Effective date: March 1, 2026
This Privacy Policy explains how devenv.tools ("we", "us", or "our") collects, uses, and protects your personal information when you use our service. We believe in transparency and in collecting only what we need to provide you with a reliable development tunneling service.
When you create an account, we collect:
While you use the Service, we automatically collect:
If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full card details on our servers. We receive and store only:
To diagnose issues and improve the Service, we may collect:
We use the information we collect for the following purposes:
| Provide the Service | Authenticate your identity, create and manage tunnels, route traffic to your domains, and display your account information in the dashboard |
|---|---|
| Transactional emails | Send login verification codes, billing receipts, payment failure notifications, and account-related alerts |
| Improve the Service | Analyze aggregate usage patterns to prioritize improvements and fix bugs. We do not build individual user profiles for this purpose. |
| Prevent abuse | Monitor for violations of our Terms of Service, detect automated attacks, and protect the integrity of shared infrastructure |
| Billing | Process payments, manage subscriptions, generate invoices, and handle refund requests |
We do not use your information for advertising, profiling, or any purpose unrelated to providing and improving the Service.
We share your information only in the following limited circumstances:
We do not sell, rent, or trade your personal information to third parties. Period.
We may disclose your information if required by law, court order, or government request. If legally permitted, we will notify you before making such a disclosure. We will resist overbroad or vague requests and disclose only the minimum information necessary.
If devenv.tools is acquired or merged, your information may be part of that transaction. We will notify you by email and give you the opportunity to delete your account before the transfer takes effect.
All connections to the Service are encrypted using TLS. We enforce HTTPS on all endpoints.
Our databases are encrypted at rest using AES-256. Database backups are similarly encrypted.
Access to production systems and user data is restricted to authorized personnel only, using role-based access controls, audit logging, and multi-factor authentication.
Our edge servers and data storage are hosted in professionally managed data centers with physical security controls.
In the event of a data breach affecting your personal information, we will notify you by email within 72 hours of confirming the breach.
We retain your account data for as long as your account is active. After 12 months of inactivity, we may close the account and delete the associated data following a 30-day notice period.
When you delete your account, all associated personal data will be permanently deleted within 30 days. Some data may persist in encrypted backups for up to 90 days before rotation.
Server access logs and error logs are retained for 90 days, then automatically purged.
We retain billing records for up to 7 years after your last payment, as required for tax and accounting compliance.
Regardless of location, all users have the following rights over their personal data, aligned with GDPR and similar frameworks:
View your account information, tunnel history, and domain configurations at any time through the dashboard or via GET /account.
Update your email address, display name, and other account information through the dashboard or via PATCH /account.
Delete your account and all associated data through the dashboard settings or via DELETE /account. Deletion is permanent after the 30-day processing period.
Request a complete export of your personal data by emailing privacy@devenv.tools. We will provide a JSON export within 30 days.
If you believe we are processing your data beyond the scope of this policy, contact privacy@devenv.tools. We will respond within 30 days.
The Service is not intended for users under 16. We do not knowingly collect personal information from children under 16. If you believe your child has created an account, email privacy@devenv.tools and we will delete it.
When we make changes:
We aim to respond to all privacy-related inquiries within 14 days.