Privacy Policy
Last updated: January 15, 2025
1. Introduction
DevAPI Host ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our API hosting platform.
Our Commitment: We believe in transparency and will never sell your personal data to third parties. This policy explains exactly how we handle your information.
2. Information We Collect
We collect information you provide directly to us, such as when you:
- Create or modify your account
- Use our API hosting services
- Contact us for support
- Subscribe to our newsletters or communications
- Participate in surveys or feedback sessions
- Attend our webinars or events
Personal Information:
- Name and contact information
- Email address
- Google OAuth2 profile information
- Billing and payment information
- Professional information (company, role)
- Profile photos and avatars
- Communication preferences
Technical Information:
- API usage data and logs
- Application performance metrics
- Device and browser information
- IP addresses and location data
- Cookies and similar tracking technologies
- Error logs and debugging information
- Feature usage analytics
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions
- Comply with legal obligations
- Personalize your experience and provide relevant content
- Send marketing communications (with your consent)
- Conduct research and development to improve our platform
4. Google OAuth2 Integration
When you connect your Google account, we access and use information in accordance with Google's OAuth2 policies:
Profile Information:
Used for account creation and personalization
Email:
Used for account verification and communications
Cloud Platform:
Used to deploy and manage your applications
Drive:
Used for secure backup of deployment configurations
Calendar:
Used for deployment scheduling and notifications
Analytics:
Used to provide usage insights and performance metrics
5. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy:
Service Providers:
We may share information with third-party service providers who perform services on our behalf, including:
- Cloud hosting and infrastructure providers
- Payment processing companies
- Email service providers
- Analytics and monitoring services
- Customer support platforms
Legal Requirements:
We may disclose information if required by law or to protect our rights, including:
- Compliance with legal processes
- Protection of our rights and property
- Prevention of fraud or security threats
- Protection of user safety
Business Transfers:
Information may be transferred in connection with a merger, acquisition, or sale of assets
Consent:
We may share information with your consent or at your direction
6. Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of data in transit and at rest using industry-standard protocols
- Regular security assessments and penetration testing
- Multi-factor authentication and access controls
- Employee training on data protection practices
- Incident response procedures and breach notification protocols
- Regular security updates and patch management
- Network security monitoring and intrusion detection
- Secure development practices and code reviews
Security Standards: We maintain SOC 2 Type II compliance and follow industry best practices for data protection.
7. Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
- Account Information: Retained while your account is active and for 3 years after closure
- Usage Data: Retained for up to 2 years for analytics and service improvement
- Support Communications: Retained for 5 years for quality assurance
- Financial Records: Retained for 7 years as required by law
- Marketing Data: Retained until you opt out or for 3 years of inactivity
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection laws
- Certification under recognized privacy frameworks
- Binding corporate rules for intra-group transfers
9. Your Rights and Choices
You have certain rights regarding your personal information:
Access:
Request access to your personal information and receive a copy of the data we hold about you
Correction:
Request correction of inaccurate or incomplete information
Deletion:
Request deletion of your information, subject to legal and contractual obligations
Portability:
Request a copy of your information in a portable, machine-readable format
Opt-out:
Opt out of certain communications and data processing activities
Restriction:
Request restriction of processing in certain circumstances
Objection:
Object to processing based on legitimate interests or for direct marketing
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use personal information about you. Our cookies include:
- Essential Cookies: Required for basic site functionality
- Performance Cookies: Help us understand how visitors interact with our site
- Functional Cookies: Enable enhanced functionality and personalization
- Marketing Cookies: Used to deliver relevant advertisements (with consent)
You can control cookies through your browser settings, but disabling certain cookies may affect site functionality.
11. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
12. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by us
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising CCPA rights
13. European Privacy Rights
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 9 above. Our lawful basis for processing includes:
- Contract: Processing necessary for service delivery
- Legitimate Interest: For analytics, security, and service improvement
- Consent: For marketing communications and optional features
- Legal Obligation: For compliance with applicable laws
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending email notifications for material changes
- Displaying prominent notices on our platform
Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: privacy@devapihost.com
Data Protection Officer: dpo@devapihost.com