Privacy Policy

1. Who is responsible for your data

DevDeer Tech Ltd is the data controller for personal data collected through devdeer.tech and our client services. Contact us at support.devdeer.tech@gmail.com or ⟨registered address⟩. ⟨If/when you appoint an EU or UK representative or DPO under GDPR Art. 27, name them here.⟩

2. What we collect and why

• Account and client data — name, email, and the project, invoice and file information you provide when you use the client dashboard. Basis: performance of a contract.
• Contact and project enquiries — what you send through the contact form or a project brief. Basis: taking steps at your request before a contract, or our legitimate interest in responding.
• Newsletter — your email, if you subscribe. We use confirmed (double) opt-in, so we only add you after you click a confirmation link. Basis: consent, withdrawable at any time via the unsubscribe link in every email.
• Push notifications — if you enable browser push, we store a device push token through Firebase Cloud Messaging (FCM) to deliver notifications you asked for. Basis: consent, withdrawable by turning notifications off in your browser or dashboard. Delivery involves Google (FCM) as a processor.
• Analytics — aggregate, privacy-respecting usage statistics via ⟨Plausible / Google Analytics — name the actual tool⟩ to understand how the site is used. Basis: ⟨legitimate interest for cookieless analytics such as Plausible, or consent where the tool sets cookies such as Google Analytics⟩. See the Cookie Policy.
• Security and logs — technical logs including IP address and request metadata, kept to operate the service securely. Basis: legitimate interest in security and fraud prevention.

3. Cookies

The cookies and similar technologies we use, and how to control them, are described in our Cookie Policy.

4. How we share data

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract — for example ⟨hosting provider⟩ (VPS hosting), Vercel (frontend hosting/CDN), Google (FCM push delivery), and our email/newsletter provider ⟨name⟩ — and where the law requires disclosure.

5. International transfers

We operate internationally, and some processors are located outside your country. Where we transfer personal data of EU/UK data subjects outside the EEA/UK, we rely on an appropriate safeguard such as the European Commission's Standard Contractual Clauses (and the UK addendum), or an adequacy decision where one applies.

6. How long we keep it

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. Invoices and records we must keep for tax and accounting reasons are retained for the legally required period, with personal details removed once retention is the only remaining reason to hold them.

7. Your rights

Where the GDPR applies, you have the right to access, rectify, erase, restrict and port your personal data, to object to certain processing, and to withdraw consent at any time. Signed-in clients can request a copy of their data or its erasure from the Privacy section of the dashboard; anyone can email support.devdeer.tech@gmail.com. We respond within one month. You also have the right to complain to your local data protection authority.

8. Security

We protect data with encryption in transit (TLS), hashed credentials, scoped access, and private file storage with validation. No system is perfectly secure, but we take reasonable measures appropriate to the risk.

9. Children

Our services are not directed at children under ⟨16⟩, and we do not knowingly collect their personal data.

10. Changes

We may update this policy; the "last updated" date reflects the current version, and we will flag material changes.

11. Contact

Privacy questions or requests: support.devdeer.tech@gmail.com.