Privacy Policy

Last updated: May 2026

1. Introduction

HeyDevJob ("we", "our", or "us") is operated from Florida, USA. This Privacy Policy explains what data we collect when you use HeyDevJob, why we collect it, who we share it with, and what choices you have.

2. Information We Collect

Account Information

When you sign up, we collect:

  • Email address (used as your login)
  • Display name, username, optional bio and avatar URL
  • Selected role (DevOps, Backend, Security, Data, AI/ML, or Kubernetes)
  • Subscription tier (Free or Pro)
  • Authentication data - we sign you in with a magic link sent to your email; we never store passwords

Usage Information

We automatically collect:

  • IP address and browser user-agent (server logs only, transient)
  • Ticket activity - which tickets you've started, completed, and how many check attempts each took
  • Workspace session timestamps - when your workspace pod started and stopped, and how long it ran
  • Anonymous pageviews on public marketing pages, via Umami (no cookies, no fingerprinting)

Workspace Data

While you're working in your cloud workspace:

  • Code and files you create or modify
  • Terminal commands you run

Workspace data lives in an isolated, per-user Kubernetes namespace and is automatically deleted after 14 days of inactivity (see Data Retention).

AI Chat Data

When you chat with our AI assistant ("James") inside a workspace or with the homepage demo chatbot, the messages you send are stored in our database and processed by our LLM providers (see Third-Party Services). We use these conversations to deliver the AI response and to debug platform issues; we do not use them to train external AI models.

Referral Data

Each account has a unique 8-character referral code. If you arrive via a referral link (e.g. ?ref=CODE), a first-touch cookie records that code for 30 days. If you then sign up, we store that you were referred so we can grant the 25% discount to you and the free month to the referrer (see our Terms for program details).

Payment Information

For Pro subscriptions, payment details are collected and processed entirely by Stripe. We do not see or store your card number, CVV, or full billing information - we receive only a Stripe customer ID, subscription status, and high-level billing events via Stripe webhooks.

3. How We Use Your Information

We use the information we collect to:

  • Provide and operate the Service - including provisioning your workspace, assigning tickets, and answering you in the AI chat
  • Manage your account and authenticate sign-ins
  • Process subscription payments and the referral program
  • Send transactional emails (magic link, referral reward, subscription notices)
  • Improve the product by understanding aggregate usage
  • Detect and prevent abuse of the platform
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We share data only with:

  • Sub-processors: Third-party services that help us operate the Service (listed in Section 5). They process your data on our behalf under contractual confidentiality obligations.
  • Legal requirements: When required by law, subpoena, or court order, or to protect the rights, property, or safety of HeyDevJob, our users, or the public.
  • Business transfers: If HeyDevJob is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Third-Party Services (Sub-Processors)

We rely on the following providers, each governed by their own privacy policy:

  • Stripe - payment processing for Pro subscriptions (card data, billing).
  • Resend - transactional email delivery (magic link, referral reward, expiry notices).
  • Groq - LLM inference for the homepage demo chat. Demo messages are sent to Groq for AI response generation.
  • Umami Cloud - anonymous, cookieless pageview analytics on public marketing pages.
  • Cloudflare - network proxy in front of the site, and Cloudflare R2 object storage for encrypted nightly database backups.

The in-workspace AI assistant ("James") runs on a self-hosted LLM (Ollama) inside our own Kubernetes cluster - no third-party LLM provider receives that chat content.

6. Public Profiles

If you set a username, your public profile page at /u/{username} displays:

  • Your display name and bio (if set)
  • Your selected role and any pinned tickets
  • A list of completed tickets and earned skills

This information is intentionally public - search engines may index it. You can remove your username from Settings at any time, which removes the public page.

7. Cookies and Local Storage

Strictly necessary cookies:

  • session - your sign-in session (HTTP-only, 30-day expiry).
  • ref - first-touch referral attribution (30-day expiry, only set if you arrive via a ?ref=CODE link).

Browser local storage (not cookies):

  • theme - your light/dark mode preference.
  • umami.disabled - optional opt-out flag (set this to 1 to suppress Umami pageview pings from your browser).

We do not use tracking cookies for advertising. Umami analytics is cookieless and does not fingerprint visitors.

8. Data Retention

  • Account data: Retained until you delete your account.
  • Workspace pods: Stopped after 30 minutes of inactivity; the entire workspace namespace is deleted after 14 days of inactivity.
  • Completed tickets and chat history: Retained with your account so you can see your progress; deleted when you delete your account.
  • Database backups: Encrypted nightly backups are stored in Cloudflare R2 with a 30-day lifecycle expiry.
  • Server logs: Application and access logs are retained only as long as operationally needed for debugging and abuse prevention.

9. Data Security

We implement reasonable security measures including:

  • HTTPS/TLS for all traffic in transit
  • HTTP-only, secure session cookies
  • Per-user, namespace-isolated workspace environments with default-deny network policies
  • Encrypted database backups
  • SOPS-encrypted secrets management

No method of transmission or storage over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Receive a portable copy of your data

You can delete your account at any time from Settings, which deactivates your account and removes your sessions; remaining data is purged on our standard schedule. For other requests, email us at the address below.

11. Children's Privacy and Age Requirements

HeyDevJob is not intended for children under 13. We do not knowingly collect personal information from children under 13.

The Pro subscription requires you to be at least 18 years old, because billing and payment processing require legal capacity to enter a contract.

12. International Data Transfers

HeyDevJob is operated from the United States. If you access the Service from outside the US, your information may be transferred to, stored, and processed in the US and other countries where our sub-processors operate.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 14 days before they take effect. Your continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

privacy@heydevjob.com