MegaDev
Privacy policy
This policy explains how MegaDev processes personal data when you use the website, tools and contact forms.
Last updated: 21 September 2026
What data we process
We process information you provide voluntarily: name, email address, telephone number, company information and the contents of your enquiry. Technical data such as IP address, device type and basic logs may be processed for security and reliable operation.
Purposes and legal bases
We use data to answer enquiries, provide requested services, protect our systems and comply with legal obligations. Depending on the circumstances, the legal basis is taking steps at your request, a contract, legitimate interests or consent where required.
Retention and recipients
We retain information only as long as needed for its purpose and the applicable legal retention periods. Data is shared only with trusted hosting, communications and analytics providers under agreed safeguards.
Your rights
Where provided by law, you have rights of access, rectification, erasure, restriction, objection and portability. You may withdraw consent without affecting the lawfulness of processing before withdrawal.
Enquiries through the assistant
The assistant displays prepared answers on your device. If you explicitly submit a question through the form, your name, email and message are sent through MegaDev's contact form to the email service for a response. The recipients are MegaDev's business mailboxes.
MegaTools checks
For a website check, we process the submitted domain and make one HTTPS request from our server to its public home page. The domain owner may see that request in their logs. Email-domain checks query public MX, SPF and DMARC DNS records. To limit abuse, an IP-address hash and check times are stored in a protected temporary directory; rate-limit entries are filtered after one hour, while the file may remain until system cleanup. Passwords and files used in local tools are not sent to our server. Only if you explicitly choose the additional leaked-password check does the browser send the first 5 characters of a SHA-1 hash to Pwned Passwords. The password and full hash are not sent. That service may see the user's IP address.
Contact
The data controller is MegaDev OOD, Sofia, Bulgaria. For questions and to exercise your rights: info@megadev.bg.