Who we are
devproofs.com is operated by Pelea Raul-Daniel, trading as DevProofs,Strada Principală, 407560 Tureni, Cluj County, Romania ("DevProofs", "we", "us"). We are the data controller for the personal information described in this policy. You can reach us at hello@devproofs.com.
We are a small business and are not required to appoint a Data Protection Officer. Privacy questions go to the email address above and are answered by the owner personally.
What this policy covers
This policy covers devproofs.com, including the demo websites under /demos/ and the private previews under /p/, our emails, and the services we provide to clients. The DevProofs CV and portfolio app at app.devproofs.com is a separate product with its own privacy policy.
When we build and run a website or AI assistant for a client, the client decides what happens to their own customers' data. In that case we act as the client's processor under ourData Processing Addendum, and the client's privacy policy applies to their customers.
What we collect
Information you give us
- Preview request form: your name, business name, email, phone number, trade, city or service area, current website and your message.
- Chat booking requests: your name, phone number or email, the service you are interested in, your preferred day and time, the consent wording you agreed to, and the country of the request.
- Emails and calls: what you write or tell us, and our replies.
- Clients: billing name and address, invoices and payment status, and the content you provide for your website (text, photos, logos, service details, business hours).
Information collected automatically
- With form submissions: the date and time of your request, the country it came from (from your IP address) and your browser's user-agent string, stored with the request to help us spot spam. Each request is also sent as a notification email to our inbox, with your email address set as the reply address. Our phone gets a short alert that a request arrived, which contains none of your details.
- Form rate limit: to stop spam and automated abuse, the preview request form and the chat booking form accept only a few requests from the same connection in a set time. For this we store a one-way, salted hash of your IP address with the time of the request. We never store your raw IP address for this. These records are deleted automatically after about 48 hours.
- Security and delivery data: our host, Cloudflare, processes your IP address, browser details and request information to deliver pages and block attacks and bots. This includes the security cookies listed in our Cookie Policy.
We do not use advertising cookies, tracking pixels, session recording or third-party analytics on devproofs.com. Our emails contain no tracking pixels.
When a link to our site is shared on social media or in a chat app, the preview image shown is a picture we generated in advance from the page title. It contains no personal data.
If we contacted you first
We find home service businesses that might benefit from a better website and contact them by email. If that's how you heard from us:
- What we hold: your business name, trade, business address and city, business phone number, business email address and website address, and, where shown, the name of the owner or contact person. We may also hold a technical review of your website (speed, mobile layout, security), and a private preview page built from your public business information.
- Where it came from: publicly available sources, namely your own website, OpenStreetMap and public business listings. Website speed checks may use Google PageSpeed Insights.
- Why: to offer you our services, which is our legitimate interest in business-to-business marketing. We send a small number of personal emails, never bulk mail.
- Your choice: reply "no thanks", or email hello@devproofs.com, and we will stop contacting you and delete your data. We keep only your email address and business name on a do-not-contact list, so that you are never contacted again.
Why we use it (legal bases)
Under the EU General Data Protection Regulation (GDPR), we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Building your free preview and talking to you about it after you request one | Steps you asked us to take before a contract (Art. 6(1)(b)) |
| Delivering, hosting and supporting your website, AI assistant or automations, and billing you | Performance of our contract with you (Art. 6(1)(b)) |
| Keeping invoices and accounting records | Legal obligation under Romanian tax and accounting law (Art. 6(1)(c)) |
| Contacting businesses that may benefit from our services | Our legitimate interest in business-to-business marketing (Art. 6(1)(f)). You can object at any time. |
| Keeping the website secure, preventing spam and abuse, including the hashed-IP form rate limit | Our legitimate interest in running a safe service (Art. 6(1)(f)) |
| Establishing or defending legal claims | Our legitimate interest (Art. 6(1)(f)) |
| Optional analytics or marketing cookies, if we ever add them | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
The fields marked as required on the preview form are needed to build your preview. Everything else is optional. We do not make decisions about you based only on automated processing that have legal or similarly significant effects. We do rank business websites by technical quality to decide whom to contact first, but this ranking has no such effects on anyone.
International transfers
We are based in the European Union, and some of our providers process data in the United States. Each transfer is protected by the EU-U.S. Data Privacy Framework, where the provider is certified, or by the European Commission's Standard Contractual Clauses. Email us for a copy of the relevant safeguards.
How long we keep it
- Preview requests that don't lead to a project: deleted 12 months after our last contact.
- Businesses we contacted first: deleted 12 months after our last email, or straight away if you object. Only the do-not-contact entry is kept.
- Client records: for the duration of our contract, then for as long as needed for possible legal claims (generally 3 years under Romanian law).
- Invoices and accounting records: for the period required by Romanian accounting and tax law.
- Security logs held by Cloudflare: usually a few days, and no longer than 30 days.
- Chat booking records: kept for 12 months, then deleted or anonymised.
- Form rate-limit records for the preview request form and the chat booking form (hashed IP address and time): deleted automatically after about 48 hours.
Your rights
Wherever you live, you can ask us to access, correct, delete or export your information, orobject to how we use it. Email hello@devproofs.com. We reply within 30 days, and never charge for a reasonable request.
- People in the EU, EEA and UK: see GDPR & Data Processing for the full list of rights and how to complain to a data protection authority.
- US residents: see our US Privacy Notice for rights under California and other state laws.
Security
The whole site is served over HTTPS. Form submissions are stored in an access-controlled database. We do not store raw IP addresses from the form; the rate limit uses only a salted hash. Our accounts use strong, unique passwords and two-step verification. Access to personal data is limited to the owner. If a breach puts your rights at risk, we will tell you and the supervisory authority as the law requires.
Children
Our services are for businesses. This site is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you think a child has sent us information, email us and we will delete it.
Changes
If we change this policy, we will update the date at the top of this page. If a change affects how we use information we already hold, we will email the people affected before it takes effect.
Questions
Email hello@devproofs.com or write to Pelea Raul-Daniel, Strada Principală, 407560 Tureni, Cluj County, Romania. We answer within one business day.