Legal

Privacy Policy

Last updated: October 19, 2026

1. Who we are

GivenTake Devs is a registered trade name of Giventake Goods LLC, an Ohio limited liability company. GivenTake Devs ("we", "us") is a small development studio operating this website, and Giventake Goods LLC is the data controller for any personal information you submit through this site.

This policy describes GDPR, CCPA/CPRA, and ePrivacy-oriented practices for this website. It is not legal advice and does not replace project-specific compliance review for regulated work.

Registered address: 26429 Redwood Dr, Olmsted Falls, OH 44138. General contact: hello@giventakedevs.com. Privacy contact: privacy@giventakedevs.com.

2. What we collect

  • Contact form data: name, email address, company (optional), phone number (optional), project description, budget range, timeline, and how you found us. You provide this voluntarily.
  • Call booking form: name, email address, company (optional), what you want to talk about, and the times you're free.
  • Free site check: name, email address, and the website address you want reviewed.
  • Chat assistant: what you type into the assistant widget, plus the name and email you give it if you ask us to follow up. The conversation is stored with the inquiry so whoever replies has the context.
  • Job applications: name, email address, phone number (optional), role, links, your message, and your résumé if you attach one.
  • Campaign attribution: the UTM parameters and referring page in the link you arrived through, submitted with the form so we know which channel the inquiry came from.
  • Technical data: IP address, browser type, device type, referrer, and pages visited. Collected only if you accept analytics or marketing cookies.
  • Approximate location: derived from your IP address (country / region level). We do not collect precise GPS location.
  • Cookies and similar technologies: see our Cookie Policy for the full list.

We do not knowingly collect data from children under 16. We do not process special categories of personal data (health, biometrics, political views, etc.).

3. How we use it

  • To reply to your inquiry and prepare a proposal.
  • To improve the site (aggregated analytics only).
  • To measure ad performance on Meta, TikTok, LinkedIn, and Google.
  • To meet legal obligations (tax records, contract records).

We do not sell your personal information, and we do not submit it to AI systems for model training. See section 10 for how AI tools are used in our delivery work.

4. Legal basis (GDPR)

  • Consent: analytics, marketing, and preference cookies.
  • Legitimate interest: responding to a contact-form submission you initiated.
  • Contract: delivering work you have engaged us for.
  • Legal obligation: accounting and tax records.

5. Sharing and processors

We share limited data with vetted service providers acting on our instructions:

  • Email delivery provider: form submissions are sent to us by email through a transactional mail service. It transmits the message; it is not used to build marketing lists.
  • Database and inquiry store: submitted inquiries are held in our hosted database (Supabase) so the person replying can see them.
  • Chat assistant model provider (OpenAI): what you type into the assistant widget is sent to the model to generate a reply, on an API tier configured so inputs are not used to train models. Don't put sensitive information in the chat.
  • Google Analytics 4 (aggregate site analytics, IP anonymized).
  • Google Ads, Meta, TikTok, LinkedIn, and Microsoft Advertising pixels (ad measurement, marketing cookies only, and only when configured).
  • Cloudflare (hosting, security, DDoS protection).

Some of these providers are based in the United States. Transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

6. Retention

  • Contact-form submissions: up to 24 months, then deleted.
  • Cookie consent record: 6 months (then we ask again).
  • Analytics data: 14 months at most, aggregated afterwards.
  • Client project records: 7 years, for tax and legal compliance.

7. Your rights

Under GDPR, UK GDPR, and CCPA/CPRA, you have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent at any time. California residents additionally have the right to opt out of "sharing" for cross-context behavioral advertising. To exercise any of these, email privacy@giventakedevs.com. We respond within the legally required period, generally 30 days for GDPR/UK GDPR requests and 45 days for CCPA/CPRA requests. You can also lodge a complaint with your local data protection authority.

8. Do Not Track and Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat it as an opt-out of analytics and marketing cookies.

9. Email and SMS messaging

When you contact us we reply by email. If you give us a mobile number and agree to text messages, we may also text you about the thing you contacted us about: confirming or rescheduling a call, a question we need answered to keep your project moving, or a notice that your monthly report is ready. These are conversational and transactional messages. We do not send marketing or promotional texts, and we do not run text campaigns.

Message frequency varies and depends on your inquiry or project. Message and data rates may apply. Agreeing to texts is never a condition of buying anything from us.

Reply STOP to any message to stop receiving texts from us. Reply HELP for help, or email privacy@giventakedevs.com. Opting out of texts does not opt you out of email replies about an active inquiry or project.

Mobile numbers and text-message consent are never shared or sold to third parties or affiliates for marketing or promotional purposes. A number is used only to message you about your own inquiry or project, and is disclosed only to the messaging provider that delivers the message on our instructions and to anyone we are legally required to disclose it to.

10. AI tools and your data

We build software using AI coding agents. That is a delivery method, not a use of your personal data: what you submit through our forms is not entered into AI tools and is not used to train any model.

The one exception is the chat assistant on this site, and only because it cannot work otherwise. What you type into it is sent to our model provider to generate the reply, on an API tier configured so inputs are not retained for training. The assistant qualifies and captures; a person writes every real answer about your project. Use the contact form instead if you would rather no model saw your message.

For paid engagements, AI tools may process material a client gives us to do the work. Where that happens we use business or enterprise tiers configured so that inputs are not retained for training, we obtain the client's written consent to AI-assisted delivery before starting, and we put a data processing agreement in place where the material includes personal data. Clients can request the current list of AI tools we use and their data-handling terms at any time.

11. Security

We use TLS in transit, restrict access to submitted data, and review our providers annually. No system is perfectly secure; where required by law, we will notify you and the relevant authority of a breach affecting your data.

12. Changes

We may update this policy. Material changes are announced on this page and the "last updated" date is revised. Continued use of the site after changes means acceptance of the updated policy.