Privacy Policy
This page explains what information AsifDevX collects when you use this website, how it is used, and the choices you have. This policy is maintained by the site owner and may be updated from time to time.
Last updated July 6, 2026
Information we collect
When you submit the contact form or subscribe to the newsletter, we collect the details you provide, such as your name, email address, company, and message. We also collect basic, anonymised analytics (such as page views) to understand how the site is used.
How we use your information
We use your details to respond to enquiries, deliver the newsletter you requested, and improve the site. We do not sell your personal information. Marketing emails always include an unsubscribe link.
Cookies and analytics
We use essential cookies required for the site to function and, with your consent, privacy-friendly analytics cookies. You can accept or decline non-essential cookies at any time using the cookie banner or the Cookie preferences link in the footer.
Data storage and security
Your data is stored securely on our managed cloud infrastructure with encryption in transit and access controls. We retain enquiry and subscriber data only as long as needed for the purposes described here.
Your rights
You can request a copy of your data, ask us to correct it, or request deletion (the right to be forgotten). To exercise any of these rights, email us and we will respond within a reasonable timeframe.
Contact
For any privacy questions or data requests, contact muhammad.asif.devx@gmail.com.
AI features, sub-processors & data processing
Some in-app features (summaries, drafting, classification, insights) use large-language models. When you invoke one of these features, the relevant text you supply is sent to a sub-processor for inference. We do not sell your data and inputs are not used to train third-party foundation models.
Current AI sub-processors
- Lovable AI Gateway: request routing, rate limiting and telemetry. Processor of prompts & responses in transit; no long-term prompt retention for training.
- Google (Gemini via Lovable Gateway) : model inference. Requests processed under Google's Gemini API terms; content is not used to train Google's general models.
- Supabase (Lovable Cloud): primary data store, authentication, storage.
- Cloudflare: edge, TLS, DDoS and CDN.
- Resend: transactional email delivery.
PII redaction before AI calls
User-supplied text is passed through a server-side redaction layer before it reaches any AI sub-processor. Emails, phone numbers, IP addresses, national ID patterns, payment-card numbers, bearer tokens and JWTs are replaced with structural placeholders (e.g. [EMAIL], [PHONE], [CARD]) so raw identifiers never leave our infrastructure. This is a defence-in-depth measure and is not a substitute for our normal data-minimisation obligations.
Data Processing Agreement (DPA)
Business customers processing personal data of EU/UK/CH data subjects can request a signed Data Processing Agreement (Art. 28 GDPR) and Standard Contractual Clauses for onward transfers. Request one at privacy@asifdevx.com. International transfers rely on the EU-approved SCCs and equivalent UK/CH addenda.
This list is kept current with our production configuration. Material changes are versioned in our published legal history.
Exercise your privacy rights
Access, correct, port, restrict, delete, or object to processing of your personal data under the GDPR, UK GDPR, Swiss FADP, or California CCPA/CPRA.
Open the privacy rights portal