Skip to main content
DevBuildTool Agents
Sign inBrowse agents

Data Protection & Privacy

Privacy Policy

We built DevBuildTool Agents with a strict zero persistent storage architecture. This policy explains what information we collect, how it is handled in transit, and your privacy rights.

Last Updated: August 16, 2026

1. Core Privacy Principle: Ephemeral Processing

Your uploaded documents (such as Certificates of Insurance, policies, and endorsements) exist only in memory during the execution of a check request. Once the response payload is returned to your browser, documents are purged from volatile server memory. We do not maintain an operational database of your uploaded files or compliance reports.

2. Information We Collect

  • Account Information: When signing in via Auth0, we receive your email address and unique subject identifier to manage your credit balance and account state.
  • Transaction Information: When purchasing credit packs, our payment gateway partner Razorpay processes your payment. We store only transaction references, credit amounts, and payment status (Order ID, Payment ID, Signature verification). We never collect or store card numbers, CVVs, or bank credentials.
  • Technical & Edge Telemetry: Anonymized request counts, rate-limit tracking counters (stored temporarily in Cloudflare KV), and error codes necessary for service reliability and fraud prevention.
  • Bring Your Own Key (BYOK) Credentials: If you supply your own Gemini API key, it is transmitted in an ephemeral request header directly for that invocation and is discarded immediately after execution. It is never logged, stored in databases, or persisted in browser local storage.

3. Third-Party Service Providers & AI Processing

To deliver our services, we collaborate with vetted enterprise infrastructure providers:

Google Gemini Developer API (Google Gemini Developer API)

Used for model extraction. As of 12 August 2026, prompts and contextual outputs are retained by Google for abuse monitoring for up to 55 days per their published policies. Data sent via our enterprise API is not used to train foundational AI models.

Cloudflare Edge & Security

Provides DDoS mitigation, bot protection (Turnstile), and global edge routing over encrypted TLS 1.3 tunnels.

Razorpay Payment Gateway

Payment transactions are processed under PCI-DSS Level 1 certified systems adhering to standard banking data security regulations.

4. Cookies and Local Storage

We use essential session cookies strictly necessary for authentication state management through Auth0. We do not utilize intrusive third-party cross-site advertising trackers or sell personal user profiles.

5. Your Data Rights

Depending on your location, you may possess statutory rights under regulations such as GDPR, CCPA, or India's Digital Personal Data Protection Act (DPDP), including:

  • The right to access the personal account data we hold about you.
  • The right to request deletion of your account and associated credit ledger records.
  • The right to rectify inaccurate account details.

To exercise any of these rights, please email us at support@devbuildtool.com.

6. Updates to This Policy

We may update this Privacy Policy periodically to reflect technological or regulatory advancements. Continued use of the platform after updates constitutes acceptance of the revised terms.