Privacy policy

Last updated: October 2026

This privacy policy explains how Devorno (“Devorno”, “we”, “us”) collects, uses and protects personal data when you use our websites (devorno.com and devorno.com.ua), our business automation services, and our chatbots and messaging services on the WhatsApp Business Platform and other messaging channels (together, the “Services”).

1. Who we are

Devorno is a business automation agency based in Ukraine. We build and run websites, CRM systems, AI tools and automated messaging assistants (chatbots) for businesses. Devorno decides how and why the personal data described here is used, which makes us its controller.

For any question about this policy or your personal data, write to info@devorno.com.

2. What we collect

2.1 What you send us through the website

Our forms ask only for what we need to answer you:

• Contact form: your name, email address, phone number and message.
• Project brief, B2B questionnaire, audit booking and partner application: your name, contact details (phone, email or Telegram username), company name, your role, your website and your answers about your business, goals and budget.
• On the audit booking page we also record how you reached it, for example the campaign parameters in the link.

2.2 What you send us through WhatsApp and other messaging channels

When you write to our WhatsApp business account or one of our chatbots, we may receive:

• your phone number and WhatsApp profile name;
• the content of your messages (text, and any media or documents you choose to share);
• details you give in the conversation, such as your name, email address, company name or the details of your request;
• message metadata, such as timestamps and delivery status.

2.3 AI demos

Some demos on our site use AI (for example, lead scoring and the knowledge base assistant). If you use one, the text you enter and your IP address are stored on our server, so that we can limit daily use and improve the demos. The text is also sent to OpenAI to generate the answer. Please do not enter personal or confidential information in a demo.

2.4 Technical data

• With every form submission our server records your IP address and your browser’s user agent (browser and device type), and with every AI demo request your IP address, to answer you and to protect the forms and demos from spam and abuse.
• On our demo pages, business card pages and the audit booking page, our own server records simple interaction events (which demo, page or step was opened, the page address, the site language) together with your IP address and user agent. These events stay on our server and do not use cookies.
• Our web server and hosting may keep standard technical logs of requests (IP address, time, requested page, browser).
• Only if you allow it: Google Analytics and Apollo.io, described in section 3.

3. Cookies and similar storage

We do not set analytics or marketing cookies, and do not load those tools at all, until you allow them in the cookie banner. You can change your choice at any time with “Cookie settings” in the footer of our site.

• Necessary (always on): your cookie choice itself, saved in your browser’s local storage under the name devorno-consent (what you allowed and when). We ask again after 13 months, or earlier if we add a new tool. If you close the suggestion to open our site in the other language, that is remembered under lang-banner-dismissed. Whether to show that suggestion is decided in your browser from its language and time zone settings; they are not sent to us or anyone else.
• Analytics (only with your consent): Google Analytics 4, provided by Google. It sets the cookies _ga and _ga_<ID> to tell visits apart and shows us, in aggregate, which pages are visited and how people find the site. We load it in Google’s consent mode with advertising storage and ad personalisation denied.
• Company identification (only with your consent): the Apollo.io website tracker. It uses your IP address and its own cookies or similar identifiers to recognise which company’s network a visit comes from.

When you withdraw consent, we stop loading these tools and delete the Google Analytics cookies that our site can access. You can also delete cookies and local storage in your browser settings at any time.

4. Why we use your data and on what legal basis

• To answer your inquiry and prepare a proposal: to take steps you ask for before a contract, and our legitimate interest in replying to business inquiries.
• To provide our services to clients: performance of a contract.
• To tell our team about a new inquiry right away (Telegram and SMS notifications): our legitimate interest in answering quickly.
• To run our chatbots and messaging services and follow up on your requests: steps before a contract, a contract, or our legitimate interest, depending on the conversation.
• Website analytics with Google Analytics: your consent.
• Company identification with Apollo.io: your consent.
• Our own interaction events and AI demo logs: our legitimate interest in understanding which demos are useful and in limiting abuse.
• Security and spam protection: our legitimate interest in keeping the Services safe.
• Marketing or informational messages: only where you have opted in (your consent).
• Legal obligations: where the law requires us to keep or disclose data.

Where we rely on legitimate interest, you can object at any time (see section 9). We do not sell your personal data, and we do not use the content of your conversations for advertising.

5. WhatsApp and Meta platforms

Our messaging services run on the WhatsApp Business Platform provided by Meta Platforms, Inc. and its affiliates (“Meta”). When you talk to us on WhatsApp, your use of WhatsApp itself is also governed by Meta’s own terms and privacy policies, including the WhatsApp Privacy Policy. We recommend reading them to understand how Meta processes your data.

Messages exchanged with our WhatsApp business account may be processed and stored by Meta to deliver the WhatsApp service, and by us (or our authorised service providers) to answer you and run the bot.

6. Who receives your data

We share personal data only with the service providers we use to run the Services, and only for the purposes above:

• Our hosting provider: stores the website, our server and its database.
• Telegram: the content of the project brief, questionnaire and audit booking forms is forwarded to our team’s Telegram chat as a notification. If you start one of our Telegram demo bots, Telegram also processes that conversation.
• TurboSMS: sends our team a short SMS about a new inquiry (your name, contact details and the start of your message).
• OpenAI: receives the text you type into an AI demo, only when you use one.
• Meta (WhatsApp): processes messages sent to our WhatsApp account and our WhatsApp demo bot.
• Google (Google Analytics): only if you allow analytics.
• Apollo.io: only if you allow company identification.

We may also share data:

• with our clients: where we run a chatbot on behalf of a specific business, the relevant conversation may be shared with that business so it can answer your request;
• when the law requires it: to comply with laws, regulations or legal process, or to protect our rights, safety or property;
• in a business transfer: in connection with a merger, acquisition or sale of assets, under this policy.

7. International transfers

Some of the providers above process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards for such transfers, such as adequacy decisions or standard contractual clauses.

8. How long we keep data

We keep personal data only as long as we need it for the purposes in this policy: inquiries for as long as it takes to answer and follow up, client data for the duration of our business relationship, and anything longer only where the law requires it. Data we no longer need is deleted or anonymised. Analytics data is kept by Google according to the retention settings of our Google Analytics account. Your cookie choice stays in your browser until you change it or delete it, and we ask again after 13 months.

9. Your rights

Depending on where you live (for example under the EU or UK General Data Protection Regulation, or the Law of Ukraine “On Personal Data Protection”), you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data erased;
• restrict how we process it;
• object to processing based on our legitimate interest;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting what was done before. For cookies, use “Cookie settings” in the footer of our site;
• complain to a data protection supervisory authority, for example in the country where you live or work. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights.

To use any of these rights, write to info@devorno.com. You can also stop messages from our WhatsApp bot at any time by sending “STOP” in the chat or by blocking the business account in WhatsApp.

10. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, change, disclosure or destruction. These include encrypted connections (HTTPS/TLS), access controls, and limiting access to the people who need it for their work. Messages sent over WhatsApp are protected by WhatsApp’s end-to-end encryption in transit between you and the WhatsApp Business Platform.

11. Children

Our Services are meant for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The new version will be published on this page with a new “Last updated” date. If a change affects what you consented to, we will ask you again.

13. Contact us

If you have any question about this policy or how we handle your data, contact us:

This policy is also available українською.