Privacy Policy

DevMatch ("we," "us," or "our") operates https://dev-match.xyz and related services, including our MCP server for ChatGPT, Cursor, and other AI tools.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

• Account Information: When you sign up via OAuth (e.g., GitHub/Google), we collect your email, name, and authentication details.
• GitHub Data: We index and analyze public GitHub activity (commits, PRs, issues, repos, profiles). This is public data that we process and enrich.
• Usage Data: For MCP and chat features, we log queries, tool calls, and credit/usage metrics to enforce fair use and improve the service.
• Contact and Enrichment Data: For paid tiers, we may enrich with additional contact info via third-party services. We only do this with appropriate signals.
• Technical Data: IP addresses, browser info, and device data for security and analytics.

How We Use Your Information

• To provide engineer search and ranking based on GitHub contributions and mission fit.
• To authenticate users for MCP and web access.
• To enforce usage limits and prevent abuse.
• To improve algorithms, search quality, and features.
• To communicate with you (support, updates, billing).
• For legal compliance and security.

We do not sell your personal data.

Sharing of Information

• Public GitHub Data: The underlying data is public.
• Service Providers: Supabase, hosting providers, analytics, and enrichment partners (limited to paid features).
• Legal: We may disclose if required by law.

MCP tool responses may return profile and contact data based on your queries and permissions.

Data Retention

We keep personal data only as long as it serves the purpose it was collected for.

• Engineer and contribution data (including any enriched contact details): retained as part of our live, continuously maintained index of public professional activity and refreshed over time to stay accurate. We process this under our legitimate interest in operating an engineer discovery service. Any individual may request removal at any time (see Your Rights) and we will delete it from the index.
• Account data: retained for the life of your account and deleted when you close it.
• Cached search results: held transiently (about one hour) to speed up repeat queries, then discarded.
• Usage logs and technical data (queries, IP, device): retained only as long as necessary for security, abuse prevention, billing, and improving the service.
• We may keep limited records longer where required by law (e.g., tax or accounting).

Your Rights

Depending on your location (e.g., GDPR, CCPA), you may access, correct, or delete your personal data. Contact support@dev-match.xyz.

We process public professional data under our legitimate interest in operating an engineer discovery service. You may object to this processing or request erasure at any time by contacting support@dev-match.xyz.

Contact Us

DevMatch — support@dev-match.xyz
See also our Terms of Service.