Privacy Policy

1. Who We Are

Simy Dev Labs LLC, a limited liability company incorporated under the laws of Minnesota, United States (hereinafter referred to as "We," "Us," or "Our"), operates this portfolio and services website. We provide custom web development and software solutions for businesses and individuals.

We respect the privacy of individuals and are committed to protecting information belonging to visitors and clients. Any inquiries or privacy-related requests may be directed to [email protected].

2. What Data Do We Collect

This Policy applies to data collected through the Simy Dev Labs website ("Website"). Visitors and clients shall hereinafter be referred to as "You."

In accordance with the General Data Protection Regulation (GDPR), personal data means any information related to an identified or identifiable natural person.

We collect the following types of data:

Personal Data You Provide:

• When you submit a contact or inquiry form (name, email address, and any details you choose to include in your message).
• When you engage Us for services and provide project or billing information.

Note: This is a portfolio site — no account registration is required or offered.

Data Collected Automatically:

• We use Umami Analytics to collect anonymous, aggregated usage statistics such as page visits and general browser information. No cookies, IP addresses, or personal data are collected by Umami.

3. Payments

Payments for services may be processed through Stripe, PayPal, or via traditional methods such as check or cash, depending on the arrangement agreed upon with the client.

When payments are processed through Stripe or PayPal, We do not store or have access to your payment card information. Those processors govern their own data practices:

• Stripe: https://stripe.com/privacy
• PayPal: https://www.paypal.com/us/legalhub/privacy-full

4. Privacy-Friendly Analytics

We use Umami Analytics, a privacy-first, open-source analytics solution, to understand how visitors use the Website and to improve user experience. Umami collects only anonymous, aggregated data and does not use cookies, track personal information, or store IP addresses.

Because Umami is fully compliant with GDPR, CCPA, and PECR without requiring cookie consent banners, no personal data or identifiable information is collected. All analytics data is anonymized and used solely for improving our services.

We do not use Google Analytics, advertising networks, retargeting, or any third-party ad tracking.

("Ad networks" and "retargetin" refer to tracking users across different websites to show personalized ads—this practice is not used by Us.)

5. How We Use Your Data

We process your data lawfully and solely for the following purposes:

• To respond to your inquiries or contact form submissions.
• To process payments and fulfill agreed-upon services.
• To maintain and improve our website through anonymous analytics.
• To ensure security and prevent fraudulent activity.

We do not sell, lease, or trade your personal information. We do not collect additional data or use it for unrelated purposes without your consent.

6. Legal Basis for Processing

In processing Your Personal Data, we rely on the following legal bases under Article 6 of the GDPR:

• Consent – When you voluntarily provide information through a contact or inquiry form.
• Contract – When processing is necessary to deliver services you have engaged Us for.
• Legitimate Interest – For anonymous analytics, troubleshooting, and site improvement.

7. Who Has Access to Your Data

We do not share your Personal Data with third parties for marketing or advertising. Certain service providers may have limited access as necessary for operational purposes, including:

• Stripe, Inc. (payment processing, when applicable)
• PayPal Holdings, Inc. (payment processing, when applicable)

These providers act as data processors under strict contractual obligations and process your data only as instructed by Us.

8. How We Store and Protect Your Data

Any data submitted through contact forms is stored securely and accessed only by authorized personnel. We employ commercially reasonable physical and technical safeguards to protect Personal Data from unauthorized access, loss, or disclosure.

All web traffic between you and Our servers is encrypted via HTTPS (SSL/TLS).

No method of data transmission is entirely risk-free; therefore, any transfer of Personal Data is at your own risk.

In the event of a data breach, our liability shall be limited to notification as required by applicable law. We shall not be liable for any consequential damages resulting from unauthorized access to your data, provided we have implemented commercially reasonable security measures.

9. Data Retention

We retain contact and inquiry data only as long as necessary to fulfill the purpose for which it was submitted or as required by applicable law. Payment and project records may be retained for legal, tax, or compliance purposes as permitted under U.S. law.

10. Your Rights

You have the following rights regarding your personal data under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA):

• Right of Access – Request copies of your personal data.
• Right to Rectification – Request correction of inaccurate or incomplete data.
• Right to Erasure – Request deletion of your personal data.
• Right to Restrict Processing – Request that processing of your data be limited.
• Right to Data Portability – Request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent – Withdraw consent at any time without affecting the lawfulness of prior processing.

For California residents:

• Right to know what personal data we collect and how it is used.
• Right to delete or correct personal information.
• Right to opt out of the sale or sharing of personal data (we do not sell or share data).
• Right to non-discrimination for exercising any privacy rights.

Requests may be submitted to [email protected]. We may request verification of identity before fulfilling data-related requests.

11. Protection of Minors

Our services are intended for individuals aged 18 years and older. We do not knowingly collect or process personal data from individuals under the age of 18. If we learn that such data has been collected, it will be promptly deleted.

12. International Transfer of Data

Although Simy Dev Labs LLC operates from the United States, we serve clients globally. If personal data is transferred internationally, We ensure that appropriate safeguards—such as the Standard Contractual Clauses (SCCs) approved by the European Commission—are in place to protect data in accordance with applicable laws.

13. Changes to This Policy

We review and update this Privacy Policy periodically. Any modifications will be posted on this page, with the "Last Updated" date revised accordingly.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact Us at:

📧 [email protected]

15. Force Majeure and Service Disruptions

Simy Dev Labs LLC shall not be liable for any failure or delay in performance of our obligations under this Privacy Policy due to causes beyond our reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, labor disputes, government actions, internet failures, power outages, or third-party service disruptions.