Privacy Policy

Last updated: January 3, 2026

This Privacy Policy explains how Devblo ("Devblo," "we," "us," or "our") collects, uses, discloses, and safeguards information when you use our website, marketplace, and related services (the "Services"). By using the Services, you agree to this Policy, our Terms of Service, and our data handling practices below.

1) Information We Collect

Account & Identity

  • Username, email, password (hashed), profile details (bio, avatar), and account role.
  • For sellers: portfolio links, business details, and onboarding responses.

Payment & Transaction

  • Payment processing is handled by Stripe; we do not store full card data.
  • Billing addresses, transaction history, payouts, taxes collected, and platform fees.
  • Stripe Connect account identifiers for sellers.

Usage & Technical

  • Device/browser type, OS, IP address, locale, and security signals (fraud/abuse indicators).
  • Pages visited, search/filter history, clicks, and interaction data.
  • Download and purchase activity for license enforcement.

Cookies & Similar Technologies

  • Session cookies for authentication and security.
  • Preference cookies to remember settings and marketplace filters.
  • Analytics/anti-fraud cookies to understand usage and detect abuse.

2) How We Use Information

  • Provide and improve the Services, including account management, product delivery, and feature development.
  • Process payments, calculate platform fees, and facilitate seller payouts through Stripe.
  • Enforce policies, investigate abuse, prevent fraud/chargebacks, and maintain platform integrity.
  • Communicate about orders, support requests, security alerts, and policy updates.
  • Comply with legal obligations such as tax reporting, accounting, and regulatory requests.

3) How We Share Information

  • Stripe: Payment processing, fraud prevention, and Stripe Connect onboarding for sellers. See Stripe's Privacy Policy.
  • Sellers & Buyers: Usernames and order details to fulfill purchases and verify reviews; we do not share buyer emails publicly.
  • Public Profiles: Seller names, bios, avatars, and listings are visible to all users.
  • Vendors & Service Providers: Cloud hosting, analytics, security, and communications tools under confidentiality obligations.
  • Legal & Safety: To comply with law, respond to legal requests, enforce agreements, protect rights, prevent fraud/chargebacks, or address IP claims.

4) Data Retention

We retain information as long as necessary to operate the Services, comply with law, prevent fraud, and resolve disputes. After account deletion, we may retain limited records (e.g., transaction logs, blacklist records, and security data) as required by law or legitimate interests.

5) Security

We use industry-standard measures, including HTTPS/TLS, hashed passwords, access controls, logging, and periodic reviews. No method is 100% secure; promptly notify us of suspected issues.

6) Your Choices & Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability.

To exercise these rights, contact privacy@devblo.com. We may need to verify your identity and may retain certain data for legal obligations.

7) Children

The Services are not intended for children under 13. Users 13–17 may use the Services only with parental/guardian consent, consistent with our Terms.

8) International Transfers

Your information may be processed outside your country. We implement safeguards appropriate to the data and applicable law.

9) California & EEA Notices

California (CCPA/CPRA): California residents may request access to, deletion of, or details about personal information we collect, and may not be discriminated against for exercising these rights. We do not sell personal information.

EEA/UK (GDPR): You may have rights to access, rectify, erase, restrict, or object to processing, and to lodge a complaint with a supervisory authority.

10) Cookies & Preferences

You can manage cookies through browser settings. Disabling essential cookies may limit functionality. Some analytics or anti-fraud cookies are necessary for security and cannot be entirely disabled while using the Services.

11) Third-Party Links

Our Services may link to third-party sites. We are not responsible for their practices. Review their policies before providing information.

12) Changes to This Policy

We may update this Policy. Material changes will be posted with a new "Last updated" date. Continued use after changes constitutes acceptance.

13) Contact

This Privacy Policy is for information purposes only and is not legal advice.