Privacy Policy

DEV3 Technologies Pvt. Ltd. ("DEV3") is the Data Fiduciary (under the Digital Personal Data Protection Act, 2023) and the controller (under the EU/UK GDPR) for personal data processed through this website, the Marketplace and our client portals. Our registered office is E279, Phase 8A, Industrial Area, Sector 73, Sahibzada Ajit Singh Nagar (Mohali), Punjab 160071, India.

Where we process personal data on behalf of an agency client inside a system we build or host for them, the client is the fiduciary/controller and our processing is governed by the data processing terms in that engagement.

We collect only what we need to provide and secure the platform:

• Account data: name, email address, username, password hash, profile details and company information you choose to add.
• Enquiry data: details you submit through contact, consultation and estimate forms, including budget ranges and project descriptions.
• Author verification data: government ID or business registration documents, tax identifiers and payout account details. Bank account numbers are encrypted at field level.
• Transaction data: orders, invoices, licence keys and GST details. Card, UPI and net-banking credentials are collected directly by Razorpay — we receive only a payment reference and limited metadata such as the last four digits.
• Communications: support tickets and Marketplace chat messages, which are automatically scanned for off-platform payment requests, contact-detail harvesting and malicious links.
• Technical data: IP address, device and browser information, and security logs used for fraud prevention, rate limiting and audit trails.

We process personal data on the basis of your consent, the performance of a contract with you, compliance with legal obligations (including tax and anti-money-laundering rules) and our legitimate interest in keeping the platform secure. Specifically, we use it to:

• Create and secure your account and deliver purchases, downloads and updates.
• Verify author identity and payout accounts before releasing earnings.
• Respond to enquiries, prepare proposals and deliver agency engagements.
• Issue GST-compliant invoices and meet statutory record-keeping duties.
• Detect, investigate and prevent fraud, abuse and security incidents.
• Send service emails and, where you have opted in, product and marketing updates you can unsubscribe from at any time.

Identity documents submitted for author verification are analysed by an AI model (Google Gemini via enterprise API terms with no training on your data) to extract fields and flag anomalies. The model produces structured checks; the verification score is computed by our own code and every rejection or borderline result is reviewed by a trained member of staff. You may request human review of any automated decision by writing to privacy@dev3.tech.

AI features used to draft blog content or assist support agents never receive identity documents or payment data.

We do not sell personal data. We share it only with:

• Razorpay Software Pvt. Ltd., for payment processing, refunds and author payouts.
• Cloud hosting, email delivery and monitoring providers acting as our processors under written contracts.
• Authors, who receive the buyer name, purchase date and licence details needed to provide item support.
• Professional advisers, auditors and authorities where required by law, court order or to protect rights and safety.

Our primary infrastructure is hosted in India. Some processors may process data in other countries. We transfer data only to jurisdictions not restricted by the Government of India under section 16 of the DPDP Act and, for data subject to the GDPR, rely on adequacy decisions or Standard Contractual Clauses with supplementary safeguards.

We keep personal data only as long as necessary for the purposes above:

• Account data: for the life of the account and up to 90 days after closure.
• Invoices, orders and payout records: 8 years, as required by the Companies Act, 2013 and GST law.
• Author verification documents: for the duration of authorship and 3 years afterwards, unless a longer period is required by law.
• Enquiries that do not become engagements: 24 months.
• Security and audit logs: 12 months, longer where needed for an open investigation.

TLS 1.3 in transit · AES-256 at rest · AES-256-GCM field-level encryption for financial data. Point-in-time backups every 6 hours · daily snapshots retained 35 days · quarterly restore drills. Access to personal data is role-based, logged and reviewed. We will notify the Data Protection Board of India and affected users of a personal data breach as required by law.

Subject to applicable law, you have the right to:

• Access a summary of your personal data and the processing activities undertaken.
• Correct, complete or update inaccurate data.
• Erase data no longer needed, unless retention is legally required.
• Withdraw consent at any time, without affecting processing already carried out.
• Nominate another person to exercise your rights in the event of death or incapacity.
• For GDPR data subjects: object to processing, restrict processing and request portability.

We use strictly necessary cookies for sign-in sessions, security and the shopping cart. Optional analytics cookies are set only with your consent. Your guest cart is stored in your browser’s local storage and never sent to us until checkout.

Requests and complaints can be sent to our Grievance Officer at privacy@dev3.tech or by post to DEV3 Technologies Pvt. Ltd., E279, Phase 8A, Industrial Area, Sector 73, Sahibzada Ajit Singh Nagar (Mohali), Punjab 160071, India. We acknowledge requests within 48 hours and respond within 30 days.

If you are not satisfied with our response you may escalate your complaint to the Data Protection Board of India or, for GDPR data subjects, your local supervisory authority.