Privacy Policy
Last updated 26 August 2026
This policy explains what devBoard collects, why, and what you can do about it. It is written to be read rather than to be survived.
1. Who we are
App Tube d.o.o. (reg. no. 21806480) is the data controller for devBoard. Contact us at privacy@getdevboard.app.
2. The data we collect
- Account data — your email address, display name and hashed password, plus the workspaces and teams you belong to.
- Content you create — projects, work items, comments, labels, releases, saved views, time entries and any files you attach.
- Technical data — IP address, app version and platform, and server logs generated when the app talks to our API. These are kept for security and debugging.
We do not use third-party advertising or behavioural analytics SDKs in the app.
3. How we use it
- To run the service — signing you in, syncing your work across your devices, and delivering realtime updates to your team.
- To send transactional email — address verification, invites, and account or security notices.
- To keep the service working and secure — diagnosing faults, preventing abuse.
We do not sell your personal data, and we do not read your project content except where you explicitly ask us to for support.
4. Legal bases
We process account data and content to perform our contract with you. We process technical and security data under our legitimate interest in running a functioning, secure service. Where we rely on consent, you can withdraw it at any time.
5. Who we share it with
| Provider | Purpose |
|---|---|
| Cloudflare | DNS, CDN and protection against abuse. |
| Contabo (Germany) | Server hosting and database storage. |
| Zoho Mail | Sending transactional email — verification, invites, account notices. |
We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of devBoard and its users.
6. International transfers
Your data is stored on servers in the European Union. Where a provider processes data outside the EEA, that transfer relies on Standard Contractual Clauses or an adequacy decision.
7. Retention
We keep your account and content for as long as your account exists. Delete your account and we remove your personal data and content within 30 days, except where we must keep records to meet a legal obligation. Server logs are kept for a short rolling window.
8. Cookies
This website sets no tracking or advertising cookies. The app authenticates with a token stored on your own device, not with a browser cookie.
9. Your rights
Under the GDPR you may request access to your data, correction, deletion, restriction, portability, or object to processing. Write to privacy@getdevboard.app and we will respond within 30 days. You also have the right to complain to your local supervisory authority.
10. Security
Traffic between the app and our servers is encrypted in transit with TLS. Passwords are stored hashed, never in plain text. Access to production systems is restricted and key-based.
11. Children
devBoard is a tool for professional work and is not directed at children under 16. We do not knowingly collect their data.
12. Changes
If we change this policy materially we will update the date above and, where the change affects you, notify you in the app or by email.
13. Contact
App Tube d.o.o., reg. no. 21806480 — privacy@getdevboard.app