Privacy Policy

1. Who we are

DevFactory is operated from Pune, Maharashtra, India. For any question about this policy or about your data, write to privacy@devfactory.in.

2. What we collect

Account data: your name, work email address, and the organisation you say you belong to.

Project data: the repositories, tasks, gate results, evidence artifacts and screenshots you or your agents produce while using the product.

Usage data: which pages and features are used, and error and performance logs needed to keep the service working.

Correspondence: what you send us by email, kept so we can answer it.

3. Why we process it

To provide the service you asked for, which necessarily means storing your tasks, gate results and evidence.

To keep the service secure and diagnose failures.

To reply to you.

During the private beta, to understand which parts of the product work. We do this on aggregate usage patterns, not by reading your source code for product research.

4. Legal bases

Where the GDPR applies, we rely on performance of a contract for providing the service, legitimate interests for security and service improvement, and consent where we ask for it separately. You can withdraw consent at any time.

5. Sharing

We do not sell personal data and we do not share it for advertising.

We use infrastructure and email providers to run the service, and they process data only on our instructions. We will name our current processors on request.

We disclose data if the law requires it, and we will tell you unless we are legally prevented from doing so.

6. Retention

Project data is kept while your account is active. On deletion we remove it within 30 days, except where we are required to keep records for legal reasons.

Evidence ledger entries are append-only during the life of the project. Deleting the project deletes the ledger with it.

7. Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to processing. Write to privacy@devfactory.in and we will respond within 30 days.

If you are in the EU or UK and you are not satisfied with our response, you can complain to your local data protection authority.

8. International transfers

We operate from India and use infrastructure that may store data in other countries. Where we transfer personal data out of the EU or UK, we use standard contractual clauses.

9. Cookies

This website does not use advertising or tracking cookies. The application uses cookies that are necessary to keep you signed in.

10. Changes

If we change this policy in a way that matters, we will tell account holders by email rather than quietly changing the date at the bottom.