Privacy Policy

Scope

This policy covers devseccode.com, pasu-infra.com, and DevSecCode, Inc.'s software, including the Deva CLI and the Deva extension. It describes the limited data we collect and how we use it.

Our Websites

Mailing list

If you join our mailing list on either site, we store your email address, the site you signed up on, and when. We use it only to send updates about DevSecCode and its products. Our websites have no user accounts.

Analytics

devseccode.com uses Google Analytics, which sets cookies, to measure visits. pasu-infra.com uses Cloudflare Web Analytics, which does not set cookies. Our hosting providers also keep standard request logs.

Email

If you email us, we keep the correspondence to respond to you.

Deva Software

Scans run on your machine. Standard scans need no account, and we do not receive your source code or findings from a scan.

AI features are optional. With a local model, prompts and code context stay on your machine. With a cloud model, the prompt and the code context for that request are sent to the model provider and are subject to its terms.

Accounts

Features beyond standard scans require an account. If you create one, we collect your email address and display name, and your profile photo if you sign in with Google or GitHub. We also keep your plan and trial status. Payments are handled by Stripe; we do not store card numbers.

Google user data

If you sign in with Google, we access only your email address, name, and profile photo. We use them only to authenticate you and show your profile. We do not sell or share them, use them for advertising, or give them to AI providers. They are stored in Firebase (Google Cloud) and handled in line with the Google API Services User Data Policy. You can revoke access at any time in Google Account Permissions.

Retention and Your Choices

We keep account data while your account is active and mailing-list data until you ask us to remove it. To get a copy of your data, unsubscribe, or request deletion, email contact@devseccode.com. We respond within 30 days.

Service Providers

We do not sell personal data. We use these providers to run our services:

Changes

We will update this page when our data practices change. The “Last updated” date at the top reflects the most recent revision.

Contact

For privacy questions or requests, email contact@devseccode.com.