Privacy

Privacy Policy

I. Our Privacy Commitment

At Devolutions (“Devolutions”, “we”, “our” or “us”) we know and understand how you care about the importance of protecting your information and privacy interests and we take these concerns very seriously. We have therefore developed this privacy policy (this “Privacy Policy”) to describe our practices regarding the collection, use, processing and storage of your personal information in connection with the use of our Websites, Products and Services and to explain your privacy and data rights in the context of your interactions with us.

For the purpose of this Privacy Policy, (i) the term “Websites” refers collectively to the website at https://devolutions.net , and any other website that we operate (together with their sub-domains, content and services), (ii) the term “Products” refers to our software and applications that you may purchase, download and install from our Websites, and (iii) the term “Services” refers to our online and cloud services which may be accessed and used via our Websites and our web and mobile applications.

Unless indicated otherwise, this Privacy Policy does not apply to third party products or services or the practices of companies that we do not own or control, including other companies you might interact with on or through our Websites.

This Privacy Policy is part of our various agreements, terms of use and terms of service which you may find at https://devolutions.net/legal . If you do not agree with this Privacy Policy, do not access or use our Websites, Products or Services and do not otherwise interact with any other aspect of our business.

II. What information we collect about you

The types of information we collect depend on the nature of your interaction with us. You may choose not to provide us with your personal information. However, if you make this choice we may not be able to provide you with the Product, Service, or information that you requested.

If you are a resident of the European Union, the European Economic Area, United Kingdom or Switzerland, Devolutions is the controller of your personal data for the purposes of applicable data protection law, unless expressly stated otherwise in this Privacy Policy.

Contact or account information

We may collect basic contact or account information about you such as your name, email address, organization, job title, business address and/or business or mobile phone number when you:

Payment information

We collect certain payment and billing information when you purchase or register for certain paid Products and Services, such as the name and contact information of your accounting representative. We do not collect or store any banking or credit card information in connection with your transactions with us. If you choose to purchase our Products or Services by using a payment or credit card via our Websites, your card information will be processed through a secured and compliant third-party payment processing application to which Devolutions subscribes, and we do not therefore process, collect, store or even have access to your card information. We strongly recommend you not to submit or send us your banking or payment card information, whether by email, phone, mail or fax, in which case such information will be deleted or destroyed forthwith.

Information you provide through our Websites, blogs and online forums

We may collect or display certain limited information when you provide feedbacks, questions or comments or when you participate in any interactive features, surveys, contests, promotions, sweepstakes, activities or events through our Websites, online blogs, newsletters and forums.

As an example, your name, username and gravatar (or profile picture) may appear next to your comment or question that you submit on our blog (depending on the information and preferences that you registered when creating your blog account with our third-party service provider).

In addition, any such information that you decide to disclose or share will become public information which could be read, collected, copied, modified or otherwise used by other users, service providers or operators of these blogs and forums. We are unable to control such uses of your information, and by using such features on our Websites you consent and assume the risk that the information provided by you may be viewed and used by third parties as described above. You should therefore exercise caution when deciding to disclose your personal information through these features.

Collection of information using cookies, web beacons and other tools

We may also collect information that is related to you but that does not directly identify you, such as your internet protocol address, your internet domain name, the region or general location where your computer or device is accessing the internet, the web browser and operating system used to access our Websites, and information regarding your use of and activities on our Websites such as the pages or files visited, the time spent on each page or file, or the time and date of each visit or use. Devolutions may collect this information automatically as you browse our Websites through the use of log files, web beacons or other electronic tools.

Cookies and Web beacons

Cookies are pieces of data that a website transfers to a user's hard drive or mobile device for record-keeping purposes and to recognize a person as a previous user of a website. Web beacons are transparent pixel images that are used in collecting information about website usage, e-mail response and tracking. The information collected through cookies, web beacons, log file information and other electronic tools (e.g. the web pages you visit on our Websites and navigation patterns, the date and time of your visit, the number of links you click, the functions you use or the data you downloaded from our Websites) is used and analyzed to improve and personalize our service to you (e.g., user ID and password prompts, language preferences), to provide enhanced convenience, use and functionality of our Websites and to aggregate traffic data (e.g., what pages are the most popular). We may also use this information to help diagnose problems with our server and to administer our Websites, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

We also use specific tools in our emails sent to our users to track which emails are opened and which links are clicked by recipients. We use this information to evaluate the effectiveness of our marketing campaigns and to allow for a more accurate reporting and improvement of our Products and Services. None of the tracking information that we collect is or can be connected to the identities or other personal information of individual users. We also do not track the users of our Websites when they cross to third party websites and we do not provide targeted advertising to them.

All major browsers allow you to block or delete cookies from your system, or to get notified before accepting cookies. To learn more about your ability to manage cookies and web beacons, please consult the privacy features in your browser. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our Websites.

Google Analytics

Our Websites also uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help our Websites analyze how users use the site. The information generated by the cookie about your use of our Websites (including your IP address) will be transmitted to and stored by Google on its servers. To learn in more details how Google will use such data, please review their privacy statement. By using our Websites, you consent to the processing of data about you by Google in the manner and for the purposes set out above and in accordance with Google’s own privacy policies, and Devolutions disclaims any responsibility or liability in that respect.

Information that we collect from third parties

Authorized resellers

Devolutions may collect your information such as your name and email address through an authorized reseller requesting a quote or submitting a purchase order on your behalf. When we process your information (including your personal information) in response to a request made by a reseller on your behalf, you consent (and you are deemed to have given your consent) to the communication, collection and processing of your personal information for such specific purpose in accordance with this Privacy Policy.

Your administrator or other users of your organization

Your administrator or other users of your organization may provide information about you when they purchase or subscribe to a Product or Service on behalf of your organization, or when they register or activate a Product license. For example, an administrator may provide your contact information when they designate you as the billing or technical contact on your company's account, or if they request that we contact you for technical assistance.

Third-party accounts

Devolutions allows you to use certain features of its Websites through integrated third-party applications or accounts. The information provided to these third parties to create such accounts and to use these third-party applications through our Websites is not automatically shared with Devolutions, and Devolutions does not collect or store this information (other than the information displayed in connection with your use of such features on our Websites). We recommend that you review the privacy policies that govern the use of such third-party applications and accounts to understand how your personal information is collected and processed by these service providers.

Information that you submit to our Services

We may process information (including personal information) that you submit to the Services or in the course of using them. Such processing is made by us on your behalf in our capacity of a “data processor” in accordance with the terms of our Data Processing Addendum, which you may find here.

III. Purposes for which we collect your information

Devolutions relies on a number of legal bases to collect, use, share and otherwise process the personal information we have about you for the purposes described in this Privacy Policy. These purposes have been carefully considered and include the following:

Our legitimate interests

To the extent the European Union’s General Data Protection Regulation (GDPR) or the UK GDPR applies to the collection and processing of your personal data, the legitimate interests on which Devolutions bases the process of your information include the following:

IV. How we share your information

We may share information we collect about you in the ways discussed below. Please note that Devolutions does not share, sell, trade or lease your information to or with others for any commercial or mercantile purposes.

Information storage

The information that we collect from you is stored in cloud databases hosted on third-party servers. These third-parties do not use or have access to your information for any purpose other than storage and retrieval of information and are contractually required to maintain adequate privacy and security safeguards that comply with applicable laws.

Third-party service providers

We work with third-party service providers, some of which are located outside of the European Economic Area, to provide development and integration of applications within our Websites, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analysis and other services for us. Devolutions may share your information with them only to the extent necessary for the performance of their services, and these service providers are contractually required to maintain adequate privacy and security safeguards that comply with applicable laws.

To the extent your information is collected through third-party technologies, applications, plug-ins or web services that are integrated into our Websites, please be aware that these third parties may collect and use the information that you submit in accordance with their own terms and policies, and this Privacy Policy does not cover how third-party apps use your information. By using these third-party services, you consent (and you are deemed to consent) to the collection, use and processing of your information in accordance with such terms and policies, for which Devolutions is not responsible. We therefore strongly encourage you to review these privacy policies before connecting to or using their applications or services to learn more about how they will handle your information. If you object to how your information will be processed by these third parties, please do not use their applications or services.

Online forums

Our Websites offer publicly accessible forums in which users may ask questions or provide comments on our Products and Services through their Devolutions Cloud account. If you decide to post a question or comment on our community forums, you should be aware that any information that you provide, as well as certain profile information such as your username, your gravatar (or profile picture), the date of your registration and your last log on date, may be read, collected, and used by any member of the public who accesses them, and your posts and profile information may remain visible on our forums even after you close or delete your account. We urge you to consider the sensitivity of any information you input into these community forums. To request removal of your information from publicly accessible forums operated by us, please contact us as provided below. In some cases, we may not be able to remove your information, in which case we will let you know if we are unable to and why.

Links to other websites

Our Websites contain links to third-party websites (such as our authorized resellers’ websites) which are provided solely for your convenience and information. If you click on one of those links you will be leaving our Websites and redirected to such third-party’s website and this Privacy Policy will no longer apply. Devolutions disclaims any responsibility or liability for content provided by these third-party websites or for any personal information they may happen to collect, use, store and disclose through their websites. We encourage you to read the privacy policy of those other websites to learn how they collect, use and store your personal information.

Social medias applications and widgets

Our Websites use widgets and social media features such as Facebook, LinkedIn, Twitter and others. If you choose to use such widgets or features on our Websites, they may collect certain information such as your IP address, which page you are visiting on our Websites, and may set a cookie to enable the feature to function properly. Devolutions does not collect, process or store such information. Your interactions with these widgets and features are governed by the privacy statements of the companies providing them, and you should therefore review them to better understand how your information will be collected and processed.

Managed accounts and administrators

If you register for or access our Products or Services using an email address with a domain that is owned by your employer or organization, and such organization wishes to establish an account or activate a license on your behalf, certain information about you including your name, contact information and past use of your account may become accessible to that organization’s administrator and other users sharing the same domain. We may also share your contact information with other users of your organization to facilitate service-related requests.

With your consent

We share information about you with third parties when you give us your express consent to do so. For example, we sometimes display personal testimonials of satisfied customers on our Websites or blogs along with their name and picture, with their prior express consent.

Change of control or sale of assets

If Devolutions becomes involved in a merger, acquisition, securities offering, bankruptcy, reorganization, dissolution or other similar transaction, we may share your personal information in connection with any such transaction. To the extent possible, we will take commercially reasonable measures to limit the quantity of personal information transferred and make sure that such transfers are governed by appropriate confidentiality, privacy and security safeguards.

Other instances where we may be required to share your personal information

Other than as described elsewhere in this Privacy Policy, Devolutions will not reveal or share your personal information to third-parties for their independent use unless: (1) you request or authorize it or as otherwise permitted by law; (2) to address emergencies or force majeure events; (3) to address disputes or claims with you, or to persons demonstrating legal authority to act on your behalf; and (4) the information is provided to comply with the law (for example, to comply with a search warrant, subpoena or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees, clients or others, in which case you should receive notice that your specific information is being requested with opportunity to inquire further or contest such requests (to the extent legally permitted), unless there are exceptional circumstances or concerns which would prevent us from notifying you, based on our reasonable judgment and the opinion of our legal advisors.

Sharing of non-personal information

We may also gather aggregated data about our clients and Websites visitors and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers and/or other third parties for marketing or promotional purposes.

V. Our marketing communications: Your consent and right to opt-out

You will not receive our communications or marketing materials (such as our Devolutions Newsletters) unless you have expressly requested or consented to be added on our marketing list. Devolutions does not sell or rent its marketing list to other parties for marketing uses. If you purchase one of our Products or Services for the first time, you will also receive an email inviting you to become a member of our “Devolutions Force” forum and to create an account for such purpose. This membership is optional and is offered only to provide you a better experience when using our Products and Services. You will be entirely free to decline or ignore our invitation, in which case no other communications will be sent to you in that regard. The fact of declining or ignoring our membership invitation will by no means affect your ability to use the Products and Services that you purchased from us.

You may unsubscribe or choose to remove yourself from our marketing list at any time by clicking on the unsubscribe link or by following the specific instructions included in the emails or other communications that you receive from us, or by sending us your request at privacy@devolutions.net. We will process your request within a reasonable time, not exceeding ten (10) business days. Please note that even after you opt out from receiving promotional messages from us, we may continue to communicate with you for other purposes disclosed in this Privacy Policy, including for transactional and technical assistance matters. To the extent these communications are necessary to provide you with our Products and Services, you will most likely not be able to opt out of them.

VI. How to access and control your information

Privacy laws allow you to exercise certain choices and rights in respect of the information that we hold or process on you, as described below. Some of these rights can be exercised by logging into your Devolutions Cloud account and using available settings (but where the Services or accounts are administered for you by an administrator, you may need to contact your administrator to assist with your requests first). Otherwise you may contact us in writing at privacy@devolutions.net or by contacting our support service (https://devolutions.net/support ). All requests will be treated within a time frame of thirty (30) days, at no cost.

Please be aware that your request may be limited in certain cases, for example if you ask to delete information which we or your administrator are permitted by law or have compelling legitimate interests to keep. Where you have asked us to share data with third parties, or if you provided your information to third parties through our Websites, you will need to contact those third-party service providers directly to have your information deleted or otherwise restricted.

If you have unresolved concerns, you may have the right to complain to a data protection authority in the country where you live, where you work or where you feel your rights were infringed.

For Quebec residents, you may contact the Commission d'accès à l'information du Québec, the public body responsible for overseeing personal data management and processing practices in Quebec, at the following coordinates:

Suite 900
2045 Stanley Street
Montreal (Québec) H3A 2V4

Phone : 514 873-4196
Fax : 514 844-6170
Toll-free : 1 888 528-7741
email : cai.communications@cai.gouv.qc.ca
Website: https://www.cai.gouv.qc.ca/

Right of access

Upon request, we will provide you with reasonable access (physical or online) to your personal information in accordance with applicable laws. Such access may be granted to confirm that we are processing your personal information, how we have used it and to whom we might have transmitted it. You may also access your information to verify its accuracy or to modify your preferences regarding how we use or disclose it. If you created a Devolutions® Cloud account, you may also access some of your information by logging into your account.

When applicable, we will provide you with an electronic file of your basic account information in conformity with the data portability principle. Data portability is the ability to obtain some of your information in a format you can move from one service provider to another. Depending on the context, this may apply to some of your information, but not necessarily to all of your information.

Right to rectification or erasure

You may request that we update, rectify or delete your information. You may also log in to your Devolutions Cloud account and use the editing tools to update, rectify or delete directly your profile information, although such actions will be limited to your account information and will not automatically apply to the information that Devolutions may hold internally for other authorized or legitimate purposes mentioned in this Privacy Policy. We recommend that you contact us if you want such information to be also updated, rectified or deleted. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations.

Deletion of your Devolutions Cloud account

If you wish to delete your Devolutions Cloud account, you or your administrator may be able to do so by logging in to your account and click on the “Delete Account” button. If you are unable to delete your account for any reason, please contact our support team. Please be aware that there may me a delay between the deletion of your account and the erasure of your account information on our databases, and that once such erasure is completed we will no longer be able to retrieve your information. Please note also that the deletion of your account will not delete your information already visible to other users based on your past participation within our online features, such as our community forums.

Restriction on processing

In some cases, you may ask us to restrict the processing of your information where you believe we don't have the appropriate rights to do so. Where you gave us consent to use your information for a limited purpose, you can contact us to withdraw that consent, but this will not affect any processing that has already taken place at the time. When you make such requests, we may need time to investigate and facilitate your request. If there is delay or dispute as to whether we have the right to continue using your information, we will restrict any further use of your information until the request is honored or the dispute is resolved.

Right to object

Where the processing of your information is based on our legitimate interests as explained above, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.

Opt-out request

If the processing of your information is based on your express consent, you have the right to withdraw your consent to the processing of such information at any time, as explained in Section V above

Verification of your identity

To protect your privacy and security, we will take steps to verify your identity before granting access to your information or allowing the exercise of your rights mentioned above. While we will make reasonable efforts to accommodate your request, we also reserve the right to reject it or to impose certain restrictions or requirements if we reasonably believe that (i) this may put the security of your personal information at risk, (ii) the disclosure of such information would likely hinder an inquiry relating to the prevention, detection or repression of crime or statutory offences, (iii) the disclosure of such information would affect judicial proceedings in which you have an interest, or if otherwise required or permitted by applicable laws. If for some reason we decide to deny your request, we will provide you the grounds on which we have based our decision, to the extent possible.

VII. How we retain, store and secure your information

Unless you specifically request us to erase the personal information that we retain on you, we will keep and store your information only as long as we need it for the purposes mentioned in this Privacy Policy and to meet any legal or regulatory requirements. Additionally, we may retain certain information to prevent fraud, collect fees, resolve disputes, troubleshoot problems, assist with investigations, enforce our agreement(s) with you and take other actions permitted by law. The information we retain will be handled in accordance with this Privacy Policy.

Security and confidentiality of your information

To help protect the privacy, confidentiality and security of your personal information, we implement and maintain physical, technical and administrative safeguards against their unauthorized access or their accidental or intentional loss, disclosure, use, alteration or destruction. We update and test our security technology on a regular basis and we allow access to your information only to our authorized personnel who need to process it for the purposes mentioned in this Privacy Policy. Our employees are bound to stringent confidentiality obligations and we regularly keep them aware about the importance of maintaining the privacy and security of your information.

However, as no security system is impenetrable and given the inherent nature of the Internet, we cannot guarantee that data, during transmission through the Internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.

Managed accounts

If the Products, Services or accounts are made available to you through your organization (e.g., your employer), we retain your information as long as required by the administrator of your account.

De-identified information

Information about you that is no longer necessary but relevant to improve or develop our Products and Services may be de-identified and aggregated with other non-personal information. This information will be de-associated with your name and other identifiers.

VIII. How we transfer your information internationally

Devolutions is located in Canada, which was recognized by the European Commission as a jurisdiction ensuring an adequate level of protection for the purpose of transferring personal data outside of the European Union. However, most of the information (including personal information) that we collect from you and that we process via our Websites and Services are hosted on servers owned or controlled by third-party service providers that we engage. Such servers may be located in other jurisdictions that may not have equivalent privacy and data protection laws. When we transfer information (including personal information) of customers or users located in such jurisdictions, we ensure that the transfer is is carried out through authorized transfer mechanisms and that the organizations to which such information is transferred offer appropriate safeguards that comply with the transfer requirements set out in applicable privacy legislation. A list of jurisdictions to which personal information may be transferred can be provided upon request.

IX. Other important information about this Privacy Policy

Information processed or stored with or through our Products and Services

Some of our Products offer various tools allowing you to access, or manage and control the access to, data collected, processed and stored by you or your organization on your computers, on-site servers and/or cloud databases. Devolutions does not have access to such data and it is your sole responsibility to decide how you intend to collect and process it in conformity with applicable laws and to take all appropriate measures and safeguards to ensure their security and protection. We are not responsible for the privacy or security practices of your organization, which may be different than this Privacy Policy.

If you use one of our Services to store your information or information that you have collected from third parties, our obligations as processor or sub-processor of such information will be governed by the terms of our Data Processing Agreement.

Managed accounts

Many of our Products and Services are intended for use by organizations. Where they are made available to you through an organization (e.g. your employer), your account or use of such Products and Services may be controlled by, or be under the responsibility or supervision of, other persons of your organization. If this is the case, please direct your data privacy questions or requests to such designated person(s) in your organization, who may then contact us as provided below.

Children’s Privacy

Our Websites, Products and Services are not designed or structured to attract or be used by children or minors, and we do not intend to collect personal information from any such person. In any case, we will not use and will delete as quickly as possible any such information. If you believe that we might have any such information, please contact us at privacy@devolutions.net.

Changes and updates to this Privacy Policy

We may change this Privacy Policy from time to time. Whenever we update this Privacy Policy we will change the effective date to indicate when its terms have been updated. We can also provide you upon request our prior versions of this Privacy Policy. We encourage you to review our Privacy Policy whenever you use our Websites, Products or Services to stay informed about how we process and manage your information.

If you disagree with any changes to this Privacy Policy, you will need to stop accessing or using our Websites, Products or Services or otherwise interacting with us, and your continued use will mean that you accept those changes.

Contact us

Except expressly mentioned otherwise in this Privacy Policy, your information is controlled by Devolutions. If you have questions, concerns or complaints about how your information is handled or processed, please direct your inquiry to Devolutions’ Privacy Director at the following coordinates:

Privacy Director
1000 Notre-Dame
Lavaltrie (Québec) Canada, J5T 1M1
Email : privacy@devolutions.net
Phone : 514 360-3686

GDPREP.ORG has been appointed as Devolutions’ representative in the European Union, United Kingdom and Switzerland for data protection matters pursuant to Article 27 of the EU/UK GDPR and Article 14 of the CH FADP. GDPREP.ORG can be contacted in addition to Devolutions’ points of contact above, at the following coordinates:

UK Address / Contact Information

a: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE
w: http://www.gdprep.org
e: info@gdprep.org
t: +44 (0) 7810 883333

EU Address / Contact Information

a: Suite 10357, 5 Fitzwilliam Square, Dublin 2, Ireland, D02 R744
w: http://www.gdprep.org
e: info@gdprep.org
t: +44 (0) 7810 883333

SWISS Address / Contact Information

a: Andreaspark, Hagenholzstrasse 56, 7th Floor, Zurich, 8050
w: http://www.gdprep.org
e: info@gdprep.org
t: +44 (0) 7810 883333

Last update : September 22, 2023

Recruitment Privacy Policy

What data is collected and for what purposes?

Job alerts

By subscribing to our job alerts, you provide us with the relevant information to receive alerts by email that match your preferences, including:

• your contact details (name, email)
• your site preferences

The data collected through this process is only used to provide you information on our job alerts.

Selection process

We collect information from your resume and other documents submitted with your application, including:

• Your contact details (name, email, address, phone number)
• Your employment and professional experiences
• Your educational background, degrees, and certifications
• Your interests, other experiences, and other profile information relevant to the advertised position

The data collected during this stage is only used for the following purposes:

• Communicate with you as part of the selection process or in the event of a future job opening that matches your application.
• Review your application and confirm that your educational and employment backgrounds align with the requirements of the advertised position.
• Confirm your interest, skills, and ability to fill the advertised position.

In case your application is successful

• Your date of birth, enabling us to conduct a criminal background check and, if the nature of the position requires it, a credit check.
• Contact information allowing us to reach out to your previous employers or other listed references, to obtain their feedback or opinions about you and to validate the information provided with your application.

Your written consent will be requested in advance to gather this information and to perform these checks.

How is your data collected?

• Directly from you, whether through the documents submitted with your application, during our interactions with you, or in the course of prospective job interviews.
• Some information is obtained from third parties, including:
  • Your former employers or other listed references (with your consent).
  • External firms tasked with conducting criminal background checks or credit checks.

Who can access your data?

The data we collect about you is processed and kept confidential. Only certain members of our human resources department have full access to your application file, and some of your information (mostly non-sensitive) is also accessible to the relevant manager(s) and other employee(s) involved in the selection process.

To whom is your data transferred?

Your data may be transferred to the following third parties as necessary to fulfill the processing purposes mentioned above:

• External firms tasked with conducting criminal background checks or credit checks.
• Your former employers or other listed references.

Information received are also processed and stored on HRWize, our electronic human resources management platform. Please note that data submitted to this platform is encrypted at rest and may be transferred to the United Kingdom for storage purposes only.

We keep the data you provide us for job alerts till you unsubscribe from our newsletter, or if you do not interact with our posts for an extended period following notification from us to this effect.

How long is your data retained?

Records of unsuccessful candidates are kept throughout the recruitment process and for an additional period of 1 year, after which the records are securely destroyed in their entirety.

Records of hired candidates are stored in accordance with our employee records retention policy (normally up to 5 years following the end of the employment relationship).

Your rights regarding your data

You can contact us at any time to:

• Access your application file to verify the data we hold about you or to check its accuracy.
• Update or rectify your data.
• Withdraw your consent for the communication or processing of your data.
• Request the erasure of your data.
• Unsubscribe from our mailing list.

Please note that exercising any of these rights may prevent us from processing your application file properly, in which case you will be notified.

Additional information on our privacy practices is provided in Devolutions’ main Privacy policy.

How to contact us

If you have any questions, concerns, or complaints about how we handle your data, please address them directly to our Privacy Director at the following contact information:

Vice President of Legal Affairs and Privacy
1000 Notre-Dame St.,
Lavaltrie, Quebec, J5T 1M1
Email: privacy@devolutions.net
Phone: 514-360-3686

You may also contact the Commission d'accès à l’information du Québec, the public body responsible for overseeing the personal data management and processing practices in Quebec, at the following contact information:

2045 Stanley St., suite 900
Montreal, Quebec, H3A 2V4
Phone: 514 873-4196
Fax: 514 844-6170
Toll-Free Phone: 1 888 528-7741
Email: cai.communications@cai.gouv.qc.ca
Website: https://www.cai.gouv.qc.ca/

Last update: April 29, 2024

Cookie Notice

This Cookie Notice explains how Devolutions (“Devolutions”, “we”) uses cookies and other similar technologies (including pixels and web beacons), along with their purposes, and how you may manage them. It applies to all websites and services accessible under “http://devolutions.net ” (the “Website”).

What is a cookie?

Our Website uses cookies, which are small files stored on your device containing specific information. Cookies may be placed by Devolutions (referred to as “first-party cookies”) or by third party providers providing services to Devolutions (referred to as “third-party cookies”). Cookies serve various purposes, such as enabling specific functionalities on the Website—for example, preserving a user's language selection.

Cookies also help Devolutions or third-party providers recognize repeat visits by identifying the device used to access the Website. This functionality allows us to understand user interactions on the site, helping us tailor content and improve services.

Our Third-Party providers

We allow certain third-party companies to place cookies on our Website. While using our Website, you may encounter third-party embedded content or be directed to external sites, including social media platforms, to share content, complete surveys, or submit job applications. These third parties may use their own cookies to collect data on your interactions over time, combining it with information from other services to analyze trends, measure content popularity, and understand your online behavior.

A list of third-party cookies we use is available in our Cookie Preference banner, which includes (but is not limited to) cookies from the following providers:

• Salesforce
• HRwize
• Stripe
• PayPal
• Calendly
• Disqus
• YouTube
• Google

In compliance with certain data protection laws, sharing information like device details or browsing activity may be considered a “sale” or “sharing” for targeted advertising. Our Cookie Preference banner is designed to respect these regulations, displaying a “Do Not Share or Sell My Personal Data” option where applicable.

Please note that we do not control these third-party cookies, as each provider has its own privacy and cookie policies. However, third-party cookies are deployed only with your consent (unless strictly necessary). While we do our best to keep this information updated, note that the number and names of cookies, pixels and other technologies may change from time to time.

Types of Cookies

Cookies are classified into five categories based on their function and purpose: strictly necessary cookies, performance cookies, functionality cookies, marketing cookies and targeting cookies. Below are definitions of frequently used types of cookies and their functions. You can find more information about each type of cookie in our Cookie Preferences center.

Other tracking technologies

Devolutions may occasionally advertise on third-party websites. To assess the effectiveness of these advertising campaigns, we may use visitor identification technologies like “web beacons” or “pixel tags.” Pixel tags and web beacons are digital tracking elements embedded within web pages. These tools enable us to gather information about visitors who arrive at our Website after interacting with a Devolutions ad on an external site.

We do not use these tools to access your personal information and it is only used to compile aggregated statistics about visitors who come to the Website to measure the effectiveness of our advertising campaigns and to analyze user behavior on the Website.

Just like standard cookies, pixels, web beacons and other technological tools are subject to the same rules for management and consent. Our Website is configured so that these tools are only deployed after obtaining user consent for the category under which they are listed.

Google Analytics

At Devolutions, Google Analytics is configured with strict governance and respect for user privacy. Online tracking services on our Website are managed through Google Tag Manager (GTM), which itself does not perform tracking but serves to centralize management of tracking from any vendor. In Google Analytics, we have set a retention limit, ensuring that user-level data older than 14 months is automatically deleted. Additionally, all tags in GTM undergo a thorough test/QA process to ensure compliance with user cookie consent settings, meaning that Google Analytics cookies are only activated if the user consents through the cookie banner.

Your Choices

You may find a detailed list of the cookies we use on our Website and opt-in or opt-out of each cookie category (except strictly necessary cookies) by clicking on the cookie icon on the bottom left of this page. Stored cookies can also be deleted at any time in the system settings of your device and/or Internet browser. Please note that the functionality and range of functions may be limited if you block cookies or similar technologies or do not give your consent to their use.

Global Privacy Control

Our Website recognizes and supports the Global Privacy Control (GPC) signal, a browser setting that allows users to automatically communicate their privacy preferences in regards to our first and third-party trackers. When you enable GPC in your browser, our Website will recognize this signal as an indication of your preference to opt out of certain tracking, such as third-party cookies and other tracking technologies used for advertising and analytics purposes.

By enabling GPC, you can manage your privacy preferences across participating websites without needing to manually adjust settings or preferences on each site. Here’s how to do it:

1. Mozilla Firefox: Enable Global Privacy Control in Firefox
2. Google Chrome: Global Privacy Control
3. Microsoft Edge: Tracking prevention
4. Safari (macOS and iOS): Prevent Cross-Site Tracking in Safari

Privacy

Devolutions is responsible for any data collected through first-party cookies as outlined in this Cookie Notice and is committed to upholding global privacy standards, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

For more information on your rights regarding our processing of personal data or if you have any questions or concerns about this Cookie Notice, please contact Devolutions’ Privacy Director at the following coordinates:

Privacy Director
1000 Notre-Dame
Lavaltrie (Québec) Canada, J5T 1M1
Email : privacy@devolutions.net
Phone : 514 360-3686

Deleting Your Data

How to Delete Your Devolutions Account and Data

Below, you will find the different steps and procedures required to delete your Devolutions account and/or data. Note that these procedures can change depending on the type of data being deleted.

Once a data deletion request has been made, the data is deleted from our products’ databases within a 30-day period and the backups are automatically erased after a 12-month period.

If you have any questions, please contact our Privacy Director at privacy@devolutions.net

Deleting Devolutions Accounts

1. Login to the account at portal.devolutions.com.

2. In the “profile” tab, click on “Delete Account”.

Note: If you own a Devolutions Cloud workspace, you won’t be able to delete your account until you delete your Devolutions Cloud workspace first.

We therefore recommend exporting your Devolutions Cloud data before deleting your Devolutions account if you wish to keep a backup copy of your Devolutions Cloud.

Deleting Devolutions Cloud Accounts

1. Login to the account at portal.devolutions.com

2. In the “workspaces” tab, select the workspace you want to delete, click on "..." and select the “Delete” option.

Note that only the account’s admin can delete a workspace. If you are not the admin but wish to delete the data stored in it, please contact your admin. Devolutions cannot grant these requests.

Deleting Your Data in RDM

RDM is installed locally on your devices (desktop or mobile). Therefore, Devolutions has no access to the data or data sources stored on them and cannot delete them. If you want to delete the data or data sources stored in RDM, here are the steps to follow:

For the RDM desktop app

1. Select the “database” option in the “File” tab
2. Click on the “X” to delete the selected data source

For the RDM mobile app

1. On the home page, click on “≡” and select “data sources”
2. Select the data sources that you wish to delete, then click on “⋮”
3. Select the “Delete the Data Source” option.

Please note that deleting data sources stored in RDM does not automatically delete the external data these that data sources had access to. This operation has to be done separately according to the procedures applicable to each source.

Deleting All Your Personal Data

Deleting your Devolutions Account or Devolutions Cloud does not necessarily erase all the personal data Devolutions keeps for other legitimate or authorized reasons, as mentioned in our Privacy Policy. For example, we could keep your personal data if you have opened a service ticket with our support team or if you subscribed to one of our email lists.

If you wish to erase all your personal data held by Devolutions, or for all other requests relating to your personal data, you can do it by completing the form at the bottom of this page. Make sure to write your whole name and the email address linked to the account or the data you wish to see erased. A member of our team will then contact you to attend to your request within the timeframe set by the law.

To no longer receive communications from us

You can always unsubscribe or withdraw from our email lists by one of the following means:

1. Click on the link provided in the emails and other electronic communications sent by Devolutions.

2. Login to your Devolutions account at portal.devolutions.com, go to the “profile” tab, and click on the “Manage” link in the “Communication” section. You will then receive an email with a link allowing you to access your email preference center. You can then choose which subscription to keep or to remove, or simply click on “Opt out from all email communications”.

3. Submit a request to that effect at privacy@devolutions.net.

LIST OF SUB-PROCESSORS

(Annex III of the New SCC / Table 3 of the UK International Data Transfer Agreement)

The following is a list of the Sub-processors used by Devolutions to Process Personal Data on behalf of Customers pursuant to a Service. Devolutions imposes obligations on its Sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of Personal Data is protected to the standards required by applicable data protection laws. Further information relating to Sub-processor privacy policies and security measures can be found via the external links below.

Last update : April 17, 2026

Guidelines for legal requests for information

1. Introduction

Devolutions provides privileged access management, password management and remote connection management software for organizations and individuals.

These guidelines (the “Guidelines”) provide information to law enforcement officials wishing to request customer information or customer content data from Devolutions in the context of investigations or enforcement of applicable laws. Our Customers and Users may also find this document relevant to understand what information we share with law enforcement and under what circumstances when we receive such legal requests.

For first-party requests (i.e. if you are seeking your own information), please consult our Privacy Policy for more information about your right of access.

In the context of these Guidelines:

• “Customer” refers to an organization or individual purchasing a software license from Devolutions or subscribing to a Software-as-a-Service offered by Devolutions.

 

• “Customer Data” refers to the content data that a Customer or its Users may store with Remote Desktop Manager or Devolutions Server on their local systems or in our cloud-based services such as Devolutions Cloud and Devolutions Account.

 

• “User” refers to an individual who is duly authorized by a Customer to install, use or access our software products and services.

We may from time to time change our practices for responding to legal requests for information, in which case these Guidelines will be updated.

2. Basic principles

Devolutions recognizes the importance of helping law enforcement serve their legitimate interest in protecting the public, while also being committed to protecting the privacy rights of its Customers and Users, and of anyone else who entrusts us with their personal information.

Having to balance and deal with these often competing interests is not always easy. This is why hope that these Guidelines will help to set expectations on both sides, as well as to add transparency to our internal processes when we receive legal requests for information from law enforcement.

Below are the basic principles that Devolutions will apply when responding to such legal requests:

Legal requirement

When the legal request concerns identifiable non-public information, we will not share this information unless we obtain the prior written consent of the affected individuals or entities, or unless we reasonably believe that we are legally required to do so under the laws that apply to us. In all cases we reserve the right to object to any requests for non-public information, especially where production is prohibited by privacy laws or where the process served is insufficient to compel production of the requested data.

Jurisdiction and authority

We will generally refuse to disclose non-public information if the legal request or court order is issued by a requesting body that lacks jurisdiction over Devolutions, or that does not have the legal authority to issue and to enforce the relevant request, subpoena, or court order.

Notification to affected persons

We will notify affected individuals and entities before we produce information about them, and provide them with an opportunity to object to the disclosure 7-10 days prior to production, unless we are legally prohibited from doing so. We may shorten the notice period in our discretion, but we generally only do so in emergency situations. Public authority or law enforcement officials who believe that such notification would jeopardize an investigation should obtain an appropriate court order or other process that specifically prohibits such notification, and should specifically mention this requirement in their request.

Minimum information

We will only provide information directly related to the activity addressed in the request and we will limit the information that we disclose to the minimum that is necessary to satisfy the legally enforceable request. We will seek to limit or object to requests that are overbroad or seek a large amount of information or affect a large number of Customers or Users.

3. How to submit a legal request for information

Legal requests for information must be made by completing this form.

It is important that you fill in all required fields in our form with detailed information and provide all relevant supporting legal documents (such as a subpoena, court order, or a warrant) when submitting a legal request. An incomplete form or the lack of supporting documents may delay or prevent the processing of your request.

You will need to fill in the following required fields to submit your request:

• Your official email address and contact phone number;
• Your name and badge/ID;
• The nature of your request (by selecting the most relevant category from the list provided in the form);
• The subject of the request (for example a domain address, an email, a business name or an individual’s name);
• The specific description of the information that is needed;
• Name or title of the authority issuing the request (for example, the court that issued the subpoena or government agency that authorized the request);
• Jurisdiction of the requesting body;
• The date by which the legal process requests a response from us;
• If the request must be kept confidential (in which case the court or administrative order that is uploaded must include a disclosure prohibition or the statute, law, or regulation that prohibits disclosure must be properly identified);
• If it is an emergency request (in which case additional questions will need to be answered to help us evaluate such emergency).

We cannot guarantee any specific response time (even in the case of an emergency request), although we will use commercially reasonable efforts to respond to your request as quickly as possible.

Devolutions reserves the right to seek reimbursement for the costs associated with responding to public authority or law enforcement data requests, where appropriate.

4. Jurisdiction and requests from foreign law enforcement

Canadian government requests

As a Canadian entity, Devolutions may provide information it holds in response to an order issued by a Canadian court or a warrant issued by a Canadian authority, to the extent that all legal requirements are met.

Non-Canadian government requests

Devolutions is not legally required to provide data to foreign governments in response to legal process issued by foreign authorities. Foreign law enforcement officials wishing to request information from Devolutions should contact the appropriate Canadian public authorities, and Devolutions will promptly respond to requests that are issued via Canadian public authorities or Canadian courts by way of a mutual legal assistance treaty (“MLAT”) or letter rogatory.

5. Data preservation requests

We will take steps to preserve requested information for up to 90 days upon formal request from law enforcement in connection with official criminal investigations, and pending the issuance of a court order or other process. Preservation requests must meet all the relevant requirements applicable to legal requests for information mentioned above, and must specify the particular information to be preserved. A request to extend the preservation for an additional 90 days may be submitted to Devolutions by law enforcement before the expiry of the first 90 days period.

6. Emergency requests

Devolutions evaluates emergency requests on a case-by-case basis. If you provide information that gives us a good faith belief that there is an emergency involving imminent danger of death or serious physical injury to any person, we may provide information necessary to prevent that harm if we are in a position to do so, consistent with applicable law and at our sole discretion. Emergency requests must be submitted by filling out the appropriate sections of our form.

7. Types of data that Devolutions may have

The data that we hold on Customers or Users will depend on the Devolutions products or services that they use, the types of interactions that they have with us, and our data retention policies.

When the legal request concerns Customer Data, we will instruct the requestor to obtain that information directly from our Customer, who is the controller of that data, and also because we generally do not have access to Customer Data, as is it whether stored locally on Customer’s or User’s systems or encrypted client-side, depending on the product or service involved.

Categories of data that may be available for law enforcement:

• Basic Customer or User account information such as email address, name, phone number, organization, billing contact information and/or transactional records;
• Other User account information such as username, User groups, URL, account creation date, date that User last accessed its account, IP addresses associated with log-ins to a User account, administration and server logs;
• Content of written communications between Customers / Users and Devolutions, including through our sales and customer support channels and our online forum.

Last update : December 20, 2022