Privacy Statement

Who we are

Devimation (KvK 99854430, VAT NL005415049B51) is responsible for the personal data described here. Questions or requests: info@devimation.nl.

The short version

Devimation Studio is built to keep your data on your own computer. Your images, datasets, annotations and trained models never leave your machine and are never sent to us. This website stores only what it needs to run your account and your licence. We use no analytics, no advertising, no tracking cookies, and we do not sell or share your data.

What we store and why

• Your account: email address, password (stored only as a one-way hash, never readable), company name, contact name, and optionally phone number and job title. Needed to provide your account and licence (performance of a contract).
• Your licence: licence key, plan, status and expiry date. Needed to provide the software you are entitled to (performance of a contract).
• Desktop app sign-in: when the app checks your licence it sends a sign-in token, a random device ID created by the app, and your computer's name, so a licence can be tied to the devices it was issued for. We record when each device was first and last seen (performance of a contract).
• Feedback, roadmap votes and backend requests you submit, so we can respond and improve the product (performance of a contract).
• Launch notification: if you sign up, your email address and the date, used only to tell you when Devimation Studio launches (your consent, which you can withdraw at any time by emailing us). Your IP address is kept briefly to stop abuse of the form.
• Security: failed sign-in attempts (email address and IP address) to slow down password guessing, and standard web server logs (IP address, page requested, browser type) to keep the site secure and working (legitimate interest).

How long we keep it

• Account, licence, device and feedback data: as long as your account exists. After you ask us to delete your account, we delete it within 30 days.
• Sign-in tokens for the desktop app expire after 7 days without use.
• Failed sign-in attempts: 30 minutes.
• Launch notification: until we have sent the launch announcement, and at most 12 months. The IP address used for abuse prevention: 1 hour.
• Web server logs: 14 days.
• Invoices and payment records, once paid plans are available: 7 years, as Dutch tax law requires.

Cookies

We use one cookie: a session cookie that keeps you signed in. It is strictly necessary for the site to work, so no consent banner is needed. We use no analytics or advertising cookies, and the site loads no third-party scripts or fonts.

Who processes your data for us

The website runs on a server rented from TransIP B.V. in the Netherlands. Your data stays within the European Union. We share it with no one else, unless the law requires us to.

Security

All traffic to this site is encrypted (HTTPS). Passwords are stored only as a secure hash. Access to the server is limited to us.

Your rights

You can ask us to see, correct, export or delete your personal data, to restrict how we use it, or object to its use. Email info@devimation.nl and we will reply within one month. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If we change this statement we update the date at the top. For significant changes we will let account holders know.