This Privacy Policy explains how RDev ("we", "us") collects and uses personal data when you visit https://rdev.cloud, create an rdev account, buy a subscription or run rdev on your server. rdev is designed so that your code and project data stay on your own server; we collect only what we need to sell, license and update the product.
1. Data controller
The data controller is RDev, owned by Sinan Eldem, Yunuseli Mah. Çamlık Cad. No: 14 B Blok Kat: 3 Daire: 9, Osmangazi, Bursa, Türkiye. You can reach us at [email protected] or +90 532 486 0614.
2. Data we collect
Account data
Your name, email address, a hashed password, two-factor authentication settings if you enable them, and account records such as sign-up and last login times.
Billing data
Payments are handled by Paddle, our reseller and Merchant of Record. Paddle collects your payment details, billing address and tax information under its own privacy policy. We do not receive or store your card data. Paddle shares with us the information we need to manage your subscription, such as your name, email, country, plan, subscription status, and transaction and invoice references.
License and update checks
The rdev software on your server contacts our servers to validate your license and to check for and download updates. These requests contain your license identifier, a server identifier, the installed rdev version, timestamps and the IP address the request comes from. They do not contain your code, project files, databases, environment variables or AI agent conversations.
Support and communication
The content of emails you send us and, if you choose to attach it, a diagnostic report generated by rdev doctor, in which secrets are masked.
Technical data
When you use our website and web panel, our servers process your IP address, browser user agent and request logs for security and to keep the service running. If an error occurs, technical details about it are recorded in our error tracking system.
3. What we do not collect
We do not access your server, your code or your project data. We never join your Tailscale network. Your AI agent accounts (Anthropic, OpenAI) are connected directly by you, and we do not see your prompts or their usage.
4. How we use data and legal bases
- To provide your account, license, updates and web panel (performance of a contract).
- To manage subscriptions and billing together with Paddle (performance of a contract and legal obligations).
- To send service emails such as account verification, password resets, payment warnings and important changes (performance of a contract).
- To keep the Service secure, prevent abuse and fix errors (legitimate interests).
- To answer your support requests (performance of a contract and legitimate interests).
- To keep accounting and tax records (legal obligations).
We do not sell your personal data and we do not use it for advertising.
5. Cookies
We use only the cookies needed to run the site: a session cookie that keeps you signed in, a CSRF protection cookie and, if you choose it, a "remember me" cookie. We do not use analytics, advertising or tracking cookies. Your light or dark theme choice is stored in your browser's local storage. Paddle's checkout may set its own cookies when you make a purchase.
6. Processors
We share personal data only with service providers that process it on our behalf or as independent controllers, to the extent needed for the purposes above:
- Paddle (Paddle.com Market Ltd): reseller and Merchant of Record for payments, invoices, taxes and refunds.
- Resend: delivery of transactional emails.
- Cloudflare: DNS, network security and content delivery for our website.
- GlitchTip: error tracking, which we host ourselves; error data is not sent to a third party.
Some of these providers process data outside Türkiye and the European Economic Area. Where they do, the transfer is protected by appropriate safeguards such as standard contractual clauses, and for transfers from Türkiye we follow the requirements of the Personal Data Protection Law No. 6698 (KVKK). We may also disclose data where the law requires it.
7. Retention
- Account data: for as long as your account exists, and deleted within 30 days after you delete your account, except where we must keep it longer.
- Billing and transaction records: for the period required by tax and commercial law, generally up to 10 years.
- License and update check records: up to 12 months.
- Server logs and error reports: up to 90 days.
- Support emails: up to 3 years after the conversation ends.
8. Your rights
Under the EU General Data Protection Regulation (GDPR) and Article 11 of KVKK you have the right to know whether we process your data and to get a copy of it, to have inaccurate data corrected, to have your data deleted, to restrict or object to processing, to data portability, to withdraw consent where processing is based on consent, to learn who your data was shared with, and to claim compensation for damage caused by unlawful processing. You can ask us to delete your account at any time.
To exercise your rights, email [email protected]. We will reply within 30 days. You also have the right to complain to your local data protection authority or, in Türkiye, to the Personal Data Protection Authority (KVKK).
9. Security
We protect personal data with encryption in transit, hashed passwords, optional two-factor authentication, access controls and regular updates. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data.
11. Changes
We may update this Privacy Policy. We will post the new version on this page with a new "Last updated" date and tell you by email about material changes.
12. Contact
RDev (Sinan Eldem)
Yunuseli Mah. Çamlık Cad. No: 14 B Blok Kat: 3 Daire: 9, Osmangazi, Bursa, Türkiye
Phone: +90 532 486 0614
Email: [email protected]