Data Protection

Privacy
Policy.

Last Synced: March 2026

01

Signal Ingestion

We ingest identity metadata (email) via Supabase Identity Protocol.

We record subscription signal names, fiscal costs, renewal cycles, and category identifiers.

System preference telemetry is recorded for notification delivery.

02

Restricted Signals

We never access financial institutions or banking rails.

Zero storage of credit card identifiers or CVV data.

No external browsing telemetry is recorded.

03

Sub-Processors

Supabase — Encrypted database and identity protocol.

Resend — Transactional signal distribution.

Vercel — Global edge hosting.

04

Data Purge Protocol

Operators can trigger immediate record deletion via settings.

In-active identities are purged after 365 days of zero signal activity.

Data concerns? Contact OPS: privacy@devbill.tech