Legal

Privacy Policy

Last updated: June 30, 2026

Overview

Devora is operated by XFoundry. This policy explains what data we collect, why we collect it, and how we use it. By using Devora, you agree to the practices described here.

What data we collect

Data you provide directly

  • GitHub account information — When you sign in with GitHub, we receive your GitHub username, display name, email address, and avatar URL.
  • Repository metadata — When you import a repository, we store the repository name, description, language, and indexing status.
  • Chat messages — Messages you send to the AI chat are stored to provide chat history.
  • Settings preferences — Your theme, language, and appearance preferences are saved per device.

Data collected automatically

  • Usage data — We log request counts, AI chat message counts, and documentation generation counts for billing and rate limiting.
  • Cookies — We use essential cookies for authentication and session management. See our Cookie Policy for details.

Data we do NOT collect

  • Your source code is NOT permanently stored. Devora reads your repository's file tree and source files on demand to generate documentation and embeddings. Only the generated documentation and vector embeddings are persisted — your raw source code is not.
  • We do not sell your data.
  • We do not use tracking pixels.
  • We do not share your data with third parties for marketing.

How we use your data

  • To provide the Devora service (documentation generation, AI chat, repository management)
  • To enforce rate limits and plan limits
  • To process payments via our payment processor
  • To improve our AI models and documentation quality
  • To send you service notifications (e.g., subscription renewals)

Data retention

  • Chat messages: retained until you delete them
  • Generated documentation: retained for 7 days, then regenerated on next access
  • Usage logs: retained for 90 days for billing and analytics
  • Account data: retained until you delete your account

Your rights

You can export or delete all your data at any time from Settings → Danger Zone → Delete account. Deletion is irreversible and removes all your repositories, chats, documentation, and account data.

GDPR/CCPA rights

If you're in the EU/EEA or California, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Export your data in a portable format
  • Object to processing
  • Withdraw consent

To exercise these rights, contact xfoundationcom@gmail.com.

Contact

Privacy questions: xfoundationcom@gmail.com

Learn more about XFoundry at xfoundryy.vercel.app.