Privacy Policy
This Privacy Policy explains what information Devit (“Devit,” “we,” “us,” or “our”) collects when you use our website and app at devit-six.vercel.app (the “Service”), how we use it, who we share it with, and the choices you have.
Devit is operated by NixAi. By using the Service, you agree to the practices described here. If you don’t agree, please don’t use Devit.
01 Information we collect
We collect the following categories of information:
Account & profile information
Devit lets you sign in using GitHub (OAuth). When you do, we receive from GitHub the information you authorize, which typically includes your GitHub user ID, username, email address, and avatar image. You may also add profile details yourself, such as a display name, bio, links, and profile/banner images.
Content you create
We store the content you submit to the Service, including posts, comments, replies, code snippets, polls, communities/spaces you create or join, images and files you upload, and reactions such as likes, votes, and bookmarks.
Usage & interaction data
To operate features like view counts, trending, and notifications, we record activity such as which posts are opened and viewed, likes and votes, follows, comments, and presence/online status. We also log basic technical information sent by your browser or device, such as IP address, device and browser type, and timestamps.
Integrations you connect
If you connect optional integrations — for example GitHub webhooks to auto-post releases — we process the data those integrations send us (such as repository and release metadata) to provide the feature.
Push notification tokens
If you enable push notifications, we store the notification token issued by your browser/device so we can deliver alerts. You can disable this at any time in your settings or browser.
02 How we use information
- To provide, maintain, and improve the Service and its features.
- To create and secure your account and authenticate you via GitHub.
- To display your content and profile to the audience you choose.
- To power features such as feeds, view counts, notifications, communities, and search.
- To communicate with you about your account, security, and updates.
- To detect, prevent, and respond to abuse, spam, fraud, and violations of our Terms.
- To comply with legal obligations and enforce our agreements.
We do not sell your personal information, and we don’t use your private content to serve third-party advertising.
03 Legal bases (GDPR)
If you are in the European Economic Area or the UK, we process your personal data under these legal bases: performance of a contract (to provide the Service you request), legitimate interests (to secure, operate, and improve Devit), consent (for optional features like push notifications, which you can withdraw), and legal obligation where applicable.
04 How we share information
We share information only as described here:
- With other users: your public profile and public content are visible to others.
- With service providers (processors): vendors who host and run Devit on our behalf, listed in Section 5.
- For legal reasons: to comply with law, respond to lawful requests, or protect the rights, safety, and property of Devit, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
05 Third-party services
We rely on the following providers to operate the Service. Your data may be processed by them under their own terms and privacy policies:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, file storage, and realtime infrastructure |
| GitHub | Sign-in (OAuth), profile data, and optional repository/webhook integrations |
| Vercel | Website hosting and content delivery |
| allorigins.win | Fetching public link previews (Open Graph) for URLs in posts |
We will keep this list current as our stack changes. Where required, we put appropriate data-processing terms in place with these providers.
06 Cookies & local storage
Devit uses cookies and browser storage (such as localStorage) that are necessary to run the Service — for example, to keep you signed in, remember preferences (like sidebar state), and support core functionality. We don’t use advertising cookies. You can clear or block storage in your browser, but some features may stop working.
07 Data retention
We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete or de-identify the associated personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Public content you shared may persist in others’ interactions (for example, quoted or replied-to).
08 Security
We use industry-standard measures, including encryption in transit and access controls at the database level, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us right away.
If a personal-data breach occurs, we will notify the relevant supervisory authority and affected users where and as required by applicable law — including, where the GDPR applies, notifying the competent authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
09 Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to object to certain processing. You can exercise many of these directly in the app by editing your profile, deleting content, or deleting your account. To make a formal request, contact us at nixai.cy@gmail.com.
If you are in California, you have rights under the CCPA/CPRA, including the right to know, delete, and correct your personal information, and the right not to be discriminated against for exercising them. We do not sell or “share” personal information as those terms are defined under California law.
California: categories collected (notice at collection)
In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA/CPRA) for the business purposes described in this Policy. This table also serves as our notice at collection.
| Category | Examples | Collected |
|---|---|---|
| Identifiers | GitHub ID, username, email, avatar, IP address | Yes |
| Internet / network activity | Posts viewed, likes, votes, follows, presence, device & log data | Yes |
| User-generated content | Posts, comments, code snippets, and files you submit | Yes |
| Sensitive personal information | e.g. precise geolocation, government IDs, account passwords, race/health data | No |
We disclose Identifiers and activity data only to the service providers listed in Section 5, for the purposes described above. We have not sold or “shared” personal information for cross-context behavioral advertising, and we do not knowingly collect “sensitive personal information” as defined by the CPRA — so the “Limit the Use of My Sensitive Personal Information” right does not apply to us. If this changes, we will update this Policy and provide the required controls.
You can withdraw consent for push notifications at any time in your settings or browser. EEA/UK users may also lodge a complaint with their local data protection authority.
10 Children
Devit is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
11 International transfers
We and our providers may process and store information in countries other than yours. Where we transfer personal data across borders, we rely on appropriate safeguards (such as standard contractual clauses) where required by law.
12 Changes to this Policy
We may update this Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of Devit after changes take effect means you accept the updated Policy.
13 Contact us
Questions about privacy? Reach us at nixai.cy@gmail.com, or by mail at NixAi. This address is our point of contact for all privacy and data-protection requests.