Introduction
We take the privacy of the people who contact us seriously. Most of our visitors are founders and business owners considering a software project, and the brief you send us often describes a product that doesn’t exist yet. We treat that information with care, collect only what we need to reply to you properly, and keep it no longer than it is useful.
This Privacy Policy describes how we handle personal information in connection with daxdevelopers.com (the “Site”). Your use of the Site is also governed by our Terms of Service. If you don’t agree with how we handle personal information as described here, please don’t send us your details.
Who We Are
DAX Developers (“DAX Developers”, “we”, “us” or “our”) is a trading name used by a group of independent software developers based in Pakistan. It is not incorporated or registered as a company or other legal entity. The Site is owned and operated by Abdullah Arshad, who decides how and why personal information collected through the Site is used. For the purposes of the EU and UK General Data Protection Regulation (“GDPR”) and similar laws, Abdullah Arshad is the “controller” of that information.
You can reach us about anything in this policy at contact@daxdevelopers.com. Requests sent to that address are read by the operator directly.
Scope of This Policy
This policy applies to everyone who visits the Site, sends us a project brief through the Start a Project page, or writes to us by email. It covers the information we collect in those situations and what happens to it until it is deleted.
It does not cover personal information we handle while delivering a project for a client, such as data belonging to the users of software we build. That processing is governed by the written agreement for the project, which sets out each side’s responsibilities and, where needed, includes a data processing agreement. This policy also does not cover the websites of clients or other third parties that the Site links to.
Information You Give Us
When you send a project brief, we collect your name, email address and phone number, together with the details you provide about the project: the kind of engagement you are looking for, your budget range, and your description of what you want to build. We record the date and time the brief was submitted. Every field is one you fill in yourself, and we ask only for what we need to understand your project and reply to you with a useful answer.
If you email us, or reply to one of our emails, we receive your email address, your name as it appears in your email client, and whatever you choose to include in the message and any attachments. Please avoid sending passwords, access credentials or other sensitive information until we have agreed how that information will be protected.
We do not ask for, and ask you not to send, special category information such as details of your health, religion, political views or biometric data. We don’t need any of it to scope a software project.
Information Collected Automatically
Like every website, the Site is served by computers that record basic technical information when you load a page. Our hosting provider keeps request logs that may include your IP address, the type and version of your browser, the page you requested, the page that referred you, and the date and time of the request. These logs are used to deliver the Site, diagnose faults and protect it against abuse. We don’t combine them with your project brief, and we don’t use them to build a profile of you.
When you submit a brief, our server also checks whether the domain in your email address (the part after the “@”) is set up to receive email, so we can catch typos before they cost you a reply. This is a standard DNS lookup about the domain. It does not contact your mailbox or send any information about you to anyone.
To understand which pages are useful, we use privacy-friendly web analytics provided by our hosting provider. When you load a page, it records the page address, the referring site, your country, and your device, operating system and browser type. It uses no cookies and stores nothing on your device. Visits are counted with an identifier derived from your request that resets every day, so you cannot be recognised across days or followed to other websites, and we only ever see aggregated totals. The Site uses no advertising pixels, session recording or cross-site tracking.
How We Use Your Information
We use the information in your brief to read and understand your project, decide whether we are a good fit, get back to you, and, if you want to go ahead, prepare a scope, estimate and proposal. When a brief arrives, we send an automatic confirmation to the email address you entered so you know it reached us, and a notification to our team so the right people can respond. Emails you send us are used to carry on that conversation.
We also use a small amount of information to protect the Site and the people who use it. Because anyone can type any email address into a form, we keep a short-lived record of the email addresses that recently submitted briefs, and we stop sending confirmation emails to an address that is used repeatedly in a short period. This prevents the form from being used to flood someone’s inbox with messages from us.
We don’t use your information for marketing, add you to a mailing list, sell or rent it to anyone, or use it to make automated decisions that have legal or similarly significant effects on you. If we ever want to use it for a new purpose, we will update this policy first and, where the law requires it, ask for your consent.
Legal Bases for Processing
Data protection laws such as the GDPR require us to have a lawful basis for each way we use personal information. The table below sets out the bases we rely on.
| What we do | Information involved | Lawful basis |
|---|---|---|
| Read your brief, reply, and prepare a scope and proposal | Brief details, email correspondence | Taking steps at your request before entering into a contract (Art. 6(1)(b)) |
| Confirm that your brief was received | Name, email address, brief details | Taking steps at your request before entering into a contract (Art. 6(1)(b)) |
| Prevent the form being used to send unwanted email | Email address, time of submission | Our legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Count visits and see which pages are useful | Anonymous page-view data | Our legitimate interest in improving the Site (Art. 6(1)(f)) |
| Host, secure and fix the Site | Technical request data | Our legitimate interest in operating a secure website (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have considered your rights and expectations and concluded that the limited processing involved is proportionate. You can object to it at any time, as described under Your Rights and Choices.
International Data Transfers
Our team works from Pakistan, and our service providers operate infrastructure in the United States and other countries. As a result, your personal information will be transferred to and processed in countries other than the one you live in, which may have data protection laws that differ from yours.
Where information from the EU, EEA or UK is transferred to a country that has not been recognised as providing an adequate level of protection, we rely on the safeguards our providers offer, including the European Commission’s Standard Contractual Clauses and their UK equivalents, and we apply the same standard of care to your information wherever it is handled.
Data Retention
We keep personal information only for as long as we need it. Project briefs are deleted from our database automatically 24 months after they are submitted. This is long enough for the slow-moving conversations that are common before a software project, and no longer. The deletion is enforced by the database itself rather than left to a manual clean-up. The short-lived records we keep to prevent form abuse are deleted automatically after about two hours.
Email correspondence is kept for as long as the conversation is active and useful, and in any case no longer than 24 months after it ends, unless you become a client. If you do become a client, the information needed to deliver and support your project is kept for the period set out in your project agreement and for as long as we are legally required to retain business records. Request logs are kept by our hosting provider for its own short, fixed period. You can ask us to delete your information sooner at any time.
Data Security
We use appropriate technical and organisational measures to protect your information. The Site is served only over encrypted HTTPS connections, briefs are stored in an access-controlled database, credentials for our systems are kept out of our code, and access is limited to the people who need it to respond to you.
No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach that is likely to put your rights at risk, we will tell you without undue delay and notify any authority we are legally required to inform.
Your Rights and Choices
Wherever you live, you can ask us to tell you whether we hold personal information about you and to give you a copy of it; to correct information that is inaccurate or incomplete; to delete it; to restrict or stop using it, or object to a particular use; and to provide it to you, or to another organisation, in a structured, commonly used format.
To make a request, email contact@daxdevelopers.com, ideally from the address you used when you contacted us. We may need to confirm your identity before acting on a request, so that we don’t disclose or delete someone else’s information by mistake. We will respond within 30 days, and we won’t charge you for a reasonable request. In the rare case that we cannot fully meet a request, for example because the law requires us to keep certain records, we will explain why.
Residents of the EU, EEA and UK
If you are in the European Union, the European Economic Area or the United Kingdom, the GDPR gives you the rights set out above, and our lawful bases for processing are those listed under Legal Bases for Processing. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you believe an infringement took place. We would appreciate the chance to address your concern first, so please consider contacting us before you do.
California Residents
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information we collect and how we use it, to request deletion or correction of it, and not to be discriminated against for using these rights. The categories of information we collect are identifiers (name, email address, phone number), commercial information (your project details and budget range) and internet activity information (request logs and anonymous page-view data), all obtained from you directly or from your browser, and used for the purposes described in this policy. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Children's Privacy
The Site is intended for businesses and adults commissioning software, and is not directed at children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has sent us their information, please contact us and we will delete it promptly.
Links to Other Websites
The Site links to websites we do not operate, including live products we have built for clients and our profiles on social platforms. Once you leave the Site, this policy no longer applies, and the privacy practices of the site you visit are governed by that site’s own policy. We encourage you to read it.
Changes to This Policy
We will update this policy whenever we change what we collect, how we use it, or who handles it on our behalf, and we will do so before the change takes effect. The “Last updated” date at the top of this page shows when it was last revised. If a change significantly affects how we use information we already hold about you, and we have your email address because of an ongoing conversation, we will let you know directly.
Contact Us
If you have any questions about this policy, want to exercise your rights, or are unhappy with how we have handled your information, please write to Abdullah Arshad at contact@daxdevelopers.com. We read every message and will reply as soon as we can, and in any case within 30 days.