Legal

Privacy Policy

Last updated: September 1, 2026

This Privacy Policy explains how Devicet ("Devicet", "we", "us", or "our") collects, uses, stores, and shares personal data when you use Devicet.

Devicet is a platform that allows clients to discover independent web developers, view their services and prices, and submit quote requests.

By using Devicet, you acknowledge that you have read this Privacy Policy. Where applicable law requires your consent for a particular processing activity, we will request that consent separately.

1. Information We Collect

1.1 Account information

When you create or access a Devicet account using Google or GitHub, we may receive information from the authentication provider, including:

• Your name
• Your email address
• Your profile picture
• Information necessary to authenticate your account

We only request and use the information necessary to provide the Service.

1.2 Developer information

If you create a Developer account, you may choose to publish information including:

• Username
• Display name
• Profile picture
• Services offered
• Service descriptions
• Prices
• Estimated delivery times
• Portfolio information and other content you choose to publish

Information you choose to publish on a Developer profile may be publicly visible to visitors and Clients.

1.3 Quote request information

When a Client submits a quote or project request to a Developer, we may collect:

• The Client's name
• The Client's email address
• The services selected
• The information included in the request
• The Developer to whom the request was submitted

The Client's name, email address, and request information may be shared with the specific Developer to whom the request was submitted so that the Developer can respond.

1.4 Technical and security information

We may collect limited technical information necessary to operate and secure Devicet, such as:

• IP address
• Browser and device information
• Session information
• Login and authentication information
• Information relating to security events, abuse, or attempted unauthorized access

We use this information for security, fraud prevention, rate limiting, troubleshooting, and maintaining the Service.

1.5 Cookies and similar technologies

Devicet uses cookies or similar technologies where necessary to operate the Service.

For example, we may use a session cookie to keep you signed in.

These cookies are used to provide and secure the Service and are not used by Devicet for advertising or cross-site tracking.

Where applicable, we will request consent before using non-essential cookies or similar technologies.

2. How We Use Personal Data

We use personal data to:

• Create and manage Devicet accounts;
• Authenticate users through Google or GitHub;
• Provide the appropriate account features and dashboard;
• Display Developer profiles and published services;
• Allow Clients to submit quote requests;
• Deliver quote requests to the selected Developer;
• Send transactional emails, such as quote request notifications and confirmations;
• Maintain and improve the Service;
• Prevent fraud, spam, abuse, and unauthorized access;
• Monitor and protect the security of Devicet; and
• Comply with applicable legal obligations.

We do not sell your personal data.

We do not use personal data for targeted advertising.

3. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data on one or more of the following legal bases:

Performance of a contract

We process information where it is necessary to provide the Service you request, such as creating your account, authenticating you, or delivering a quote request.

Legitimate interests

We may process information where necessary for legitimate interests such as maintaining the security of Devicet, preventing abuse and fraud, improving the Service, and protecting our users, provided those interests are not overridden by your rights and freedoms.

Consent

Where consent is legally required, we will request it before processing your personal data for the relevant purpose.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legal obligations

We may process personal data where necessary to comply with applicable laws, regulations, legal requests, or other legal obligations.

4. Who We Share Personal Data With

We do not sell your personal data.

We may share personal data with third parties only where necessary to operate Devicet, provide requested services, maintain security, or comply with applicable law.

Other Devicet users

Information that a Developer chooses to publish on their public profile, such as their username, display name, profile picture, services, descriptions, prices, and portfolio content, may be publicly visible.

When a Client submits a quote request to a Developer, the information necessary for the Developer to respond, including the Client's name, email address, and request details, is shared with that Developer.

We do not intentionally make a Client's quote request publicly visible.

Service providers

Devicet uses third-party providers to operate certain parts of the Service.

These may include:

• Google and GitHub, which provide authentication services when you choose to sign in through them.
• Resend, which provides email delivery services for transactional emails.

These providers process information according to their own privacy policies and applicable contractual and legal requirements.

We may also use additional service providers in the future where reasonably necessary to operate, secure, or improve Devicet. Where required by law, we will provide appropriate information about such providers.

Legal and safety purposes

We may disclose information where reasonably necessary to:

• Comply with applicable law or a valid legal request;
• Protect the rights, property, or safety of Devicet, its users, or others;
• Investigate fraud, abuse, security incidents, or violations of our Terms; or
• Prevent or address technical or security problems.

5. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including for providing the Service, maintaining security, resolving disputes, enforcing our Terms, and complying with legal obligations.

Account information and associated data will generally be retained while your account remains active.

When you request deletion of your account, we will delete or anonymize personal data that we no longer have a legitimate reason or legal obligation to retain.

Some information may need to be retained for a longer period where required by law or where reasonably necessary for legitimate purposes such as fraud prevention, security, dispute resolution, or legal claims.

6. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have rights regarding your personal data, including the right to:

• Access your personal data;
• Correct inaccurate or incomplete information;
• Request deletion of your personal data;
• Request restriction of certain processing;
• Object to certain processing;
• Request portability of certain personal data; and
• Withdraw consent where processing is based on consent.

To exercise a privacy right, contact us at:

tsoukatos.michalis@gmail.com

We may need to verify your request before completing it.

If you are located in the European Economic Area, you may also have the right to lodge a complaint with the data protection authority in the country where you live, work, or believe a violation occurred.

7. Children's Privacy

Devicet is not intended for children under the minimum age permitted to use the Service under applicable law.

We do not knowingly collect personal data from children where doing so is prohibited by applicable law.

If you believe that a child has provided personal data to Devicet in circumstances where collection is not permitted, please contact us so that we can take appropriate action.

8. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

However, no online service can guarantee absolute security.

You are also responsible for maintaining the security of your account and authentication credentials and should notify us if you believe your account has been compromised.

9. International Data Transfers

Some of our service providers may process personal data in countries outside the European Economic Area.

Where applicable, we will take appropriate measures required by data-protection law to protect personal data transferred internationally.

These measures may include appropriate contractual safeguards or other lawful transfer mechanisms.

10. Third-Party Services and Links

Devicet may contain links to third-party websites or services.

Devicet is not responsible for the privacy practices, content, or security of third-party services.

Your use of third-party services is governed by their own terms and privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Devicet, our data-processing practices, or applicable legal requirements.

When we make material changes, we will take reasonable steps to notify users where appropriate.

The updated version will include a new "Last updated" date.

12. Contact

If you have questions about this Privacy Policy, believe your personal data has been handled improperly, or want to exercise your privacy rights, contact us at:

Email: tsoukatos.michalis@gmail.com