Introduction
This Website Privacy Notice (“Notice”) describes how DevPlus, Inc. (“DevPlus,” “we,” “our,” or “us”) collects, uses, and protects personal data when you visit our Site. The processing of Customer Data submitted by enterprise customers through the DevPlus platform is governed by the applicable Platform Privacy Policy and/or Data Processing Agreement (“DPA”) entered into between DevPlus and each such Customer, and not by this Notice. As used herein, “you” or “your” refers to you, the user accessing the Services.
Definitions
For purposes of this Notice:
- “Personal Data” means any information that relates to an identified or identifiable natural person.
- “Customer Data” means data submitted by enterprise customers to the DevPlus platform pursuant to a Customer Agreement, which is not governed by this Notice.
- “Aggregated De-Identified Data” means data derived from Personal Data that has been de-identified such that it cannot reasonably be used to identify any individual.
- “Sub-processor” means any third-party processor engaged by DevPlus to process Personal Data on DevPlus’s behalf.
Data Collection
Information You Provide: We collect information you provide directly, such as names, business email addresses, job titles, and company names when you request a demo, create an account, subscribe to communications, or contact support.
Processing of Customer content, such as cloud credentials, secret references, uploaded documents and tenant operational data within the DevPlus platform is governed by the applicable Customer Agreement and DPA, not this Notice.
Automatically Collected Data: We automatically log standard technical information when you visit the Site, including IP addresses, browser types, pages visited, time and date of visits, and referral URLs and other usage patterns across our Site. See our Cookie Policy for further information on tracking technologies.
Use of Information
We use collected information to:
- Provide, operate, and maintain the Site and our marketing and communications activities.
- Respond to inquiries, schedule demos, and provide customer support.
- Improve and optimize Site performance and security.
- Communicate with you regarding updates, security alerts, and support messages.
- Comply with legal obligations and enforce our agreements.
- Generate Aggregated Anonymous Data for product analytics, benchmarking, and service improvement. Aggregated Anonymous Data is not Personal Data and may be used without restriction.
Data Security and Compliance
We implement rigorous technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Please note, however, that security incidents can occur even if reasonable steps are taken to prevent such incidents; for example, we cannot guarantee that Personal Data will not be illegally accessed or intercepted through the Internet while being hosted by us, transmitted to us by you, or transmitted by us to third parties. Additionally, we have absolutely no control over the security of other third-party sites you might visit, interact with, or do business with.
If your Personal Data is altered, destroyed, acquired, accessed, used, or disclosed in a manner not outlined by this Privacy Policy that compromises the privacy or security of the Personal Data, you agree to receive any required notifications of this breach via electronic mail in lieu of first-class mail. The notification may be provided in one or more electronic mailings as information becomes available. If you do not agree to receive breach information via electronic mail, you must contact us at compliance@devplus.io and withdraw your consent. You also permit DevPlus, to the extent your phone number is available and current, to call you and notify or update you about the breach of your personal data prior to and after sending electronic mail notification. To the extent required by applicable law, we may report the breach of information to governmental authorities or other third parties.
We comply with federal and state laws requiring us to notify you, and in some cases legal authorities, in the event of a breach of your personal data. We also require our contractors and service providers to demonstrate that they deploy similar security safeguards.
Data Sharing and Sub-processors
We do not sell Personal Data. We share Personal Data with the following categories of third parties:
Sub-processors. We use Microsoft Azure (hosting, including Azure AI Foundry for AI-assisted features), MongoDB Atlas (primary data storage), Cloudflare (edge network, DNS, and log storage), and WorkOS (authentication and invitation emails) to provide the Services. Each sub-processor is contractually required to implement data protection measures at least equivalent to those in this Notice. A current list of our sub-processors is available at https://trust.devplus.io/.
Other service providers. We use Microsoft 365 and Microsoft Teams to manage demo requests and corporate email, and Google Fonts to serve fonts on our website. These providers process data we control directly and are not sub-processors under our Data Processing Agreements.
Customer-connected services. If you access a service that your organization has connected to the DevPlus platform (for example, GitHub, AWS Secrets Manager, or your organization's own Azure Key Vault), that service belongs to your organization's own vendor relationship, not to DevPlus. Its processing of your data is governed by your organization's agreement with that provider and by the connected-services provisions of the applicable Data Processing Agreement, not by this Notice.
We may also disclose information to third parties as follows:
- to comply with applicable laws or legal process;
- to establish, exercise, or defend legal claims;
- to enforce our agreements and policies;
- to investigate fraud, abuse, misuse, or security incidents;
- to protect the rights, property, safety, and security of DevPlus, our users, or others;
- as otherwise required or permitted by law;
- in connection with a merger, acquisition, reorganization, or sale of all or substantially all of DevPlus’ assets, Personal Data may be transferred to the successor entity, subject to this Notice or a notice providing equivalent or greater protection; or
- for transfers of Personal Data from the European Economic Area or United Kingdom, DevPlus relies on Standard Contractual Clauses as adopted by the European Commission, or such other transfer mechanisms as may be required under applicable law.
Your Privacy Rights
Depending on your jurisdiction, you may have the following rights with respect to your Personal Data. These may include rights to:
- Access your information;
- Correct inaccurate information;
- Delete information;
- Export or port information;
- Restrict or object to certain processing;
- Withdraw consent;
- Opt out of certain advertising or sharing activities; or
- Appeal certain privacy decisions.
To exercise any of the above rights that may be applicable to you, please contact compliance@devplus.io.
Changes to This Notice
We may update this Privacy Notice periodically. We will notify you of material changes by posting the updated Notice on our Site and, where required by applicable law, by providing direct notice to affected individuals. You can determine whether the Privacy Policy has been modified by checking the “Last updated” legend at the top of the Privacy Policy.
Contact Us
For general inquiries: info@devplus.io. For data privacy inquiries and rights requests: compliance@devplus.io.