Legal
Privacy Policy
This policy explains what information Developy (“Developy”, “we”, “us”) collects when you visit developy.ai or use the Developy desktop app and cloud service (together, the “Service”), how we use it, and the choices you have. Developy is in private beta; we will update this policy as the Service changes.
The short version
- We do not sell your personal information, and we do not use your code or workspace content to train AI models.
- Your code stays on your machine unless you send it somewhere: to the AI provider you choose, or to our cloud workers when you run a card in the cloud.
- This website uses no cookies, no analytics and no third-party trackers.
Information we collect
When you visit developy.ai
The site is static. Our hosting provider (Amazon Web Services) processes standard request data, such as your IP address, browser type and the pages requested, so it can deliver the site and protect it from abuse. We do not set cookies or run analytics on this site.
When you contact us
If you email hey@developy.ai, we receive your email address, your message and anything you attach, and we use them to reply and to provide what you asked for.
When you use the Service
- Account information: your name, email address and sign-in details. If you sign in with GitHub or Google, we receive the basic profile information those services share.
- Workspace content: what you and your team create in Developy, such as cards, plans, designs, documents, notes, comments, meeting transcripts, run records and evidence, and organization and project membership. This is stored in our cloud database so your team can work together, and a copy is kept on your devices.
- Code: the desktop app works on your repositories on your machine. Code is sent elsewhere only when a feature you use requires it, as described below.
- Usage and cost records: the Service records which agents ran, what they did and what each card cost, so it can show you evidence and costs and keep the Service reliable.
- Credentials you provide: API keys for AI providers and integrations. These are stored encrypted and are used only to make the calls you ask for.
How information is shared and processed
We use the following service providers to run Developy. They process information only on our instructions, or under your own account where noted.
- Amazon Web Services: hosting for this website and for cloud workers that run cards when you choose to run them in the cloud. During a cloud run, the card and the repository it needs are processed on those workers.
- Supabase: our cloud database and authentication.
- Namecheap Private Email: email for hey@developy.ai.
- AI model providers you choose: for example Anthropic (including Claude Code on your own plan), OpenAI, Google Gemini, DeepSeek or Mistral, or local models you run yourself. Prompts and the code context an agent needs are sent to the provider you select, under your own account or key, and that provider’s terms and privacy policy apply.
- Integrations you turn on: for example GitHub for repositories and pull requests, Tavily for web research, or Deepgram for meeting transcription. Information flows to them only when you enable and use the integration.
We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
How we use information
- To provide, maintain and secure the Service, including verifying runs and showing evidence and costs.
- To improve results within your workspace, for example through team memory and agents learning from your reviews.
- To communicate with you about your account, the beta and changes to the Service.
- To comply with legal obligations and enforce our Terms.
Security
Information is encrypted in transit. Access to workspace data is scoped to your organization and to the projects you are allowed to see, enforced in the database itself. Agent actions pass permission checks, and runs, approvals and overrides are recorded in an audit trail. No system is perfectly secure, so please tell us at once at hey@developy.ai if you believe your account has been compromised.
Retention
We keep account information and workspace content for as long as your account is active. When you ask us to delete your account, we delete or anonymize your information within 30 days, except where we must keep it to meet legal obligations; copies in backups are removed as those backups expire. Content stored on your own devices stays under your control.
Where information is processed
Our cloud database is hosted in Japan, and our cloud workers and this website run on Amazon Web Services in the United States and at its global edge locations. The AI providers and integrations you choose may process information in other countries. Where the law requires it, we use appropriate safeguards for these transfers.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to or restrict certain processing. To make a request, email hey@developy.ai from the address on your account. We will respond within the time the law requires, and we will not treat you differently for exercising your rights. You may also have the right to complain to your local data protection authority.
Children
The Service is for professionals and is not directed to anyone under 16. We do not knowingly collect information from children.
Changes to this policy
We will post any changes on this page and update the date above. If a change is material, we will tell account holders by email before it takes effect.
Contact
Questions about privacy: hey@developy.ai.