<aside> 🗓️
Last update: 23/12/2025
</aside>
ECO Impact Tech, S.L. (hereinafter "DEVERA" or "we"), with Tax ID B56263155 and registered address at Calle de la Travesía, S/N, Edificio La Terminal, ZIP Code 46024 Valencia (Spain), is the controller of your personal data, which will be processed according to the parameters set out in this policy.
DEVERA is the owner of the domain "devera.ai" as well as the website and platform (accessible at app.devera.ai), which is made available to its Clients and Users in order to provide automated Product Carbon Footprint (PCF) analysis services following the ISO 14067:2018 standard.
Contact: [email protected]
We collect and process information that you provide to us or to which we have access in the course of your use of our website and platform. Below you will find details about how these data are processed, classified by category:
| Aspect | Details |
|---|---|
| Role of DEVERA | Data Controller |
| Data collected | Browsing metrics, IP address, location (country, region, city), usage preferences, language, time spent on page, device data (operating system, browser) |
| Method of collection | Through navigation within our website environment and cookies |
| Legal basis | User consent and our legitimate interest as data controllers |
| Retention period | Maximum of 18 months, unless the data subject withdraws consent |
| Disclosure | Data collected by technical cookies may be disclosed to our web hosting providers (Cloudflare) |
| International transfers | No transfers to third countries outside adequate safeguards are anticipated |
When you create an account on our platform, we collect:
| Aspect | Details |
|---|---|
| Data collected | Full name, email address, password (encrypted), company name (optional), profile picture (optional) |
| Method of collection | Directly from users during registration or via OAuth providers (Google, Microsoft) |
| Purpose | Account creation, authentication, service provision, and communication |
| Legal basis | Performance of a contract and user consent |
| Retention period | For the duration of the active account, plus any legally required retention period after deletion |
| Disclosure | Authentication providers (Google, Microsoft) if OAuth is used |
| International transfers | OAuth providers may process data in the US under appropriate safeguards (Standard Contractual Clauses) |