Privacy Policy

Last updated: December 2024

1. Introduction

This Privacy Policy explains how Developers Alliance ("we", "us", or "the Service") collects, uses, discloses, and safeguards your information when you use our enterprise resource planning system. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service, including:

• Account Information: Name, email address, username, and password
• Profile Information: Job title, department, contact information, and profile photo
• Employment Data: Work history, salary information, time tracking data, and performance records
• Project Data: Task assignments, project details, and collaboration content
• Financial Data: Invoice information, expense reports, and payment details
• Communications: Messages, comments, and feedback submitted through the Service

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information, including:

• Log Data: IP address, browser type, operating system, access times, and pages viewed
• Device Information: Device type, unique device identifiers, and mobile network information
• Usage Data: Features used, actions taken, and time spent on the Service
• Login Information: Authentication timestamps, login attempts, and session data

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Google OAuth: When you sign in with Google, we receive your Google account ID, email address, name, and profile picture
• Integration Services: Data from connected third-party applications as authorized by your organization

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve the Service
• Authentication: To verify your identity and manage your account
• Communication: To send notifications, updates, and administrative messages
• Security: To detect, prevent, and respond to security incidents and unauthorized access
• Analytics: To analyze usage patterns and improve user experience
• Compliance: To comply with legal obligations and enforce our terms
• Support: To provide customer support and respond to inquiries

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Within Your Organization

Your information may be accessible to other members of your organization based on role-based access controls configured by your administrators. This includes managers, HR personnel, and other authorized users.

4.2 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as hosting, email delivery, and analytics. These providers are contractually obligated to protect your information.

4.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Secure password hashing algorithms
• Role-based access controls
• Regular security assessments and monitoring
• Login attempt monitoring and rate limiting
• Session management and automatic timeouts

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may also retain certain information as required by law, to resolve disputes, or to enforce our agreements. Your organization's administrators control data retention policies within the Service.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal and contractual obligations)
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact your organization's administrator or the Service provider.

8. Google OAuth and API Services

When you choose to sign in using Google OAuth, we access the following information from your Google account:

• Your Google account ID (for authentication purposes)
• Your email address (to match with your organization account)
• Your name and profile picture (for display purposes)

We use this information solely for authentication and to provide the Service. We do not access your Gmail, Google Drive, or other Google services without explicit authorization. Our use of Google user data complies with the Google API Services User Data Policy , including the Limited Use requirements.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Analyze usage and improve the Service
• Enhance security

You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact your organization's administrator or the Service provider.