Privacy Policy

1. Introduction

DevJourney ("we," "our," or "us") is committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information when you use our website at devjourney.ai (the "Service") and our VS Code extension.

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Email address, password, and display name when you create an account
• Contact Information: Name, email address, and messages when you use our contact form
• Payment Information: Payment details processed securely through Stripe (we do not store credit card information)
• Email Preferences: Your consent preferences for marketing and promotional emails

2.2 LinkedIn Integration Data

When you connect your LinkedIn account, we collect:

• Basic profile information (name, headline, profile picture)
• Professional information to enhance your DevJourney profile
• LinkedIn API tokens (stored securely and used only for authorized purposes)

2.3 Development Activity Data

Through our VS Code extension, we collect:

• Coding activity metrics (time spent coding, projects worked on)
• Programming language usage statistics
• Achievement and milestone data
• VS Code authentication tokens for secure communication

2.4 Automatically Collected Information

• Usage Analytics: Page views, user interactions, and performance metrics via Vercel Analytics
• Technical Information: Browser type, operating system, IP address, and device information
• Session Data: Authentication sessions and security state parameters

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve our Service
• Account Management: To create and manage your user account
• Communication: To respond to your inquiries and provide customer support
• Development Tracking: To track your coding progress and generate insights
• Personalization: To customize your experience and provide relevant features
• Security: To protect against fraud, unauthorized access, and other security issues
• Legal Compliance: To comply with applicable laws and regulations
• Marketing (with consent): To send promotional emails if you have opted in

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

• Firebase (Google): For authentication, database, and hosting services
• Stripe: For payment processing and subscription management
• Vercel: For website hosting and analytics
• LinkedIn: For profile integration when you authorize the connection
• Email Service: For sending transactional and support emails

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as court orders or government investigations.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication systems with Firebase
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis
• Secure API endpoints with proper authorization

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Control

• Account Access: You can access and update your account information through your dashboard
• Data Portability: You can request a copy of your personal data
• Account Deletion: You can delete your account and associated data
• LinkedIn Disconnection: You can disconnect your LinkedIn account at any time

6.2 Communication Preferences

• You can opt out of marketing emails at any time
• You can manage your email consent preferences in your account settings
• Transactional emails (account security, billing) cannot be disabled

6.3 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, but you can limit sharing for marketing purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Information: Retained while your account is active and for up to 2 years after account deletion for security purposes
• Development Activity Data: Retained while your account is active to provide historical insights
• Payment Information: Retained according to Stripe's data retention policies and tax requirements (typically 7 years)
• LinkedIn Data: Retained until you disconnect your LinkedIn account
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for service improvement
• Contact Form Data: Retained for up to 1 year for customer service purposes

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure that such transfers comply with applicable data protection laws and that your information receives adequate protection through:

• Use of services that comply with international data protection frameworks
• Contractual protections with service providers
• Adherence to recognized certification programs

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:

• Update the "Last Updated" date at the top of this policy
• Notify you of material changes via email or through our Service
• Provide at least 30 days notice for significant changes that affect your rights

Your continued use of our Service after any changes constitutes acceptance of the updated policy.

11. Do Not Sell or Share My Personal Information

We may share certain information with service providers as outlined in Section 4, but this is not considered a "sale" under privacy laws. If our practices change in the future, we will provide clear notice and opt-out mechanisms.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: