Privacy Policy

1. Scope

The data controller for information covered by this policy is Mohamed Anise, a sole trader based in England and Wales, trading as Devory and netraTEC. This policy covers the public Devory website and Devory Cloud (app.devory.app), including account, organisation and billing data. It will be further extended to cover the Devory Desktop application as its own Cloud connectivity develops, and this page will be updated accordingly.

2. Information you provide

When you create a Devory Cloud account, Devory collects your email address and a password (stored only as a salted cryptographic hash -- Devory never stores or can recover your plain-text password), plus any display name or organisation details you add. Submitting the contact form or emailing Devory separately collects your name, email address, optional organisation name, enquiry category and message.

3. Contact form information

The contact form collects your name, email address, optional organisation name, the category of your enquiry, and your message. This information is used only to respond to your enquiry and is not used for marketing without your separate consent.

4. Technical and usage data

Cloudflare, which hosts this website and Devory Cloud's backend infrastructure (Workers and D1 database), processes standard connection information (such as IP address, request headers, and timestamps) as part of delivering and securing both. Session activity (sign-in times, active sessions, API usage) is recorded to operate and secure your Devory Cloud account. Devory's application code does not run separate advertising or tracking scripts.

5. Cookies and local storage

See the Cookie Policy for full detail. In summary, this website does not currently set non-essential cookies or load optional analytics scripts.

6. How Devory uses information

Devory uses the information described above to respond to enquiries, create and secure your account, provide the Devory Cloud platform (organisations, workspaces, projects and cloud workflow execution), process payments for paid subscriptions, and operate and secure the website.

7. Legal bases for processing

Where applicable data protection law requires a legal basis, Devory relies on: your consent (for example, submitting the contact form), performance of a contract with you (creating your account and providing paid or free-tier Devory Cloud service), and Devory's legitimate interest in operating and securing the website and platform.

8. Service providers

Devory uses Cloudflare to host this website and Devory Cloud, and to provide security, database and abuse-prevention infrastructure. Devory uses Stripe to process subscription payments, and Resend to send transactional account email (such as verification and password-reset messages). Devory does not use a separate advertising or analytics provider. This section will be updated if additional providers are integrated.

9. Payment processing

Devory uses Stripe to process subscription payments for Devory Cloud. Devory does not receive or store your full card details -- Stripe collects and processes payment information directly, and Stripe's own privacy practices apply to that data. Devory retains billing records (such as plan, subscription status and invoice history) associated with your account.

10. International transfers

Because this website and Devory Cloud are served through Cloudflare's global network, and Devory uses Stripe and Resend as service providers, your data may be handled by infrastructure located outside your own country. Mohamed Anise is based in England and Wales (see the Terms of Service, section 17, for governing law and jurisdiction). Each of these providers maintains its own safeguards for international data transfers under applicable data protection law.

11. Retention

Contact form submissions are retained only as long as needed to respond to and resolve your enquiry, and are not kept indefinitely as a matter of policy. Account and billing data is retained for as long as your account is active, plus a reasonable period afterward for legal, tax and dispute-resolution purposes; contact Devory to request deletion of your account and associated data, subject to those retention obligations.

12. Security

See the security page for detail on Devory's security posture. In summary: access to systems is deny-by-default, and no secrets are embedded in this website's client-facing code.

13. Your rights

Depending on your location, you may have rights to access, correct, or delete personal information Devory holds about you, or to object to certain processing. To exercise these rights, contact dev@devory.app.

14. Children's privacy

The Service is not directed at children, and Devory does not knowingly collect personal information from children.

15. Changes to this policy

Devory may update this policy as the product and its data practices develop. Material changes will update the "Last updated" date above.

16. Contact

For privacy questions or requests, email dev@devory.app or use the contact form and select the Privacy category.