Effective Date: August 24, 2026
Last Updated: August 24, 2026

DEVAL Solutions Inc. (“DEVAL Solutions,” “DEVAL,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Notice explains how DEVAL Solutions collects, uses, discloses, retains, and protects personal information when you interact with us, including through our websites, software platforms, applications, customer portals, communications, and other services.

This Privacy Notice applies to information collected through:

• our websites, including com and other websites or online services operated by DEVAL Solutions;
• the PHASE software platform and related customer portals;
• any DEVAL Solutions mobile, desktop, web, or other applications;
• application programming interfaces (“APIs”), integrations, and other technology interfaces we operate or make available;
• forms, surveys, registrations, demonstrations, and “Request a Demo” or similar submissions;
• email, telephone, text messages, and other electronic communications;
• conferences, meetings, events, webinars, and other business interactions;
• social media pages and other third-party platforms through which you interact with DEVAL Solutions;
• information provided to us by customers, clients, business partners, vendors, contractors, or other organizations; and
• other online or offline interactions with DEVAL Solutions that reference or incorporate this Privacy Notice.

This Privacy Notice does not necessarily apply to information that DEVAL Solutions processes solely on behalf of a customer or client where DEVAL acts as a service provider, processor, or other role under applicable privacy law. In those circumstances, the customer’s or client’s privacy notice may govern the information, and individuals should direct privacy requests to the applicable customer or client unless otherwise instructed.

1. Information We Collect

The information we collect depends on how you interact with DEVAL Solutions, the services you use, and the choices you make.

A. Information You Provide Directly

We may collect information that you voluntarily provide, including:

• name;
• business or professional title;
• company or organization name;
• business address;
• email address;
• telephone number;
• account credentials and authentication information;
• information contained in communications with us;
• information submitted through contact forms or “Request a Demo” forms;
• information provided when registering for an event, webinar, survey, or other activity;
• customer or account information;
• billing and payment information where applicable;
• information contained in support requests;
• information you provide in connection with employment, recruiting, or business opportunities, where applicable;
• information you provide through applications or software platforms; and
• any other information you voluntarily provide to us.

Please do not provide sensitive personal information through our website, applications, forms, or communications unless we specifically request it and have a lawful basis for collecting it.

B. Information Collected Through the DEVAL Website

When you visit our website, we may automatically collect certain technical and usage information, including:

• IP address;
• browser type and version;
• operating system;
• device type;
• language preferences;
• referring and exit pages;
• pages viewed;
• links clicked;
• dates and times of visits;
• approximate geographic information derived from an IP address;
• website navigation and usage information;
• information about how you interact with our website; and
• other technical information made available by your browser or device.

We may collect this information directly or through service providers that operate analytics, security, hosting, advertising, or other website technologies on our behalf.

C. Information Collected Through PHASE and Other DEVAL Platforms

When you use PHASE or another DEVAL Solutions platform, we may collect information necessary to create and administer your account, authenticate users, provide services, maintain security, provide customer support, and operate the platform.

Depending on the functionality of the applicable platform and the relationship between DEVAL and the customer, this may include:

• account and user-profile information;
• login and authentication information;
• organization and account information;
• user activity and platform usage information;
• records of transactions or actions performed through the platform;
• system and configuration information;
• uploaded or submitted information;
• communications and support requests;
• audit and security logs;
• IP addresses and device information;
• browser and operating-system information;
• information relating to integrations or connected services; and
• other information necessary to provide the applicable platform or service.

Where DEVAL processes information submitted by a customer into PHASE or another platform solely to provide services to that customer, DEVAL may process that information on the customer’s behalf. In such circumstances, the customer may determine the purposes for which the information is processed.

D. Information From Mobile or Desktop Applications

DEVAL Solutions offers a mobile, desktop, or other downloadable application, the application may collect information relating to the device and your use of the application, including:

• device model;
• operating system;
• application version;
• IP address;
• unique device or application identifiers;
• network information;
• crash reports and diagnostic information;
• application usage information;
• security and authentication information; and
• location information, but only where the applicable application collects location information and where permitted by law.

The precise information collected by an application will depend upon its functionality. Where an application requests access to device features such as location, camera, microphone, contacts, files, notifications, or other device resources, we will seek permission where required by applicable law or the operating system.

E. Information From Third Parties

We may receive information about you from third parties, including:

• customers and clients;
• business partners;
• vendors and service providers;
• identity and authentication providers;
• analytics providers;
• social-media platforms;
• professional networking platforms;
• publicly available sources;
• event organizers;
• marketing partners; and
• other organizations with which we conduct business.

For example, if you interact with DEVAL through a third-party platform or authenticate using a third-party account, that platform may provide us with information consistent with your settings and authorization.

You should review the privacy policies of third-party services before providing information to them.

2. Cookies and Other Tracking Technologies

DEVAL Solutions and our service providers may use cookies, pixels, web beacons, software development kits (“SDKs”), local storage, log files, tags, and similar technologies.

These technologies may be used to:

• operate and secure our websites and applications;
• remember preferences;
• authenticate users;
• understand how visitors use our websites and services;
• measure website and application performance;
• analyze traffic;
• detect fraud or security threats;
• improve our products and services;
• provide functionality requested by users; and
• where permitted by law, support marketing or advertising activities.

Some cookies are necessary for our websites or applications to operate. Other cookies may be used for analytics, personalization, or other purposes.

Where required by applicable law, we will provide appropriate notice and obtain consent before placing or using non-essential cookies or similar technologies.

You may be able to control cookies through your browser settings and, where available, through DEVAL’s cookie-management tools.

3. How We Use Personal Information

DEVAL may use personal information for legitimate business and operational purposes, including to:

1. provide, operate, maintain, and support our websites, platforms, applications, and services;
2. establish and administer accounts;
3. authenticate users and maintain account security;
4. process transactions and payments;
5. respond to questions, requests, and support inquiries;
6. communicate with customers, users, prospects, and business partners;
7. provide demonstrations, proposals, and information about our services;
8. personalize and improve our services;
9. monitor and analyze use of our websites, platforms, and applications;
10. troubleshoot technical problems;
11. detect, investigate, and prevent fraud, abuse, unauthorized access, and other security incidents;
12. protect the rights, property, safety, and security of DEVAL, our customers, users, and others;
13. comply with applicable laws, regulations, legal processes, and governmental requests;
14. enforce our agreements and policies;
15. conduct business, financial, operational, and risk-management activities;
16. perform research, analytics, and product development;
17. send newsletters, updates, service announcements, and other communications;
18. where permitted by law, conduct marketing and promotional activities; and
19. fulfill other purposes disclosed at the time information is collected or otherwise permitted by law.

We will seek to limit the collection and use of personal information to information and purposes that are reasonably necessary and appropriate for the applicable business purpose.

4. Legal Bases for Processing

Depending on the circumstances and applicable law, DEVAL may process personal information on one or more of the following legal bases:

• performance of a contract or taking steps at your request before entering into a contract;
• compliance with a legal obligation;
• our legitimate business interests, provided those interests are not overridden by applicable privacy rights;
• your consent;
• protection of vital interests; or
• another lawful basis permitted by applicable law.

Where we rely on consent, you may withdraw your consent where permitted by law. Withdrawal of consent will not affect processing that occurred before the withdrawal.

5. How We Share Personal Information

DEVAL Solutions does not sell personal information in exchange for monetary consideration.

We may, however, disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this Privacy Notice:

Service Providers

We may share information with companies that provide services to us, such as:

• cloud hosting providers;
• software providers;
• application and platform providers;
• payment processors;
• customer-support providers;
• cybersecurity providers;
• analytics providers;
• communications providers;
• email and messaging providers;
• information-technology providers;
• professional advisers;
• auditing providers; and
• other vendors that process information on our behalf.

These providers are expected to process personal information in accordance with applicable contractual and legal requirements.

Customers and Business Partners

Where necessary to provide a service, we may share information with customers, business partners, vendors, or other organizations with which you or your organization has a business relationship.

Legal and Regulatory Disclosures

We may disclose information where reasonably necessary to:

• comply with law, regulation, subpoena, court order, or other legal process;
• respond to lawful governmental requests;
• protect the rights, property, or safety of DEVAL, our customers, users, or others;
• investigate fraud or security incidents; or
• enforce our agreements.

Corporate Transactions

Personal information may be disclosed as part of an actual or contemplated merger, acquisition, financing, sale, restructuring, reorganization, bankruptcy, or other corporate transaction involving some or all of DEVAL Solutions’ business or assets.

With Your Direction or Consent

We may disclose personal information when you request or authorize us to do so.

6. Customer and Client Data

DEVAL Solutions may provide software, technology, advisory, or other services to businesses and organizations.

When DEVAL processes information on behalf of a customer or client, the customer or client may determine what information is submitted to our systems and how that information is used.

For example, information entered into PHASE by a customer may belong to or be controlled by that customer rather than by DEVAL Solutions.

If you have an account or relationship with one of DEVAL’s customers and your information is processed through DEVAL’s services on that customer’s behalf, you should generally direct requests concerning that information to the applicable customer.

Where required by applicable law or contract, DEVAL will provide reasonable assistance to customers in responding to privacy requests and complying with applicable privacy obligations.

7. Sensitive Personal Information

DEVAL does not generally seek to collect sensitive personal information through its publicly available websites.

Depending on the services provided, however, sensitive personal information may be processed through our platforms on behalf of customers or as otherwise necessary to provide a service.

Where required by law, DEVAL will obtain consent or otherwise establish an appropriate legal basis before processing sensitive personal information.

We do not use sensitive personal information for purposes unrelated to the purposes for which it was collected except as permitted by applicable law.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Notice, including to:

• provide services;
• maintain business and financial records;
• satisfy legal, regulatory, tax, accounting, and contractual obligations;
• resolve disputes;
• enforce agreements;
• maintain security;
• prevent fraud and abuse; and
• protect our legal rights.

Retention periods may vary depending on the nature of the information, the purpose for which it was collected, contractual obligations, legal requirements, and operational needs.

When personal information is no longer reasonably required, we will delete, destroy, anonymize, or otherwise dispose of it in accordance with our policies and applicable law.

9. Data Security

DEVAL Solutions uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction.

Depending on the service and circumstances, safeguards may include:

• access controls;
• authentication mechanisms;
• encryption;
• monitoring and logging;
• network and application security controls;
• security testing;
• backup and recovery procedures;
• employee training; and
• contractual requirements applicable to service providers.

No method of transmitting or storing information is completely secure. Accordingly, we cannot guarantee that personal information will never be accessed, disclosed, altered, or destroyed as a result of a security incident.

10. Data Breaches and Security Incidents

If DEVAL Solutions determines that a security incident has occurred that requires notification under applicable law, we will provide notice in accordance with applicable legal requirements.

Notifications may be provided by email, postal mail, telephone, website notice, or another legally permitted method.

11. International Data Transfers

DEVAL Solutions may use service providers, technology infrastructure, or business partners located in countries other than the country in which you reside.

As a result, personal information may be transferred to and processed in the United States or other jurisdictions that may have privacy laws different from those in your jurisdiction.

Where applicable law requires safeguards for international transfers, DEVAL will use legally recognized transfer mechanisms or other appropriate safeguards.

12. Your Privacy Rights

Depending on where you reside and subject to applicable legal exceptions, you may have rights concerning your personal information.

These may include the right to:

• know or access personal information we maintain about you;
• obtain information about how your personal information is collected, used, or disclosed;
• correct inaccurate personal information;
• request deletion of personal information;
• obtain a copy of personal information in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain forms of targeted advertising, sale, or sharing where applicable;
• appeal a decision concerning a privacy request where required by applicable law; and
• lodge a complaint with an applicable privacy regulator or attorney general.

Not every right is available in every jurisdiction, and certain exceptions may apply.

Submitting a Privacy Request

To submit a privacy request, please contact:

DEVAL Solutions Inc.
Email: info@devalsolutions.com
Telephone: (703) 962-1890

Please identify the nature of your request and provide sufficient information for us to reasonably verify your identity and locate the applicable information.

We may request additional information to verify your identity before completing certain requests. Verification procedures will be proportionate to the sensitivity of the information and the nature of the request.

You may use an authorized agent to submit certain requests where permitted by applicable law. We may require appropriate documentation confirming the agent’s authority.

We will not discriminate against you for exercising privacy rights provided by applicable law.

13. California Residents

If the California Consumer Privacy Act (“CCPA”), as amended, applies to DEVAL’s processing of your personal information, California residents may have additional rights.

These rights may include the right to:

• know what personal information is collected, used, disclosed, or otherwise processed;
• access personal information;
• correct inaccurate personal information;
• request deletion of personal information, subject to exceptions;
• obtain information about categories of personal information collected and disclosed;
• opt out of the sale or sharing of personal information, where applicable;
• limit certain uses and disclosures of sensitive personal information, where applicable;
• obtain information about retention periods or criteria used to determine retention; and
• receive equal treatment for exercising applicable privacy rights.

DEVAL does not knowingly sell personal information for monetary consideration.

If DEVAL engages in activities legally considered “sharing” for cross-context behavioral advertising, California residents may have the right to opt out of that activity.

Where required by California law, DEVAL will honor applicable opt-out preference signals.

14. Virginia Residents

To the extent the Virginia Consumer Data Protection Act (“VCDPA”) applies to DEVAL’s processing of personal data, Virginia residents may have rights including access, correction, deletion, portability, and the ability to opt out of certain processing activities, subject to applicable limitations and exceptions.

15. Maryland Residents

To the extent the Maryland Online Data Privacy Act applies to DEVAL’s processing of personal data, Maryland residents may have rights provided by that law, including applicable rights concerning access, correction, deletion, portability, and opting out of certain processing activities.

DEVAL will comply with applicable Maryland privacy requirements when the law applies to its processing activities.

16. Other State Privacy Laws

Several U.S. states have enacted comprehensive consumer privacy laws, and additional laws may become effective over time.

DEVAL Solutions will apply the rights and obligations required by applicable law based on the individual’s jurisdiction and DEVAL’s activities.

Where required, DEVAL may provide additional state-specific disclosures, rights, or mechanisms for exercising privacy choices.

17. Do Not Track and Opt-Out Preference Signals

Some browsers and devices offer privacy signals or controls that allow users to communicate preferences concerning online tracking or targeted advertising.

Where required by applicable law, DEVAL will recognize and process qualifying universal opt-out or opt-out preference signals in accordance with applicable legal requirements.

The availability and functionality of these signals may depend on your browser, device, location, and the applicable law.

18. Marketing Communications

We may send business, service, informational, or marketing communications where permitted by law.

You may unsubscribe from promotional email communications by using the unsubscribe mechanism included in the communication or by contacting us.

Even if you opt out of marketing communications, we may continue to send transactional, security, account, service, or other communications that are necessary to provide services or administer an account.

19. Third-Party Websites, Applications, and Services

Our websites, platforms, applications, or communications may contain links to third-party websites, applications, social-media platforms, or other services.

DEVAL does not control the privacy practices of those third parties.

Once you leave a DEVAL-controlled website or application, the third party’s privacy policy and terms may apply.

We encourage you to review the privacy policies of third-party services before providing personal information.

20. Social Media

DEVAL Solutions may maintain pages or profiles on third-party social-media platforms.

If you interact with us through those platforms, the platform may collect information about you independently of DEVAL.

Information you submit publicly through social-media platforms may be visible to others.

DEVAL’s collection and use of information obtained through social-media platforms is governed by this Privacy Notice to the extent applicable, while the platform’s own privacy policy governs the platform’s independent processing.

21. Business Communications and Offline Information

This Privacy Notice applies not only to information collected through websites and applications, but also, where applicable, to information collected through:

• telephone calls;
• email;
• postal correspondence;
• business meetings;
• conferences;
• trade shows;
• webinars;
• demonstrations;
• customer-support interactions;
• surveys;
• contracts and business documents; and
• other business communications.

Different privacy requirements may apply to particular categories of information, including employee, applicant, customer, or business-to-business information.

22. Children’s Privacy

DEVAL Solutions’ websites, platforms, applications, and services are generally intended for business and professional users and are not directed to children.

We do not knowingly collect personal information from children under 13 through services directed to a general business audience.

If we learn that we have collected personal information from a child under 13 without the legally required consent, we will take reasonable steps to delete the information.

Certain jurisdictions may impose different age thresholds or additional requirements, which DEVAL will address where applicable.

23. De-Identified and Aggregated Information

DEVAL may create aggregated, statistical, or de-identified information from personal information.

Where permitted by applicable law, DEVAL may use and disclose information that has been de-identified or aggregated for legitimate business purposes, including analytics, research, security, product development, and service improvement.

DEVAL will not attempt to re-identify de-identified information except as permitted by applicable law.

24. Professional and Business Contacts

If you interact with DEVAL in your capacity as an employee, representative, contractor, consultant, or business contact of an organization, we may process professional information such as your name, title, company, business contact information, communications, and relationship with that organization.

Depending on applicable law, certain business-to-business information may be subject to different privacy requirements.

25. Privacy of Job Applicants and Employees

If DEVAL collects information from job applicants, employees, contractors, or prospective personnel, additional privacy disclosures may apply.

Such information may include employment history, education, qualifications, references, contact information, and other information reasonably necessary for recruiting, employment administration, compliance, and related purposes.

Where applicable, DEVAL may provide a separate workforce or applicant privacy notice.

26. Changes to This Privacy Notice

DEVAL Solutions may update this Privacy Notice periodically to reflect changes in our services, technology, business practices, legal requirements, or privacy practices.

When we make material changes, we may provide additional notice where required by law.

The “Effective Date” at the beginning of this Privacy Notice identifies when the current version became effective.

We encourage you to review this Privacy Notice periodically.

27. Contact Us

If you have questions about this Privacy Notice or DEVAL Solutions’ privacy practices, or if you wish to submit a privacy request, contact us at:

DEVAL Solutions Inc.
Email: info@devalsolutions.com
Telephone: (703) 962-1890

DEVAL Solutions Inc.
Technology affiliate of DEVAL LLC

Website: devalsolutions.com

Important: This Privacy Notice is intended to describe DEVAL Solutions’ privacy practices in a comprehensive manner. The actual information collected, processed, disclosed, and retained by DEVAL depends on the particular website, application, platform, service, customer relationship, and functionality involved.

Where DEVAL processes personal information solely on behalf of a customer or client, the applicable customer or client’s instructions, agreement, privacy notice, and applicable law may govern that processing.