Overview
DevPass follows the principle of data minimization. We collect and retain only the data necessary to provide our services, and we delete it when it's no longer needed.
This policy explains how long different types of data are retained and what happens when you delete your account.
Retention Periods
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information (name, email, role) | Until account deletion + 30 days | Required to provide the service |
| Developer Passport data (profile, skills, projects) | Until account deletion + 30 days | Core platform functionality |
| GitHub integration data | Until disconnection or account deletion | Verification and analysis |
| Assessment results | Until account deletion + 1 year | Validity period for certifications |
| Usage and analytics data | 26 months (anonymized after 12 months) | Product improvement |
| Server logs (access, error) | 90 days | Security and debugging |
| Communication records (support, contact) | 3 years | Customer support quality |
| Billing and payment records | 7 years | Tax and legal compliance |
| Cookie consent records | 3 years | Regulatory compliance |
| Security event logs | 1 year | Incident investigation |
Account Deletion
When you delete your account:
- Immediate: Your account is deactivated. Your Developer Passport becomes inaccessible. Your data is removed from active systems within 24 hours.
- Within 30 days: Your personal data is permanently deleted from our production databases. Residual copies in backups are overwritten within 90 days.
- Exception: Certain data may be retained longer as required by law (e.g., billing records for tax compliance) or for legitimate business purposes as outlined in this policy.
Backup Retention
We maintain automated backups for disaster recovery purposes. Backups are encrypted and stored separately from production systems.
- Daily backups: Retained for 30 days.
- Weekly backups: Retained for 90 days.
- Monthly backups: Retained for 1 year.
When data is deleted from production, it is flagged for removal from the next backup cycle. Full removal from backups occurs within 90 days.
Anonymization
After the initial retention period, certain data may be anonymized rather than deleted. Anonymized data cannot be linked back to you personally and is used for:
- Product analytics and improvement.
- Aggregated platform statistics.
- Machine learning model training.
Anonymization is irreversible. Once data is anonymized, it can no longer be restored or linked to your account.
Legal Hold
In certain circumstances, we may be required to retain data beyond the standard retention periods due to:
- Ongoing legal proceedings or investigations.
- Regulatory requirements or government requests.
- Enforcement of our Terms of Service.
When data is subject to legal hold, it is excluded from normal deletion processes until the hold is released.
Your Controls
You have control over your data retention:
- Delete your account: Request account deletion at any time through your account settings or by contacting us.
- Export your data: Download a copy of your data before deletion through the data export feature.
- Selective deletion: Remove specific sections of your Developer Passport while keeping your account active.
- Revoke integrations: Disconnect GitHub or LinkedIn at any time, which removes the associated data.
Contact
For questions about data retention or to request deletion:
- Email: devpassofficial@gmail.com
- Online: devpass.com/contact