This document is a product-specific operational draft and does not replace advice from qualified legal counsel.
Scope
Dravelyx is a service operated by Marsh Engineering Services LLC, a Georgia limited liability company. This Privacy Policy applies to dravelyx.com, the Dravelyx application, and related services. It does not govern repositories, systems, or data that a customer independently controls. When Dravelyx processes personal information on behalf of a business customer, that customer is the controller or business and Marsh Engineering Services LLC acts as its processor or service provider.
Information we collect
- Account and identity information, such as name, work email, authentication provider identifiers, and workspace membership.
- Customer content, such as project metadata, backlog tasks, execution plans, approval decisions, and audit records.
- Integration metadata and encrypted credentials required to connect services that you authorize.
- Usage and diagnostic data, including request identifiers, timestamps, device and browser information, service events, and security logs.
- Billing and subscription records. Payment card details are processed by our payment provider and are not stored by Dravelyx.
- Communications that you send to support, security, privacy, or sales contacts.
How we use information
- Provide, secure, maintain, and improve the service.
- Authenticate users, isolate tenants, enforce permissions, and prevent abuse.
- Execute approved workflows and maintain evidence, cost, and audit records.
- Process subscriptions, communicate service changes, and respond to requests.
- Comply with law, enforce agreements, and protect Dravelyx, customers, and others.
How we disclose information
We disclose information to infrastructure, authentication, email, payment, monitoring, and integration providers only as needed to provide the service. We may also disclose information when required by law, during a corporate transaction, or with your direction. Dravelyx does not sell personal information. We do not use customer source code or private customer content to train shared models unless a customer expressly opts in under a separate written agreement.
Retention and security
We retain information for the period needed to provide the service, meet contractual and legal obligations, resolve disputes, and maintain security and audit evidence. Retention varies by data category and customer configuration. We use tenant isolation, access controls, encryption, credential separation, audit logging, and bounded execution controls, but no system can guarantee absolute security.
Your choices and privacy rights
Depending on where you live, you may have rights to know, access, correct, delete, or receive a copy of personal information, and to object to or restrict certain processing. You may also have the right not to be discriminated against for exercising a privacy right. Dravelyx does not sell personal information or share it for cross-context behavioral advertising.
Submit a request to [email protected]. We may verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law.
International use and children
The service is operated for business users and may process information in the United States and other locations where our providers operate. The service is not directed to children under 13, and we do not knowingly collect their personal information.
Contact and updates
Questions and privacy requests may be sent to [email protected] or mailed to Marsh Engineering Services LLC, 1082 Noble Oak CT, Lawrenceville, GA 30046, United States. We may update this policy as the service or law changes. We will post the revised date and provide additional notice when required.