Privacy Policy

DevAgenda (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it.

By using DevAgenda, you agree to the collection and use of information as described in this policy.

Account information: When you register, we collect your name, email address, and password (stored as a one-way hash). If you sign in with GitHub or Google, we receive your name, email, and profile image from that provider.

Profile information: You may optionally provide a business name and website URL.

Client and business data: We store the data you create using the Service — including client records, proposals, contracts, invoices, project notes, messages, and handoff documents.

Billing information: Payment is processed by Stripe. We do not store your credit card number or full payment details — only a Stripe customer ID and subscription status.

Usage data: We may collect basic usage information such as pages visited and features used to improve the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your subscription and billing
• Send transactional emails — account verification, invoice notifications, proposal alerts, and other Service-related communications
• Respond to support requests
• Improve the Service and diagnose technical issues
• Comply with legal obligations

We do not sell your personal data to third parties.

As a DevAgenda user, you may store information about your own clients (names, email addresses, project data). You are the data controller for that information. We process it on your behalf solely to provide the Service.

Your clients may receive emails sent through the Service (e.g., invoice notifications, proposal links). These are transactional emails sent at your direction.

We use the following third-party services to operate DevAgenda:

• Stripe — payment processing and subscription management
• Resend — transactional email delivery
• Supabase — database hosting and real-time messaging
• GitHub / Google — optional OAuth sign-in

Each of these providers has their own privacy policy governing how they handle data. We encourage you to review them.

We retain your account and business data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data by deleting your account in Settings
• Export your data — use the Export Your Data option in Settings
• Opt out of non-transactional emails (note: transactional emails related to your account and subscription cannot be opted out of)

We use a session cookie to keep you signed in. We do not use tracking or advertising cookies. No third-party advertising networks have access to your data through our Service.

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

The Service is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the Service. The “last updated” date at the top of this page reflects the most recent revision.

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at support@devagenda.com.