Privacy Policy
Transparency regarding how DevDeal collects, processes, protects, and stores user information and project communications.
Table of Contents
DevDeal Privacy Commitment
We prioritize data minimization, technical transparency, and confidentiality for both clients posting proprietary software specifications and developers claiming opportunities. We never sell your personal data.
1. Overview & Scope
This Privacy Policy explains how DevDeal (“we”, “us”, “our”) collects, uses, discloses, and safeguards personal and technical data when you use our web platform (devdeal.vercel.app).
DevDeal provides an on-demand software development marketplace connecting clients who post scoped technical projects with qualified software engineers who claim and deliver those projects. By accessing or using DevDeal, you consent to the information practices described in this policy.
2. Information We Collect
We collect information strictly necessary to provide authentic, secure marketplace functionality:
A. Account & Profile Information
- Client Accounts: Full name, email address, password hash, country/location, and optional company or project background.
- Developer Accounts: Full name, email address, technical domain preferences, avatar URL, bio/summary, and performance verifications.
- Single Sign-On (Google OAuth): When you choose to authenticate via Google, we receive your verified Google account email, name, and profile picture avatar as permitted by your Google account consent.
B. Project & Project Communication Data
- Project scope titles, project category designations (e.g., Website, Mobile App, Software, AI for Business, UI/UX Design).
- Fixed budget allocations, required tech stacks, and detailed technical requirements.
- Direct, one-on-one scoped chat messages exchanged between clients and developers on claimed deals.
C. Billing & Payment Information
DevDeal does not collect, process, or store credit card numbers, bank account numbers, or private cryptocurrency keys. All payments are processed through specialized external payment providers (such as Paymos). We receive only transaction metadata, including invoice identifiers, external order numbers, plan tier, amount, currency, and payment confirmation status.
3. How We Use Information
The information we collect is utilized strictly for marketplace operations, including:
- Authenticating user sessions and enforcing role-based permissions (Client vs. Developer portals).
- Publishing client project listings to the live developer dispatch feed.
- Enforcing our atomic “first-to-claim” project locking mechanism.
- Allocating monthly subscription claim credits and managing rollover balances.
- Facilitating secure real-time messaging between clients and developers on assigned deals.
- Preventing marketplace fraud, spam, automated bot abuse, and unauthorized account access.
5. Third-Party Service Providers
We share data with external infrastructure providers only to the extent necessary to deliver the DevDeal service:
- Supabase: Provides managed database hosting, authentication token generation, encrypted password hashing, and Row Level Security enforcement.
- Google Identity: Facilitates optional OAuth 2.0 single sign-on authentication.
- Paymos: Provides cryptocurrency billing infrastructure, checkout invoice generation, and transaction confirmation webhooks.
- Vercel: Provides secure edge deployment, hosting, and SSL/TLS encryption for web requests.
We do not sell, rent, or trade your personal or project data to third-party data brokers or marketing networks.
6. Data Security Practices
DevDeal implements defense-in-depth security standards to protect your data:
- Transport Layer Security (TLS 1.3): All network communications between your browser, DevDeal servers, and database APIs are encrypted in transit.
- Row Level Security (RLS): Database-level policies enforce strict multi-tenant isolation, ensuring users can only read and modify records they own or are authorized to access.
- Cryptographic Signature Verification: Inbound payment webhooks are verified via HMAC-SHA256 signatures with timing-safe comparisons to prevent spoofing or replay attacks.
- Zero Credential Exposure: User passwords are encrypted using salted bcrypt hashing; plain-text credentials are never stored or accessible to DevDeal staff.
7. Data Retention & Storage
We retain your profile data, project listings, and deal transaction history for as long as your account remains active, or as required to comply with financial reporting, fraud prevention, and legal compliance obligations. Project chat messages and audit logs are retained to enable project verification and dispute resolution between parties.
8. User Rights & Account Deletion
Depending on your jurisdiction, you have certain rights regarding your personal data:
- The right to access, inspect, and export your personal data stored on DevDeal.
- The right to correct or update inaccurate profile details directly via your Profile Settings.
- The right to request the deletion or anonymization of your account and associated personal profile information.
To request account closure or data deletion, please submit an inquiry through your account portal. We will process your deletion request within thirty (30) days, subject to retention of transactional records required by law.
9. Privacy Inquiries & Contact
If you have questions, feedback, or privacy-related concerns regarding this policy or DevDeal's data practices, please reach out through your active DevDeal account portal or contact the DevDeal compliance team.