Privacy Policy

1. Introduction

Welcome to DevTrack ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our service:

• Account Information: Email address, password (encrypted), and authentication credentials
• Profile Information: Name and other optional profile details
• Project Data: Project names, descriptions, dates, tech stacks, and related information
• Account References: Gmail and GitHub account information you choose to track
• Technology Stack Data: Information about technologies you use in your projects

2.2 Automatically Collected Information

When you access our service, we automatically collect certain information:

• Log Data: IP address, browser type, operating system, and access times
• Usage Data: Pages visited, features used, and interaction patterns
• Device Information: Device type, unique device identifiers
• Cookies: Session cookies for authentication and functionality

2.3 Third-Party Authentication

If you choose to authenticate using Google or GitHub, we receive:

• Your email address
• Profile information (name, profile picture)
• Authentication tokens (stored securely)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our service
• Account Management: To create and manage your account
• Authentication: To verify your identity and secure your account
• Data Storage: To store and organize your project information
• Communication: To send service-related notifications and updates
• Analytics: To understand how users interact with our service
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with legal obligations

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using Supabase, a secure PostgreSQL database platform. We implement industry-standard security measures including:

• Encrypted data transmission (SSL/TLS)
• Encrypted password storage
• Row-level security policies
• Regular security updates and patches
• Secure authentication tokens

4.2 Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You can request deletion of your account and data at any time.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers (Supabase, Vercel) who assist in operating our service
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Export: Export your project data in CSV format
• Opt-Out: Opt-out of non-essential communications
• Portability: Request a copy of your data in a portable format

To exercise these rights, please contact us through the service or our support channels.

7. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Analyze service usage
• Improve user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service.

8. Third-Party Services

Our service integrates with third-party services:

• Supabase: Database and authentication services
• Vercel: Hosting and deployment
• Google OAuth: Optional authentication
• GitHub OAuth: Optional authentication

These services have their own privacy policies. We encourage you to review them.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our service, you consent to such transfers.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through:

• Our website contact form
• Support channels within the application
• Email support (if provided)

14. Your Consent

By using our service, you consent to our Privacy Policy and agree to its terms.