or project, we may process information provided by a customer or generated through the operation of applications, integrations, APIs, cloud environments, workflows, or other technology solutions. The content and categories of such data are determined by the customer, the relevant project requirements, and the systems being integrated.
• Where DevRabbit processes customer-provided personal data on behalf of a customer, the customer may determine the purposes and means of processing, and DevRabbit will process that data in accordance with applicable contractual instructions and data-protection requirements.

3. Information We Collect From Third-Party Sources

We may receive personal information from third parties where permitted by applicable law, including:

• Customers, clients, and their authorized representatives
• Business partners, technology partners, referral partners, and professional networks.
• Publicly available business and professional sources.
• Recruiting and employment platforms.
• Analytics, advertising, CRM, marketing, and lead-generation providers.
• Third-party applications, platforms, or systems connected to a customer implementation.
• Service providers that support our business operations.

Where required by law, we will provide information about the source of personal data and the purposes and legal basis for processing.

4. How We Use Your Information & Processing Purposes

We may use personal information for the following purposes:

• Responding to inquiries, consultation requests, technology assessments, and other requests.
• Providing, implementing, maintaining, supporting, and improving our services and solutions.
• Managing customer and prospect relationships.
• Delivering software development, integration, cloud, AI, consulting, support, and related professional services.
• Operating and securing websites, applications, portals, APIs, and other technology environments.
• Troubleshooting, diagnosing technical issues, and maintaining service reliability.
• Managing contracts, billing, accounting, tax, and other business administration.
• Communicating about services, product updates, events, educational resources, and other marketing where permitted.
• Recruiting, evaluating, and communicating with job applicants.
• Preventing fraud, abuse, unauthorized access, and security incidents.
• Complying with legal, regulatory, contractual, and professional obligations.
• Analyzing website and service usage to improve user experience, performance, and business operations.

We do not sell personal information for monetary consideration. We adhere to data minimization principles, collecting only what is necessary for these purposes, and we do not use data for purposes incompatible with those stated here without notifying you.

5. Legal Basis for Processing (GDPR)

Where GDPR or another applicable data-protection law applies, DevRabbit will rely on an appropriate legal basis for processing personal data. Depending on the circumstances, these may include:

• Performance of a contract — where processing is necessary to provide requested services, manage an account, support a project, or perform contractual obligations.
• Legitimate interests — where processing is necessary for security, fraud prevention, service improvement, business administration, relationship management, appropriate B2B communications, or protecting legal rights, provided those interests are not overridden by individual rights and freedoms.
• Consent — where consent is required, including for certain non-essential cookies, analytics, marketing communications, or other optional processing.
• Legal obligations — where processing is necessary to comply with applicable legal, tax, accounting, regulatory, security, or law-enforcement requirements.

6. Special Category / Sensitive Personal Data

DevRabbit does not intentionally request special-category personal data through ordinary website contact, marketing, or business-inquiry activities unless there is a specific and lawful reason to do so.

Special categories may include information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data used for identification, health data, or information concerning sex life or sexual orientation.

Customers may, however, configure applications, integrations, or projects that process information containing sensitive or special-category data. Where DevRabbit acts as a processor, such processing will be governed by the applicable customer instructions and contractual terms. Customers are responsible for establishing an appropriate legal basis and, where required, an additional Article 9 condition.

7. Cookies, Consent & Tracking Technologies

DevRabbit may use cookies and similar technologies to operate and secure our websites, remember preferences, understand website performance, measure campaigns, and improve user experience.

• Strictly necessary technologies — required for core website or service functionality.
• Functional technologies — used to remember preferences and settings.
• Analytics/performance technologies — used to understand website traffic and interactions.
• Marketing technologies — used for campaign measurement, audience management, or advertising where applicable.

Where applicable law requires consent, DevRabbit will request consent before placing or using non-essential cookies or similar tracking technologies. Users may manage cookie preferences through available website controls and may also use browser settings to block or delete cookies.

8. Information Sharing & Categories of Recipients

We may disclose personal information to the following categories of recipients, where necessary and permitted by law:

• Cloud hosting, infrastructure, storage, and technology providers.
• Application, integration, API, authentication, monitoring, and security providers.
• CRM, customer-support, communications, analytics, and marketing providers.
• Payment processors, billing providers, and financial institutions where applicable.
• Professional advisers, including legal, accounting, audit, and insurance advisers.
• Recruiting and employment service providers.
• Technology and implementation partners involved in delivering customer solutions.
• Government authorities, regulators, courts, or law-enforcement bodies where disclosure is required or legally permitted.
• Entities involved in a merger, acquisition, financing, restructuring, or sale of assets, subject to applicable law.

Where required, DevRabbit uses contractual confidentiality and data-processing obligations with service providers that process personal data on our behalf.

We do not share personal information with third parties for their independent marketing purposes except where permitted by law and, where required, with your consent.

9. Data Retention & Deletion Criteria

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

• Customer and contact information — retained while the relationship is active and for a reasonable period afterward to support business, contractual, legal, and record-keeping requirements.
• Billing and accounting records — retained for the period required by applicable tax, accounting, and legal obligations.
• Website, security, and technical logs — retained according to applicable operational and security requirements.
• Marketing information — retained until you opt out, withdraw consent where applicable, or the information is no longer needed for the relevant purpose.
• Recruitment information — retained according to applicable employment and recruitment requirements and DevRabbit's internal retention practices.
• Customer data processed as a service provider or processor — retained and deleted or returned according to the applicable agreement, project requirements, and customer instructions.

Specific retention periods should be validated against DevRabbit's internal retention schedule before publication.

When information is no longer required, we will delete, anonymize, or securely dispose of it in accordance with applicable law and our retention procedures.

10. Security

DevRabbit uses administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, and destruction.

The existing DevRabbit privacy policy states that the company uses firewall barriers, encryption techniques, authentication procedures, and other security measures to protect accounts and systems.

Depending on the service and processing activity, safeguards may include:

• Encryption in transit and, where applicable, at rest.
• Authentication and access controls.
• Role-based access controls and least-privilege practices.
• Security monitoring, logging, and incident-response procedures.
• Secure application and API development practices.
• Backup and recovery controls.
• Vulnerability management and security testing.
• Data protection and confidentiality requirements for personnel and service providers.

Specific security controls may vary by service, project, customer environment, and technology stack.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• Right to be informed about the collection and use of your personal data.
• Right of access to personal information we hold about you.
• Right to rectification of inaccurate or incomplete information.
• Right to erasure, subject to applicable exceptions.
• Right to restrict certain processing.
• Right to object to certain processing, including direct marketing.
• Right to data portability where applicable.
• Right to withdraw consent where processing is based on consent.
• Rights relating to certain automated decision-making and profiling.
• Right to lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights, contact DevRabbit using the privacy contact details in Section 18. We may request information reasonably necessary to verify your identity and protect personal information from unauthorized disclosure.

12. Consent Withdrawal & Preference Management

Where we rely on consent, you may withdraw consent at any time. Depending on the activity, you may:

• Use the unsubscribe mechanism in marketing emails.
• Use available cookie-preference controls on the website.
• Contact DevRabbit using the privacy contact details in Section 18.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and does not automatically require deletion where another lawful basis or legal obligation applies.

13. Marketing Communications & Opt-Out  

Where permitted by law, DevRabbit may send business and marketing communications such as service information, product updates, events, educational resources, and company news.

You can opt out of marketing communications at any time by using the unsubscribe mechanism in the communication or by contacting DevRabbit.

Opting out of marketing does not prevent us from sending essential service, transactional, security, contractual, or account-related communications.

14. Automated Decision-Making & Profiling  

DevRabbit may use automation, analytics, and AI-assisted technologies in connection with service delivery, application development, workflow automation, data analysis, customer solutions, security, and business operations.

DevRabbit does not intend to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects without appropriate safeguards where required by law.

If DevRabbit introduces processing that is subject to specific automated-decision-making or profiling requirements, we will provide applicable notices and implement required safeguards and rights.

15. International Transfers & Safeguards

DevRabbit is a US-based company and may process personal information in the United States and other countries where DevRabbit or its service providers operate.

Where personal information is transferred across borders and applicable law requires safeguards, DevRabbit will use a lawful transfer mechanism, which may include an adequacy decision, Standard Contractual Clauses, an applicable certification or framework, or another legally recognized mechanism.

16. Right to Lodge a Complaint  

If you believe DevRabbit has processed your personal information unlawfully, you may have the right to lodge a complaint with the data-protection authority in your country or region.

Where appropriate, we encourage you to contact DevRabbit first so that we can investigate and attempt to resolve your concern. You are not required to contact us before exercising a right to complain where applicable law gives you a direct right to do so.

17. Data Protection Officer / Privacy Contact

• Name: Viswanath Mallichetty
• Email: viswanath.mallichetty@devrabbit.com

18. Children's Data

DevRabbit's existing privacy policy states that its services are not directed to persons under 18.

DevRabbit does not knowingly collect personal information from children where prohibited by applicable law. If we become aware that personal information has been collected unlawfully from a child, we will take appropriate steps to delete it.