Privacy Policy

1. Who is responsible

The data controller (Responsable del Tratamiento) for DevSpeak Utilities, its four apps (SpecStudio, Prompt Guardian, Dev Text Forge and PromptForge) and the suite page is Devspeak S.A.S., Cll. 7D # 43A - 40, Piso 8, Medellín, Antioquia 050022, Colombia. Contact: info@devspeak.dev. This policy is our data processing policy for these Services under Colombian Law 1581 of 2012 and Decree 1377 of 2013.

2. What we collect

• Account: your email address and a hashed password, or, if you sign in with Google, the email, name and profile picture Google shares. Nothing else from your Google account is requested.
• Your saved work in each app (listed below for this app). You create it; you can edit, export or delete it.
• Per-request usage events: each time an app runs a server action for you, we record your user id, the action's name, whether it succeeded, how long it took and when. These events do not contain the text you submitted.
• Page analytics: Umami, which we host ourselves, counts page views, referrers, browser, device type and country. It does not use cookies and does not identify you.
• Trial and billing: your trial dates and usage counts, and, if you subscribe, your email, plan, subscription status and renewal dates from Dodo Payments. We never receive your card details.
• Support: what you write when you email us, and any trial feedback you choose to send.
• Technical data: IP address, browser and request identifiers in server logs, used to run and secure the Services.

3. App-specific processing

Each app lists the work it saves for you, the AI model providers that receive the text you send to its AI features, and any other service it uses, on its own privacy page: SpecStudio, Prompt Guardian, Dev Text Forge, PromptForge.

This suite page itself has no accounts, forms, scripts or cookies. Our hosting provider processes standard request data (such as IP address and browser) to deliver it and block abuse.

4. Why we use it

We use your data to provide the Services and your saved work (to perform our contract with you), to bill Utilities Pro and keep tax records (contract and legal obligations), to secure the Services and prevent abuse, to understand which features are used and fix errors (legitimate interest), and to send account emails such as confirmations, password resets, trial notices and security notices. When you create an account you authorize this processing under Colombian law.

We do not sell personal data, share it for cross-context advertising, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.

5. Who processes data for us

These service providers process personal data on our behalf, only for the purposes above:

• Amazon Web Services (United States): servers we operate there host the account database, the sign-in service, the analytics hub and Umami.
• Vercel (United States): hosts and serves the web applications and the suite page.
• Cloudflare: delivers landing-page images from our content network.
• Resend (United States): delivers account emails.
• Google: provides Sign in with Google, if you choose it.
• Dodo Payments: checkout, subscriptions, invoices and sales taxes, as merchant of record.
• The AI model providers and other services listed for this app below.

6. International transfers

Most of these providers process data in the United States. Some AI providers process it elsewhere: Mistral models in the European Union, and models marked as processed in China only when you pick one. By using the Services you authorize these transfers. We share with each provider only what it needs for its task.

7. Cookies and local storage

The apps do not use advertising or analytics cookies. Your sign-in session and some preferences are kept in your browser's local storage, which the apps need to work. Checkout pages run by Dodo Payments and Google sign-in pages may set their own cookies under their policies.

8. How long we keep data

Your account and saved work are kept until you delete them or ask us to delete your account; we then delete them from our active systems. Usage events may be kept in aggregate, without your identity, after an account is deleted. Payment and tax records are kept as long as tax law requires. Server logs and backups are kept for a limited time and then overwritten.

9. Your rights

Under Colombian Law 1581 of 2012 you have the right to know, update and correct your personal data; to ask for proof of the authorization you gave; to be told how your data has been used; to revoke your authorization and ask us to delete your data when there is no legal or contractual duty to keep it; to access your data free of charge; and to file a complaint with the Superintendencia de Industria y Comercio (SIC) after first contacting us.

How to exercise them: email info@devspeak.dev from your account's email address (or tell us how to verify you) with your request. Queries are answered within ten business days; if we need more time, we will tell you why and answer within five more business days. Claims (corrections, updates, deletions or revocations) are answered within fifteen business days; if we need more time, we will tell you why and answer within eight more business days. If a claim is incomplete, we will ask for the missing information within five business days.

If you are in the European Economic Area or the United Kingdom, you also have the rights of access, rectification, erasure, restriction, portability and objection, and may complain to your supervisory authority. If you are a California resident, you may ask to know, correct or delete your personal information; we do not sell or share it, and we will not treat you differently for using these rights.

10. Children

The Services are for adults and are not directed to anyone under 18. We do not knowingly collect personal data from minors; if we learn we have, we delete it.

11. Security

We use encrypted connections (HTTPS), hashed passwords, per-user access rules in the database, least-privilege service credentials and rate limits. No system is completely secure, so we cannot guarantee absolute security; if a breach affects your data, we will notify you and the authorities as the law requires.

12. Changes to this policy

We will post changes on this page with a new version and date, and tell account holders about material changes by email or in the app before they take effect. Where the law requires, we will ask for your authorization again.

Version history

• 2026-10-15: Names Devspeak S.A.S. as the data controller; adds the Habeas Data procedure and response times (Colombian Law 1581 of 2012), the legal bases, international transfers, cookies and local storage, children, security and a full processor list; removes internal file references. Replaces the version of 2026-10-10.