Privacy Policy

1. Information We Collect

Account information. When you register, we collect your name, email address, and a hashed password. We use this to authenticate you and communicate with you about your account.

AWS credentials. To provide infrastructure visibility and cost analysis, we request read-only AWS credentials. These credentials are encrypted at rest using AES-256 and are never shared with third parties or used for any purpose beyond delivering the DevControl service.

Usage data. We collect data about how you interact with the platform, including pages visited, features used, and session duration. This helps us improve the product and detect anomalies.

Billing information. Subscription payments are processed by Stripe, Inc. We do not store your credit card numbers or full payment details. We receive only a payment confirmation and the last four digits of your card for display purposes.

2. How We Use Your Information

Providing the service. Your account details and AWS credentials are used exclusively to power the DevControl platform, including cost dashboards, infrastructure discovery, security scans, and AI-generated recommendations.

Product updates. We may send you emails about new features, platform improvements, and important product announcements. You can unsubscribe at any time from a link in any email we send.

Billing and account management. We use your email and billing information to process payments, send receipts, and handle subscription changes or cancellations.

Security alerts. We may contact you if we detect unusual activity on your account or if your AWS credentials are at risk.

3. Data Storage & Security

All customer data is stored on AWS infrastructure in the US-East region. Data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.

DevControl is currently working toward SOC 2 Type II certification. We follow industry-standard security practices including access controls, audit logging, and regular vulnerability assessments. No security measure is perfect, and we encourage you to use a strong, unique password and enable two-factor authentication on your account.

4. Third-Party Services

DevControl integrates with the following third-party services, each of which processes data in accordance with their own privacy policies:

Stripe, Inc. handles payment processing. Stripe may collect your billing details, device information, and IP address to process transactions and prevent fraud.

Amazon Web Services (AWS) provides the cloud infrastructure on which DevControl is hosted. AWS processes data as our infrastructure provider and is bound by its own data processing agreements.

Anthropic, PBC powers AI features within DevControl, such as cost recommendations and anomaly explanations. Data submitted to AI features may be processed by Anthropic in accordance with their privacy policy.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data, AWS credentials, and usage history within 30 days of receiving your deletion request.

Anonymized, aggregated usage data that cannot be tied back to an individual may be retained for product analytics purposes after account deletion.

6. Your Rights

You have the right to access, correct, or delete the personal information we hold about you. You may also request a copy of your data in a portable format, or ask us to restrict processing in certain circumstances.

To exercise any of these rights, email us at hello@getdevcontrol.com. We will respond within 30 days.

7. Cookies

DevControl uses cookies to maintain your session, remember your preferences, and understand how users interact with the platform. We do not use advertising cookies or sell your data to advertisers. For full details, see our Cookie Policy.

8. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact DevControl, Inc. at hello@getdevcontrol.com.