Privacy policy

Last updated: August 4, 2026

DevOps Buddy ("we", "us") is operated by idev (idev.com.br). This policy explains what we collect when you use devopsbuddy.io and why. The short version: we collect the minimum needed to run the service, we don't sell data, and your workloads live on your own infrastructure.

What we collect

• Account data — your email address and a hash of your password (bcrypt). If you enable two-factor authentication, a TOTP secret.
• Cloud credentials — API tokens and service-account keys you add are stored encrypted at rest and used only to perform the operations you trigger (provisioning VMs, managing DNS records, creating backup buckets). We never use them for anything else.
• Service metadata — the servers, domains and apps you configure; deploy command history including build output; server and container metrics (CPU, memory, disk) reported by the agent.
• Application data — we do not host your application data. Your apps, databases and backups live on your VMs and in your cloud storage buckets.

What we don't do

• We don't sell or share your data with advertisers.
• We don't access your servers beyond the commands you trigger from the dashboard.
• We don't run analytics trackers on the dashboard.

Where data lives

The control plane runs on Google Cloud (region us-central1); account and metadata are stored in a managed PostgreSQL database there. Google Cloud is our only infrastructure subprocessor.

Retention & deletion

Deleting an app, server, credential or domain removes it from our database (and best-effort deletes the associated cloud resources you asked us to manage). To delete your account entirely, email support@devopsbuddy.io and we'll remove all of your data within 30 days.

Cookies

We use a single session cookie to keep you signed in. No third-party or advertising cookies.

Your rights

You can request a copy, correction or deletion of your personal data at any time (LGPD/GDPR): support@devopsbuddy.io.

Changes

If this policy changes materially we'll note it here and, for significant changes, email account holders.