How we look after your data

What we collect

• What you type in our forms: name, email, phone (optional), company, the tool you built your app with, any link you share, and your message.
• Chat conversations and, if you ask to talk to a person, your name, email and phone.
• Health checks: the address you check, the report, and your email if you ask us to send it to you.
• Payments: when you buy a plan or the audit, your name, email, billing details and what you bought. Your card goes straight to Stripe; we never see or store it.
• Client portal: your account and sign-in details, your profile if you fill it in (photo, headline, country, city, time zone, languages, website, phone), and your projects and requests.
• Partner program: your name, email, country, profile and social links, your share link, clicks on it (counted without storing the visitor's IP address), the clients you referred and your commissions, and your payout details. Bank and PayPal details are stored encrypted.
• Where you came from (for example, the campaign, site or partner link that brought you, and the first page you visited), so we know which channels work.
• Minimal technical data so the site works, and visit counts in aggregate.
• When you send a form, sign in or start the chat: technical details of your browser and device, and your IP address, so we can tell people from bots and spot abuse (see Prynt below).

What we use it for

To reply to you, prepare a diagnosis or a proposal, run your plan or project, take payments, pay partners their commissions, and follow up on your case. We don't sell your data or add you to mailing lists without your permission.

The AI chat

Isabel, the chat assistant, answers with an AI model (currently from OpenAI) that we reach through our own servers. She can make mistakes: a person on the team reviews the conversations you leave us. Don't share passwords, API keys or other sensitive data in the chat.

Who handles it for us

The site, its database and the files you upload run on servers we manage. We share data only with the services below, and only what each one needs. None of them may use it for their own purposes.

• Cloudflare delivers the site, protects it from attacks and counts visits without cookies (Web Analytics). It sees your IP address and the pages you open.
• Stripe takes payments for plans and the audit and emails your receipts. It receives your name, email, card and billing details. Partners paid through Stripe Connect give Stripe their identity and bank details directly.
• PayPal pays partners in countries Stripe can't pay out to. It receives the partner's name, PayPal email and the amount.
• OpenAI generates the chat's answers. It receives what you write in the chat.
• Our email provider sends sign-in links, password resets, welcome emails and partner notices. It receives your email address and the message.
• Prynt (pryntid.com), a device-recognition service from the same owner as Devonauts, checks the browser that sends a form, signs in or starts the chat, to tell people from bots and spot abuse. It receives technical details of your browser and device, your IP address and the page; we keep its device identifier and risk signals with your message. It never decides on its own whether your message gets through.

How long we keep it

For as long as the conversation or business relationship lasts, and up to 24 months after the last contact. Payment records are kept as long as tax law requires. You can ask us to delete the rest sooner.

Code and data from your systems that we hold for a project are deleted when the work ends (see the plan terms).

Your rights

You can ask us to see, correct or delete your data by writing to hello@devonauts.com, or through the contact page or the chat. We reply within one business day.

Cookies and storage

We don't use advertising cookies. If you arrive through a partner's link, a cookie from our own site remembers the partner's code for up to 90 days so they get credit. Your browser also stores your language, where you came from and, if you're signed in, your session. When you use a form, Prynt keeps a device identifier in a cookie and in the storage of our own site. We count visits in aggregate with Cloudflare Web Analytics, which uses no cookies.

Where your data is processed

Devonauts LLC is a US company based in Austin, Texas, and our servers are in the United States. The providers above may process data in the United States and other countries. If you write to us from Latin America, Europe or anywhere else, your data is transferred to the United States and handled as this notice describes.

Security

The site works only over HTTPS. Passwords are stored as one-way hashes, bank and PayPal details are encrypted, and we limit access to client data to the people who need it for their work. No system is perfectly secure: if a breach affects your data, we tell you without undue delay, as the law requires.

Children

Our site and services are meant for businesses and adults. We don't knowingly collect data from children under 13. If you think a child has sent us personal data, write to hello@devonauts.com and we'll delete it.

Changes

If we change this notice, we'll update the date above.