Privacy policy

This policy explains what MyDevBox collects, why, and what you can do about it. It is written to comply with the Protection of Personal Information Act (POPIA).

1. What we collect

Your name, email address and password hash when you register. The email address of anyone you invite. Usage logs such as sign-ins, installs and API calls, kept for security and debugging. We do not use third-party advertising trackers.

2. Why we collect it

To run your account, deliver invites, keep the service secure and fix problems. We do not sell personal information and do not share it with third parties except the providers that host and run the service.

3. Your box content

Skills, tools, prompts and other files you upload belong to you. They are private by default and visible only to the people you explicitly share them with. Our staff do not read box content except when you ask for support on a specific item or when required by law.

4. Invites and the people you invite

When you send an invite we store the recipient's email address and link it to your account. The recipient can see who invited them. If an invite is not accepted within 14 days the address is deleted.

5. Where data is stored

Data is hosted with Dedicated (dedicated.co.za) in Johannesburg, South Africa. Backups are encrypted and retained for 30 days.

6. Your rights under POPIA

You may ask what personal information we hold about you, ask us to correct or delete it, and object to processing. Deleting your account removes your personal information and box content within 30 days, except where we must keep records by law.

7. Contact

Our Information Officer can be reached at privacy@mydevbox.co.za. You may also lodge a complaint with the Information Regulator of South Africa.