Privacy Policy

Marti Soura Vamseekar, trading as Devernance, is the controller for the personal data described here. Contact: euassuranceai@souravamseekar.com.

• Account data (as controller): name, work email, organisation name, role, sign-in events, and billing contact details.
• Workspace content (as processor for our customers): AI system records, uploaded evidence, evaluation results, approvals and audit events. Our customers decide what goes in; the DPA governs it.
• Demo requests: work email, company, role and your message.
• Website analytics: Cloudflare Web Analytics, which is cookieless and builds no personal profiles. If you accept analytics cookies, also Google Analytics on our public pages (never sign-in pages or your workspace): a pseudonymous cookie identifier, pages viewed without query strings, device and browser data and approximate location. We do not use advertising cookies.

• Providing the service and billing: performance of a contract.
• Security, abuse prevention, product improvement and answering demo requests: legitimate interests.
• Tax and accounting records: legal obligation.
• Product update emails: consent, which you can withdraw at any time.
• Google Analytics: consent, which you can withdraw at any time.

We share personal data only with the service providers listed on the subprocessors page, and where the law requires it. We do not sell personal data.

The service is hosted in the EU. Administrative access from India, and transfers to subprocessors outside the EU, are covered by the EU Standard Contractual Clauses and, for UK data, the UK Addendum.

• Account data: for the life of the account plus 30 days.
• Backups: 60 days, then overwritten.
• Billing records: as long as Dodo Payments and tax law require.
• Demo requests: 12 months after our last contact.

We set strictly necessary cookies for sign-in and security. Google Analytics cookies (_ga, _ga_*, up to 2 years) are set only after you accept them in the cookie banner. Google receives this data in the US under the EU-US Data Privacy Framework, with Google signals and ad personalisation turned off. Change cookie settings.

• EU and UK (GDPR, UK GDPR): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You can complain to your data protection authority.
• California (CCPA/CPRA): we do not sell or share personal information. You can ask to know, delete or correct your personal information, and we will not discriminate against you for doing so.
• Australia (Privacy Act 1988, Australian Privacy Principles): you can access and correct your personal information and complain to us; if unresolved, to the Office of the Australian Information Commissioner (OAIC).
• New Zealand (Privacy Act 2020, Information Privacy Principles): you can access and correct your personal information and complain to the Office of the Privacy Commissioner (OPC).

To exercise a right, email euassuranceai@souravamseekar.com. We answer within one month.

We do not make decisions that significantly affect individuals by automated means.

See Security for the controls we run.

To be appointed on our first EU customer contract.

We post changes here and update the date above. For material changes we email account owners before they take effect.

euassuranceai@souravamseekar.com