Privacy Policy

Scope and who we are

This Privacy Policy explains how Deventic collects, uses, discloses, and protects personal information when you visit deventic.ai, contact us, book a demonstration, create an account, or use Deventic's pre-construction analysis, coordination, reporting, and action software.

In this Policy, Services means our website, software, integrations, support, demonstrations, and related services. Customer Content means project information, documents, communications, instructions, and other material submitted to or created through the Services by or for a customer.

Our relationship with business customers

Deventic primarily serves businesses and professional teams. When an organization provides your account or submits information about you, that organization may control the relevant Customer Content. Its agreement with Deventic and its own privacy practices may govern that processing.

For information we process on a customer's instructions, the customer is responsible for providing required notices, establishing a lawful basis, and responding to requests concerning its project data. We will support the customer as required by the applicable agreement and law.

Information we collect

The information we collect depends on how you interact with Deventic.

Account and organization

Name, work email, password or authentication information, organization, role, location, team membership, and account preferences.

Sales and support

Name, work email, company, phone number, subject, preferred contact method, project context, meeting selections, messages, and attachments you send us.

Project and customer content

Parcel and site information, project documents, plans, models, assumptions, decisions, schedules, stakeholders, tasks, communications, scenarios, approvals, and related metadata.

Connected services

If you authorize an integration, account identifiers, authorization tokens, connection status, and the content needed to provide the features you enable.

Technical and usage

IP address, browser and device information, request and authentication logs, feature interactions, timestamps, diagnostics, and security events.

Where information comes from

• You and your organization, including through forms, uploads, instructions, accounts, and support conversations.
• Connected services, when an authorized user enables an integration.
• Public and licensed project sources, including government, regulatory, parcel, land-use, environmental, utility, market, and similar records.
• Automatic collection, through the operation, security, and diagnostics of the Services.
• Partners and professional participants, when they are authorized to contribute to a customer's project.

How we use information

• Provide, authenticate, maintain, secure, and support the Services.
• Organize project information, perform requested analyses, model scenarios, prepare reports, coordinate work, and execute supported authorized actions with their provider outcomes recorded.
• Manage accounts, teams, permissions, integrations, meetings, support requests, and customer communications.
• Monitor reliability, investigate errors, prevent misuse, and improve product performance and usability.
• Develop and improve the Services using aggregated, de-identified, licensed, public, or otherwise permitted information.
• Comply with law, enforce agreements, protect rights and safety, and complete corporate transactions.

We do not use personal information for purposes that are materially incompatible with the reason it was collected without providing appropriate notice or obtaining consent when required.

AI, analysis, and customer content

Deventic processes Customer Content to provide the analyses, coordination, drafting, monitoring, and other functionality a customer requests. AI may help extract, reconcile, interpret, compare, draft, and explain information within the product's defined authority boundaries.

Customer Content is not used to train shared or general-purpose models unless the customer and Deventic expressly agree in writing. Deventic does not treat AI output as a professional determination. Evidence, assumptions, conflicts, unknowns, and required human or professional review remain distinct in the system.

Connected Google services

If you connect a Google account, Deventic may request permission to identify the connected account, read relevant Gmail content, prepare communications, and create drafts through the user-facing features you enable. Deventic stores connection metadata and encrypted authorization tokens needed to maintain that connection.

Deventic uses Google user data only to provide or improve the visible integration features, maintain security, comply with law, or as otherwise permitted with the user's consent. We do not use Google user data for advertising, sell it, or allow humans to read it except with the user's affirmative agreement, when necessary for security, or when required by law.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke Deventic's access through your Google Account permissions. Contact us if you need help deleting integration data held by Deventic.

How we disclose information

We disclose information only as needed for the Services and legitimate business operations:

• Service providers supporting cloud hosting, authentication, database operations, email delivery, diagnostics, security, and customer support.
• Customer-authorized users and participants based on project roles, team membership, permissions, and instructions.
• Integration providers when you connect or use their service.
• Professional advisers, authorities, and other parties when reasonably necessary to comply with law, protect rights or safety, enforce agreements, or complete a financing, merger, acquisition, or sale.

Deventic does not sell personal information. We do not share personal information for cross-context behavioral advertising or use Customer Content to advertise to you.

Cookies and similar technologies

We use technologies needed to keep accounts signed in, protect sessions, remember limited interface choices, and diagnose reliability and security issues. We do not currently use third-party advertising cookies. Read the Cookie Policy for the current categories and available controls.

How long we keep information

We retain information for the period reasonably necessary to provide the Services, maintain project and decision records requested by the customer, satisfy contractual commitments, secure the platform, resolve disputes, and meet legal obligations.

Retention depends on the type of information and context. Account and Customer Content generally follow the applicable customer agreement, administrator instructions, and product settings. Sales, support, and transaction records are retained while the relationship or inquiry remains active and as needed for legitimate business records. Security and diagnostic records are kept for a limited period appropriate to their purpose. Backup copies may remain until they are overwritten through ordinary backup cycles.

How we protect information

Deventic uses administrative, technical, and organizational safeguards designed for the nature of the information and the Services. These include access controls, separation of customer scope, encryption in transit, protected credentials and integration tokens, logging, and review of consequential actions.

No service can guarantee absolute security. Customers are responsible for managing their users, permissions, devices, and the information they choose to submit. Additional security and procurement information is available through our Security and Trust page or by contacting us.

Your choices and privacy rights

Depending on where you live and how you use the Services, you may have rights to request access, correction, deletion, restriction, objection, or a portable copy of personal information. You may also have the right to withdraw consent or appeal a decision concerning a request.

Send requests to support@deventic.ai or call (262) 391-2064. We may need to verify your identity and authority. If your information belongs to a Deventic customer's account or project, please contact that organization first; we may refer the request to the customer.

You may unsubscribe from non-service marketing messages using the link in the message. Account, security, project, support, and transaction communications may still be necessary to provide the Services.

Additional notice for United States residents

Applicable state privacy laws may provide additional rights concerning the categories of personal information described above. Deventic may collect identifiers, professional and commercial information, internet or network activity, approximate location derived from IP address, and project information that could relate to an individual. We use and disclose these categories for the business purposes described in this Policy.

We do not sell personal information or share it for cross-context behavioral advertising. Deventic will not discriminate against you for exercising an applicable privacy right. An authorized agent may submit a request where permitted by law, subject to verification.

International processing

Deventic and its service providers may process information in the United States and other countries where they operate. Those countries may have different privacy laws. Where required, we use appropriate contractual or other safeguards for cross-border transfers.

Children

The Services are designed for businesses and professionals and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the Services. If you believe a child has provided information, contact us so we can review and delete it as appropriate.

Changes to this Policy

We may update this Policy as the Services and legal requirements evolve. We will post the revised version here and update the date above. If a change materially affects how we use information already collected, we will provide additional notice or seek consent when required.