This explains what DevFlow stores about you and your workflows, who helps process it, and the choices you have. DevFlow is run by David Oyelade. Questions: oyeladedavid1@gmail.com.
What we store
- Your account: name, email address, and a one-way hash of your password (we can't read your password). Whether your email is verified.
- Sign-in sessions: a session token, plus the IP address and browser details of the device, so you can stay signed in and we can limit abuse.
- Your workflows: the nodes, connections and settings you build, including the sample data you type into them.
- Run history: the result of each run, including what each step received and returned. This can include personal data from the services you connect. We keep each workflow's latest 100 runs for 30 days, then delete them. Deleting a workflow deletes its run history immediately.
- Saved credentials: API keys, tokens and webhook URLs you add. They are encrypted before they are stored and are never shown again; they are decrypted only while one of your workflows runs.
- Webhook calls: data sent to your workflow's webhook is processed by that run and appears in its run history like any other input.
Who else handles it
- Database hosting (Neon, PostgreSQL) stores all of the above.
- App hosting runs the service and sees requests as they pass through.
- Groq (AI model provider) receives the descriptions you type into the chat and the text an AI step in your workflow sends. Don't put secrets or personal data in prompts you aren't comfortable sending to an AI provider.
- Resend (email delivery), only if this service has email turned on, receives your email address to send account emails. It also delivers emails that your own workflows send, using your Resend key.
- Services your workflows call (Slack, Discord, any URL you enter) receive whatever you configure your workflows to send them.
We don't sell personal data, we don't run advertising, and there is no advertising or third-party tracking. Page views are counted with Vercel Web Analytics, which does not use cookies or track you across sites.
Cookies
DevFlow sets only the cookies it needs to keep you signed in. Your theme choice is kept in your browser's local storage. There are no marketing or analytics cookies (Vercel Web Analytics is cookieless).
Your choices
- See and export your workflows from Settings (Export all workflows).
- Delete workflows, saved credentials and run history yourself in the app.
- Delete your account and everything in it, or ask what we hold about you, by emailing oyeladedavid1@gmail.com.
Security
Connections are encrypted (HTTPS), passwords are hashed, saved credentials are encrypted at rest, and requests that try to reach private networks from a workflow are blocked. No service is perfectly secure; if we learn that your data was exposed we will tell you.
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect.