Privacy Policy

1. Who we are

DevToFounder.io is operated by Deepkumar Janardhanan, an individual based in Kerala, India, doing business as DevToFounder.io ("we", "us", "our"). We publish and sell digital products for software developers.

Contact: deep@devtofounder.io

2. What data we collect and why

2.1 Waitlist signups

When you join our pre-launch waitlist at devtofounder.io/early, we collect your name (optional) and email address. We use this solely to notify you when the product launches and to send you your early bird offer. We do not use it for any other marketing purpose.

2.2 Purchases

All purchases are processed by Lemon Squeezy (a Stripe company), who acts as the Merchant of Record. We do not collect or store your payment card details. Lemon Squeezy shares your order details — name, email, order ID, and purchased tier — with us via a signed webhook so we can provision your access.

Lemon Squeezy's privacy policy: lemonsqueezy.com/privacy

2.3 Members area access

When you access the members area, we store your email, hashed password, purchased tier, and session data in our database hosted on Hostinger servers.

2.4 Geo-detection

We use ipapi.co to detect your country from your IP address. This is used solely to display the correct pricing for your region (India vs global). We do not store your IP address for any other purpose. ipapi.co's privacy policy: ipapi.co/privacy

2.5 Transactional email

We use Resend to send transactional emails (purchase confirmations, password reset links, waitlist confirmations). Resend's privacy policy: resend.com/legal/privacy-policy

3. Legal basis for processing

Under India's Digital Personal Data Protection (DPDP) Act 2023, we process your data on the following bases:

• Consent — for waitlist signups. You explicitly provide your email to be notified at launch.
• Contractual necessity — for purchase fulfilment. We need your email and order details to deliver what you paid for.
• Legitimate interest — for security, fraud prevention, and service operation.

If you are in the European Economic Area, we also comply with GDPR on the same bases.

4. How long we keep your data

• Waitlist entries — retained until 90 days after the product launch, then deleted unless you have made a purchase.
• Purchase and account records — retained for 7 years for tax and accounting purposes, as required by Indian law.
• Session data — expires automatically after inactivity.

5. Who we share your data with

We do not sell your data. We share it only with the third-party service providers listed in Section 2 above (Lemon Squeezy, ipapi.co, Resend, Hostinger) — solely to operate our service. Each is contractually bound to protect your data.

6. Your rights

Under the DPDP Act 2023 and GDPR (where applicable), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Withdraw consent at any time (for waitlist signups)
• Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, email us at deep@devtofounder.io. We will respond within 30 days.

7. Cookies

We use one session cookie to keep you logged in to the members area. This cookie is strictly necessary for the service to function and does not track you across other websites. We do not use advertising or analytics cookies.

8. Data security

We use HTTPS for all data in transit. Passwords are hashed using industry-standard algorithms and never stored in plain text. Access to our database is restricted to our hosting environment.

9. Children's privacy

Our products are intended for professional software developers. We do not knowingly collect data from anyone under the age of 18.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to registered members. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests: deep@devtofounder.io