Privacy Policy
Last updated: September 2026. How Devpool collects, encrypts, processes, and respects your personal and engineering data.
1Scope & Overview
Devpool ("Devpool", "we", "us", or "our") is dedicated to upholding the highest standards of data privacy and transparency. This Privacy Policy details the categories of personal and telemetry information we collect when you access resourcio.io, register for multi-role accounts, purchase digital templates, book 1:1 mentorship sessions, or submit job applications.
2Information We Collect
We collect information across three clear vectors:
Full name, email address, password hashes (salted with bcrypt), biographical info, GitHub/LinkedIn links, portfolio URLs, and technical applications.
IP address, approximate geographic location, browser fingerprint, operating system, and anonymous interaction metrics via PostHog to detect UI latency bottlenecks.
Razorpay transaction identifiers, purchased merchandise orders, order history, and accumulated ResCoin virtual balances. We never view or store raw credit card credentials.
3Legal Basis for Processing
Under the European Union General Data Protection Regulation (GDPR) and the Indian Digital Personal Data Protection (DPDP) Act, our legal grounds for processing include:
- Contractual Performance: To authenticate your account, fulfill merchandise orders and deliveries, and execute scheduled mentorship sessions.
- Legitimate Interests: To detect sybil attacks, prevent streak botting, and ensure platform security.
- Explicit Consent: To send you weekly curated dispatches and optional analytics telemetry (which you can modify anytime via Cookie Settings).
4How We Use Your Data
We process your data strictly to:
- Maintain persistent authenticated sessions and multi-role identities.
- Compute proof-of-work badges, leaderboard ratings, and daily streak multipliers.
- Facilitate direct communication between verified engineering mentors and mentees.
- Distribute creator earnings and send transaction confirmations.
5Cookies & Tracking Technologies
Devpool uses lightweight cookies and browser local storage. You maintain granular control over non-essential cookies via our consent framework:
6Sub-Processors & Data Sharing
We partner only with security-certified sub-processors operating under strict Data Processing Agreements (DPAs):
7Security & Encryption Standards
All data in transit is encrypted using TLS 1.3 and HSTS preloading. Data at rest is encrypted using AES-256 standards. We enforce strict database Row-Level Security (RLS) ensuring developers can only read and modify authorized personal records.
8Your Privacy Rights (GDPR & DPDP)
You have full legal control over your personal data:
- Right to Access: Request a complete machine-readable copy of your profile data and transaction history.
- Right to Rectification: Edit and correct any outdated credentials in your dashboard settings.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and associated database rows.
- Right to Restrict Processing: Opt out of non-essential telemetry and marketing communications at any time.
9Data Retention & Account Deletion
We retain personal data as long as your account remains active. Upon receiving an account deletion request, personal identifying data is permanently erased within 30 days, retaining only legally mandated fiscal transaction records for taxation audits.
10Contact & Data Protection Officer
For any privacy inquiries, data subject access requests (DSAR), or compliance questions, please contact our Data Protection team: