Privacy Policy

1. Who we are

DevFlow is operated by Individual Entrepreneur Stanislav Ryabtsev, Georgia (the data controller for accounts and product usage). Contact: hello@devflow.team.

When you buy a subscription or AI balance, Paddle.com is Merchant of Record and an independent controller for payment, tax, and invoice data. See Paddle’s Privacy Policy and paddle.net.

2. Data we collect

• Account data — email, optional display name, password hash, role, session tokens.
• Billing metadata we store — plan preference, Paddle customer / transaction identifiers, and whether a subscription is active. We do not receive or store full card numbers.
• Payment data collected by Paddle — name, billing email, address, tax identifiers, and payment-method details needed to take payment and issue invoices. That processing is described in Paddle’s policy, not ours.
• Product telemetry you enable — for example request history inside the IDE when that feature is turned on for your workspace.
• Technical logs — IP address, user agent, error logs needed to secure and operate the Service.

3. Local projects

Project files normally stay on your device. When you use Agent or chat features, prompts and relevant context may be sent to model providers you configure or that we route through for your account. Do not submit secrets you are not allowed to share.

4. Why we process data

We process personal data to:

• create, authenticate, and secure accounts (contract);
• provide the Service, including paid plan entitlements after Paddle confirms a purchase (contract);
• prevent abuse and debug outages (legitimate interests);
• comply with accounting and legal duties (legal obligation).

We do not sell your personal data. Marketing email is sent only if you opt in, and you can unsubscribe at any time.

5. Processors and other parties

We may use infrastructure, database, email, analytics, and model providers as processors under contract. They may only use data as needed to provide their service to us.

Paddle is not our payment processor in the usual sense: it is the seller of paid products. We share the minimum account identifiers needed to match a Paddle checkout to your DevFlow account (typically email and a customer/transaction id).

6. Cookies and similar technology

The website uses a session cookie to keep you signed in. Paddle Checkout may set its own cookies when you pay; those are governed by Paddle. We do not run advertising pixels on legal pages.

7. Retention

Account data is kept while your account is active and for a reasonable period afterward for security, accounting, and legal requirements. Paddle retains transaction records as required for tax and card-network rules. You may request deletion at hello@devflow.team, subject to mandatory retention (including invoices).

8. Your rights

You can update profile fields in the product, sign out, or request access, correction, deletion, or a copy of your data by email. Where GDPR or similar laws apply, you may also object to or restrict certain processing and lodge a complaint with your local supervisory authority.

For payment records, contact Paddle as well as us — we cannot erase data Paddle must keep as Merchant of Record.

9. International transfers

Servers and processors may be located outside your country, including the EU, US, or Georgia. We use appropriate safeguards where required. Paddle’s transfers are described in their privacy notice.

10. Children

The Service is not directed to children under 16. If you believe a child registered, contact us to remove the account.

11. Security

We hash passwords, use HTTPS, and restrict access to production systems. Card data is collected only inside Paddle Checkout; we never ask you to email card numbers.

12. Changes

We will post updates on this page. Significant changes may also be communicated by email when appropriate. Related product terms: Terms and Refunds.

Also see Terms, Privacy, Refunds, Pricing.