Privacy Policy

Last updated: April 2025

What data DevBar collects

DevBar collects only the minimum data required to provide the service:

  • Platform API tokens — credentials you add for integrations such as GitHub, Jira, PagerDuty, and others. These are stored exclusively in the macOS Keychain on your device and are never transmitted to DevBar servers.
  • Account information — your email address and hashed password (or OAuth identity), used to authenticate you.
  • Usage metrics — anonymised product analytics (feature interactions, session duration) to help us improve the product. No personally identifiable information is attached to these events.
  • Billing information — processed exclusively by our payment provider. DevBar does not store raw card numbers.

How data is stored

API tokens are stored encrypted in the macOS Keychain on your local machine. They are never uploaded to DevBar servers.

Account and subscription data is stored server-side in a PostgreSQL database hosted in the EU. Data in transit is encrypted via TLS 1.2+. Data at rest is encrypted using AES-256.

Backups are retained for 30 days and are subject to the same encryption controls as primary storage.

We do not sell your data

DevBar does not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes.

Third-party services

We use a small number of sub-processors to operate the service (for example, our payment provider and infrastructure host). Each sub-processor is bound by a data processing agreement that restricts their use of your data to providing the contracted service.

Your rights

You may request export or deletion of your account data at any time by contacting us at the address below. We will fulfil deletion requests within 30 days.

Contact

For privacy-related questions or requests, please contact us at [email protected].