Privacy Policy

1. Who we are

The Service is developed and operated by Devix.com (app.devix.om). We act as the data controller for personal information processed through the Service, unless your organization has entered a separate data-processing agreement with us that states otherwise.

2. Information we collect

We may collect the following categories of information:

• Account information: name, username, email address, phone number (if provided), password hash, profile details, role, and authentication method.
• Third-party sign-in data: if you use Google or Apple sign-in, we receive information permitted by that provider (such as name, email, and provider identifier) to create or link your account.
• Work content: tasks, lists, projects, comments, notes, attachments, assignments, statuses, due dates, and activity related to your use of the Service.
• Usage and technical data: IP address, browser type, device information, pages viewed, timestamps, session identifiers, cookies, and diagnostic logs needed to operate and secure the Service.
• Communications: messages you send to us for support, feedback, or legal inquiries.

We do not intentionally collect sensitive personal data unless you voluntarily include it in task content or profile fields.

3. How we use your information

We use personal information to:

• provide, maintain, and improve the Service;
• authenticate users and manage accounts;
• enable collaboration features such as shared lists, comments, notifications, and real-time updates;
• store and display user-generated content you submit;
• monitor performance, prevent fraud, abuse, and security incidents;
• comply with legal obligations and enforce our Terms and Conditions;
• respond to support requests and communicate important service notices.

4. Legal bases for processing

Where applicable, we process personal information based on one or more of the following grounds:

• Contract: processing necessary to provide the Service you request.
• Legitimate interests: securing the platform, improving functionality, and preventing misuse, balanced against your rights.
• Consent: where required, such as optional communications or non-essential cookies.
• Legal obligation: where we must retain or disclose information under applicable law.

5. How we share information

We do not sell your personal information. We may share information only in these circumstances:

• Within your organization: with other authorized users according to project permissions and sharing settings you or your administrator configure.
• Service providers: with trusted vendors who host infrastructure, provide email, analytics, or security services, under confidentiality and data-protection obligations.
• Authentication providers: when you choose Google or Apple sign-in, limited data is exchanged with those providers under their own privacy policies.
• Legal and safety: when required by law, court order, or governmental request, or to protect the rights, property, or safety of Devix.com, our users, or others.
• Business transfers: in connection with a merger, acquisition, restructuring, or sale of assets, subject to continued protection of personal information.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it using reasonable technical measures, unless retention is required by law or legitimate business needs such as security backups.

7. Security

We implement administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted transport (HTTPS), and secure authentication practices. No method of transmission or storage is completely secure; you use the Service at your own risk and should protect your credentials.

8. Your rights and choices

Depending on your location, you may have rights to:

• access, correct, or update your personal information through your profile or by contacting us;
• request deletion of your account and associated personal data, subject to legal or operational retention requirements;
• object to or restrict certain processing;
• withdraw consent where processing is consent-based;
• request a copy of your data in a portable format where technically feasible.

To exercise these rights, contact us using the details below. We may need to verify your identity before fulfilling a request. If your account is managed by an organization administrator, some requests may need to be submitted through that administrator.

9. Cookies and similar technologies

We use essential cookies and similar technologies to maintain sessions, remember preferences (such as language or theme), and protect against unauthorized access. Non-essential cookies, if used, will be disclosed and, where required, offered with your consent.

10. International transfers

Your information may be processed in countries other than your own. Where required, we take appropriate safeguards to ensure an adequate level of protection for cross-border data transfers.

11. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact us

For privacy questions, requests, or complaints, contact:

Devix.com
Email: zadjx@hotmail.com
Phone: +968 9696 9544
Website: https://app.devix.om
Subject line: Privacy — Task Management System