1. Data controller
Dev Devices (hereinafter, "Dev Devices" or "we") is the controller of the personal data collected through this website and through our products.
Contact details of the controller:
Dev Devices
Email: help@devdevices.com
2. What data we process
We process only the data necessary to provide the service. We group it into the following categories:
2.1 Account data
- First and last name of the contact person.
- Email address.
- Company or organisation name.
- Password, always stored encrypted using irreversible hash functions.
2.2 Billing data
Payments are processed by Lemon Squeezy, our reseller and Merchant of Record. To process the payment and issue the invoice, Lemon Squeezy receives your name, email address, billing address, country, VAT number and payment details, and processes them as Merchant of Record under its own privacy policy.
Dev Devices does not receive or store card details. We only retain tax billing details (legal entity name, tax ID, address) and the history of purchased licences.
2.3 Technical data of the managed devices
- Device identifier, model, operating system and version.
- Connection status, IP address and session timestamps.
- Log of the actions performed on the device (reboots, installations, file transfers).
The content displayed during a remote control session is not recorded or stored on our servers, unless the customer expressly enables the session recording feature available in the Fleet plan. In that case, the recordings remain under the customer's exclusive control.
2.4 VideoSurveillance
When you use VideoSurveillance, we process:
- Account data: name, email address and company.
- Identifiers of the computers where the application is installed: an installation identifier and the computer name.
- The connection details for your recorders (NVRs and DVRs), which are stored encrypted.
- Activity logs and status logs of your cameras and recorders.
Video images and recordings do not pass through our servers and are not stored on them: the application connects directly to your own recorders.
2.5 Browsing data
When you visit devdevices.com, the IP address, browser type, language, referring page and pages visited are recorded automatically. This data is used in aggregate form and does not allow you to be identified individually.
3. Purposes and legal basis
In accordance with Article 6 of Regulation (EU) 2016/679 (GDPR), each processing operation is based on a specific legal ground:
| Purpose | Legal basis |
|---|---|
| Creating and managing your user account | Performance of a contract (Art. 6.1.b) |
| Providing the remote access and management service | Performance of a contract (Art. 6.1.b) |
| Billing and compliance with tax obligations | Legal obligation (Art. 6.1.c) |
| Technical support and customer service | Performance of a contract (Art. 6.1.b) |
| Platform security and fraud prevention | Legitimate interest (Art. 6.1.f) |
| Sending commercial communications | Consent (Art. 6.1.a) |
| Aggregate website usage statistics | Legitimate interest (Art. 6.1.f) |
You may withdraw your consent for commercial communications at any time, without this affecting the lawfulness of processing carried out beforehand or the provision of the contracted service.
4. Retention periods
- Account data: for as long as the contractual relationship is in force and for 12 months after its cancellation, in order to allow reactivation.
- Billing data: 6 years, in accordance with Article 30 of the Spanish Commercial Code (Código de Comercio) and Spanish tax legislation.
- Technical and session logs: 12 months from their creation.
- Session recordings: according to the configuration set by the customer; 30 days by default.
- Website browsing data: 14 months in aggregate form.
5. Recipients and data processors
We do not sell, rent or transfer your personal data to third parties for commercial purposes. We share information only with the providers strictly necessary to operate the service, all of them bound by a data processing agreement in accordance with Article 28 of the GDPR:
| Provider | Function | Location |
|---|---|---|
| Lemon Squeezy, LLC | Payments and billing as reseller and Merchant of Record (name, email, billing address, country, VAT number and payment details) | USA |
| Brevo (Sendinblue SAS) | Sending account emails and notifications | EU (France) |
| DigitalOcean, LLC | Hosting of our servers | USA |
| Cloudflare, Inc. | DNS, email forwarding and delivery of this website | EU / USA |
In addition, we may disclose data to law enforcement agencies, courts and public authorities where a legal obligation requires us to do so.
6. International transfers
Some of our providers are located outside the European Economic Area. In all cases, such transfers are carried out under the Standard Contractual Clauses approved by the European Commission (Implementing Decision 2021/914) or under adequacy decisions in force, guaranteeing a level of protection equivalent to that required by the GDPR.
7. Your rights
As the data subject, you may exercise the following rights at any time:
- Access: find out what data of yours we process and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data when it is no longer necessary.
- Objection: object to processing based on our legitimate interest.
- Restriction: request that we suspend processing while a claim is being verified.
- Portability: receive your data in a structured, commonly used format, or request that it be sent to another provider.
- Withdrawal of consent: for processing operations based on it.
To exercise them, write to help@devdevices.com stating the right you wish to exercise and attaching a document proving your identity. We will respond within a maximum period of one month.
If you believe that we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
8. Information security
We apply technical and organisational measures appropriate to the risk, including:
- AES-256 end-to-end encryption on all remote control sessions.
- TLS encryption on all communications with the platform.
- Two-factor authentication available for all accounts.
- Role-based access control and the principle of least privilege.
- Audit logs of the actions performed.
- Regular, encrypted backups.
In the event of a security breach posing a high risk to your rights, we will notify you without undue delay and will report the incident to the supervisory authority within a maximum of 72 hours, in accordance with Articles 33 and 34 of the GDPR.
9. Cookies
This website uses exclusively technical and necessary cookies and local storage for its operation:
| Name | Purpose | Duration |
|---|---|---|
dd_lang | Remember the selected language | Persistent (localStorage) |
dd_theme | Remember light or dark mode | Persistent (localStorage) |
| Session cookie | Keep the session signed in to the dashboard | Session |
As these are cookies strictly necessary to provide a service expressly requested by the user, they are exempt from the prior consent requirement under Article 22.2 of the Spanish LSSI-CE. We do not use advertising cookies or third-party tracking cookies.
10. Minors
Dev Devices is a service aimed exclusively at companies and professionals. It is not intended for persons under 18 years of age and we do not knowingly collect data from minors. If we detect that an account has been created with a minor's data, we will proceed to delete it immediately.
11. Changes to this policy
We may update this policy to reflect legal, technical or service-related changes. When the modification is substantial, we will notify you by email at least 30 days in advance. The date of the last revision always appears at the beginning of the document.
12. Contact
For any query relating to data protection, write to us at help@devdevices.com. We handle requests in Spanish, English and Chinese.