Privacy Policy

Effective Date: October 6, 2026

1. Introduction

Welcome to DevFrontier ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, process, and disclose your information when you visit our website, use our enterprise AI products (including AgentFrontier, Evia, and Avero), or interact with our services.

This Privacy Policy is designed to comply with applicable data protection laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India), as well as global standards like the General Data Protection Regulation (GDPR) for our international users.

2. Information We Collect

We collect information to provide better services to our users and enterprise clients. The types of information we collect include:

• Personal Information: Information that can be used to identify you, such as your name, email address, phone number, company name, and job title when you register for an account, request a demo, or contact us.
• Technical & Usage Information: When you access our platform, we automatically collect internet protocol (IP) addresses, browser types, device information, operating systems, and data about your interactions with our website (e.g., pages viewed, time spent).
• Enterprise Application Data: When you deploy our products (AgentFrontier, Evia, Avero), we process metadata, API logs, and configuration data necessary to facilitate AI agent execution, governance, and data engineering. We process this strictly as a data processor based on your enterprise configurations.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, maintain, and improve our website and enterprise AI platforms.
• To process and complete transactions, and send related information including onboarding materials and invoices.
• To manage your account, provide customer support, and respond to technical inquiries.
• To enforce our terms of service, Evia governance policies, and prevent fraudulent or unauthorized access.
• To comply with legal obligations and resolve any disputes that we may have.

4. Cookies and Tracking Technologies

Our website uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze website traffic, and understand user behavior. You can control the use of cookies at the individual browser level. If you reject cookies, you may still use our website, but your ability to use some features or areas may be limited.

5. How We Share and Disclose Information

We do not sell, rent, or trade your personal information to third parties. We only share your data in the following circumstances:

• Service Providers: We may share information with trusted third-party vendors, cloud hosting providers, and authorized LLM providers who assist us in operating our platform. These providers are bound by strict confidentiality and data protection agreements.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with legal proceedings, court orders, or government requests.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. You will be notified of any such change in ownership.

6. International Data Transfers

DevFrontier operates globally. Your information may be transferred to, stored, and processed in India, the United States, or other countries where we or our service providers maintain facilities. By using our services, you consent to the transfer of information to countries outside your country of residence. For users in the European Economic Area (EEA), we rely on legally provided mechanisms (such as Standard Contractual Clauses) to lawfully transfer data across borders.

7. Data Security

We implement industry-standard technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction. This includes enterprise-grade encryption for data in transit and at rest, role-based access controls, and continuous security monitoring.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Once the data is no longer necessary, it is securely deleted or anonymized.

9. Your Privacy Rights

Depending on your jurisdiction (such as under the GDPR, CCPA, or DPDP Act), you may have the following rights regarding your personal data:

• The right to access and request copies of your personal data.
• The right to rectify inaccurate or incomplete information.
• The right to request the deletion or erasure of your personal data.
• The right to restrict or object to our processing of your data.
• The right to data portability.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframe mandated by applicable law.

10. Children's Privacy

Our services are designed for enterprise and business use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to securely delete such information.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the updated policy on this page and updating the "Effective Date" at the top. We encourage you to review this policy periodically.

12. Contact Us & Grievance Officer

If you have any questions, concerns, or grievances regarding this Privacy Policy or our data practices, please contact our Grievance Officer at: