Privacy Policy · DevMap.in

1The short version

Talent control what is public: only a first name and last initial, city, skills, scores and an Online flag. Phone, email, full name, WhatsApp and links are revealed to a recruiter only after they pay to unlock you, and only because you agreed to that. We do not sell personal data and we do not show ads.

2Who is responsible

The operator of DevMap.in (“we”) decides why and how your personal data is used, which makes us the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023 (DPDP Act). Contact: diadem.xeiver@gmail.com.

3What we collect, and why

We ask for consent before listing you, before disclosing your contact to a paying recruiter, and before processing your phone number. Here is everything we hold:

Data	Whose	Why
Name, email, WhatsApp number	Talent (recruiters give name and email only)	To run your account, send you alerts, and (for talent, after payment) let a recruiter reach you. The number is entered by you and is not verified by us.
City and state; skills, languages, hourly rate	Talent	To show you in the directory and match searches. Map pins show the city centre, never an address.
GitHub username and public activity (commit counts and dates, repository names, homepage field)	Developers	To compute your work score and verify project ownership. We use public data only and never ask for access to private repositories.
Project titles and live website addresses; website availability checks	Talent	To prove your work is live. We request your site a few times a day and record whether it answered, and how fast.
Portfolio links and reviewer scores	Designers, marketers	For manual review of your work.
Company name, GSTIN (optional), payments, credit balance and history, unlocks	Recruiters	To sell and account for credits, issue invoices, and prevent abuse.
Emails you send to us as evidence (for example a screenshot answering a report)	Talent	To resolve disputes fairly.
Client e-mail address or number you give us to confirm a project	Your client	To send one confirmation request. We store only a masked label and a one-way hash to enforce limits; not the address itself.
Your consents, with date, IP address, browser details and policy version	Everyone	As legal proof that you agreed.
Technical data: IP address, device/browser, log entries	Everyone	Security, fraud prevention and fixing faults.

4Who can see what

Level	What	Who sees it
Public	Masked name (“Rahul S.”), city, languages, skills, rate, scores, rank, Online flag, generic project titles	Anyone using the directory
Locked	Full name, WhatsApp number, verified project links	You, and a recruiter after they pay to unlock you
Private	Email, GitHub ID	You, and our staff when needed to run the service
Financial	Payments, credit history, GSTIN	The recruiter, and our staff

5Who else handles your data

We use trusted providers to run DevMap.in. They process data for us under their own security commitments and may only use it to provide their service:

Razorpay: payments. They handle your UPI/bank details; we never see them.
Our database and sign-in provider (Supabase) and website hosting provider: store the data described above and run the site.
An email provider: sends sign-in codes, lead alerts to talent and client confirmation requests.
GitHub: if you sign in with it (required for developers), it tells us your account name and email.
A map-tile provider (currently CARTO, using OpenStreetMap data): your browser asks them for map images, so they can see your IP address.

We may also disclose data where the law requires it, to respond to lawful requests from authorities, or to protect people from fraud and harm. We do not sell personal data.

6Consent, and taking it back

Talent are asked to agree separately to: (1) being listed in the directory, (2) sharing contact details with recruiters who pay, and (3) processing their phone number. You may withdraw consent at any time. Withdrawing listing or disclosure consent hides your profile immediately. Withdrawal does not undo what already happened, for example a contact a recruiter has already unlocked.

Cookies: we use only the cookies needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

7How long we keep data

Record	Kept
Payments, credit ledger, unlock records, consent evidence	7 years, for tax and legal reasons, even if you delete your account
Website availability check results	60 days
Client confirmation requests	Links expire after 7 days; masked label and hash are kept with the project record
Everything else on your profile	Until you ask us to delete it

8Your rights, and deleting your account

Under the DPDP Act you may: ask for a summary of the data we hold and how it is used; ask us to correct or complete it; ask us to erase it; withdraw consent; and have your complaint heard (below). You may also nominate someone to exercise these rights if you die or cannot act for yourself.

To use any of them, email diadem.xeiver@gmail.com from the address on your account. We will verify it is you.

When you delete your account: your private details, projects, checks and rank history are deleted. Your public profile becomes an anonymous placeholder (“Deleted talent”) because paid unlock records must still point to something. Payment and credit records are kept for 7 years but are no longer linked to your name or phone number; consent records are kept with your identifying details removed. If you are a recruiter with unused credits, they must be refunded or forfeited first.

9Keeping it safe

Access to personal data is restricted by default; contact details are released only through a single protected function after payment; payments run through Razorpay; and staff actions on accounts are logged. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

10Children

DevMap.in is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has registered, tell us and we will remove the account.

11Complaints and our Grievance Officer

If you have a concern about your data, write to our Grievance Officer at diadem.xeiver@gmail.com. We aim to acknowledge within 2 working days and resolve as quickly as we can. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational.

We may update this policy; the date at the top shows the latest version, and we will tell you about important changes.