linkedin.com/company/devbot

Austin, TX  ·  Monterrey, MX

Privacy Policy

Last updated: August 28, 2026 · Draft pending legal review

Who we are

DEVBOT (“DEVBOT”, “we”, “us”) is a software development company with offices in Austin, Texas (United States) and Monterrey, Nuevo León (Mexico). This policy explains what happens with your information when you visit this website. For anything related to your privacy, you can reach us through the contact form on this site or on LinkedIn.

The short version

  • This site has no accounts and no advertising trackers.
  • Google Analytics runs only if you say yes in the cookie banner — and only once we have enabled it. Nothing analytics-related loads, and no cookie is set, before you agree; saying no is one click. You can change your mind any time via “Cookie settings” in the footer.
  • We may also use Cloudflare Web Analytics, a cookieless page counter that identifies nobody — that one needs no consent.
  • There is one contact form. It is protected by Cloudflare Turnstile and delivered to our inbox by an email service, as described below. If the form is not yet active, it tells you so and points you to LinkedIn instead.
  • The demo videos on this site are hosted on our own domain: pressing play sends nothing to third parties. The site is hosted by Cloudflare.

Data we collect directly: the contact form

The only place this website asks you for personal data is the contact form (“Start a project”). It asks for:

  • Name and work email address (required) — so we know who to answer and where.
  • Company (optional) and the type of service you are interested in — so the right team reads your message.
  • Your message (required).

Purpose: we use this information solely to respond to your inquiry and to conduct any business relationship that follows. We do not sell it, share it for marketing, or add you to mailing lists without your consent.

Retention: we keep the inquiries we receive and the email conversations that follow only as long as needed to handle your inquiry and any resulting business relationship, or as required by law.

Who receives it: when you press send, your submission travels to a small server-side function hosted on Cloudflare (Cloudflare Pages Functions), which checks it for spam and delivers it to our team inbox. The technical delivery is handled by Resend (Plus Five Five, Inc.), an email service that processes the contents of your submission — and technical data such as your IP address — on our behalf in order to deliver it to us. See the Resend Privacy Policy. Along with your message we receive the time you spent filling in the form (an anti-bot signal) and your IP address.

If the form cannot deliver your message (for example, while the delivery service is being set up), nothing you typed is stored by this website; the form keeps your text on screen and points you to our LinkedIn page instead.

Spam protection: Cloudflare Turnstile

To keep bots out of the contact form we use Cloudflare Turnstile, a CAPTCHA alternative designed to be privacy-respecting: in most cases it verifies you without asking you to solve anything. To do its job, Turnstile loads a script from challenges.cloudflare.com and processes technical signals from your browser and device (such as your IP address and browser characteristics) to tell humans and bots apart. It may store a short-lived token in your browser. This only happens when you open the contact form — not on normal browsing. See the Cloudflare Privacy Policy.

Hosting and server logs

This site is served through Cloudflare Pages. Like any web host, Cloudflare receives your IP address, browser information (user agent) and the pages and files you request — including the demo videos — in order to deliver the site and protect it against abuse. Cloudflare may keep short-term technical logs for security and performance purposes. See the Cloudflare Privacy Policy.

Analytics

Google Analytics 4 (Google LLC) helps us understand which of our tools and services resonate: which demos people play, which pages they read, and whether the site leads to conversations. When enabled, it runs only after you accept it in the consent banner — before that, the Google script is not even loaded and no analytics cookie exists (we use Google’s Consent Mode v2 with everything denied by default, and advertising features stay off entirely). While Google Analytics is not enabled on this site, no banner is shown and nothing is measured.

If you accept, Google Analytics sets the cookies _ga and _ga_* (they last up to two years) to tell returning browsers apart, and receives data such as the pages you view, the interactions above, your approximate region, and technical details of your browser and device. Google Analytics 4 does not log or store full IP addresses. We do not send it anything you type into the contact form. Google processes this data on our behalf and may do so on servers in the United States; those transfers rely on recognized mechanisms such as the EU–U.S. Data Privacy Framework and standard contractual clauses. See the Google Privacy Policy and How Google uses information from sites that use its services.

Withdrawing consent: open “Cookie settings” in the footer and choose “No thanks”. Collection stops immediately and we remove the Google Analytics cookies this site set. You can also clear them in your browser at any time.

Cloudflare Web Analytics (Cloudflare, Inc.), when enabled, gives us baseline traffic numbers — page views and load performance — without cookies, without local storage and without identifying or fingerprinting visitors; metrics are aggregated and never used to follow you across sites. Because it stores nothing on your device and identifies nobody, it does not require consent. See Cloudflare Web Analytics.

Demo videos

The product demos on the home page and the AI showcase are muted screen recordings hosted on our own domain. They are not embedded from YouTube or any other video platform, so playing them sends nothing to third parties beyond the request to our host (Cloudflare) described above. On desktop browsers the short montage in the home-page header may start automatically, muted; on phones and tablets, when your system requests reduced motion, or when your connection uses data-saver mode, nothing plays until you press the button.

Fonts, scripts and other assets

All fonts, stylesheets, scripts, images and videos on this site are hosted on our own domain. No font providers or JavaScript CDNs receive data about your visit. The only external scripts are the ones described above: Cloudflare Turnstile (in the contact form), Google Analytics (only after you consent, and only if enabled) and Cloudflare’s cookieless analytics beacon (if enabled).

Cookies and local storage

We set no cookies until you accept analytics. There is no advertising or preference cookie on this website. If — and only if — you accept analytics in the consent banner, Google Analytics sets the _ga and _ga_* cookies described in the Analytics section; rejecting or withdrawing consent keeps the site fully functional.

This site also uses your browser’s local storage for one small, functional flag that contains no personal data and never leaves your browser: your analytics consent choice (so we do not ask again on every page). You can remove it by clearing your browser’s site data. Beyond that, the only storage that may appear in your browser comes from the Turnstile spam check (only when you open the contact form), as described above.

Your rights under the GDPR (European Union / EEA)

If you are in the European Union or the European Economic Area, the General Data Protection Regulation gives you the following rights over personal data we hold about you (in practice: contact-form submissions and email correspondence you send us):

  • Access — ask for a copy of the data we hold about you.
  • Rectification — have inaccurate data corrected.
  • Erasure — have your data deleted (“right to be forgotten”).
  • Restriction — limit how we process your data.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interest.
  • Complaint — lodge a complaint with your local supervisory authority.

Where we process data, we rely on legitimate interest (responding to your inquiries, keeping the site secure) or consent. To exercise any of these rights, contact us through the form on this site or on LinkedIn.

Your rights under Mexican law (LFPDPPP)

DEVBOT operates in Mexico and complies with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). As a data subject you have the ARCO rights:

  • Acceso (Access) — know what personal data we hold and how we use it.
  • Rectificación (Rectification) — request correction of inaccurate or incomplete data.
  • Cancelación (Cancellation) — request deletion of your data when it is no longer needed for the purposes it was collected for.
  • Oposición (Objection) — oppose the processing of your data for specific purposes.

To exercise your ARCO rights, send us a request through the contact form (or on LinkedIn) including your name, a copy of an official ID (or proof of legal representation), a clear description of the data and the right you wish to exercise, and any documents that support your request. We will respond within the timeframes established by the LFPDPPP. If you believe your rights have been violated, you may file a complaint with the Mexican data protection authority (INAI).

International data transfers

We operate from the United States and Mexico, and our service providers (Cloudflare, Resend and — with your consent — Google Analytics) may process data in other countries, including the United States. Where required, these providers rely on recognized transfer mechanisms such as the EU–U.S. Data Privacy Framework and standard contractual clauses.

Data retention

Email correspondence, including inquiries started from the contact form, is kept only as long as needed to handle your inquiry and any resulting business relationship, or as required by law. We do not maintain marketing databases of website visitors.

Children

This website is intended for a professional audience and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

If we change how this site handles data — for example, by enabling analytics or changing how form submissions are delivered — we will update this policy and the “Last updated” date above before those changes go live.

Contact

DEVBOT
Austin, TX, United States · Monterrey, N.L., Mexico
linkedin.com/company/devbot