# Privacy at develoom

> What develoom.com collects, what the product reads from connected tools, and how to have any of it deleted. Last updated 25 August 2026.

This page covers two things: the develoom.com website, and the develoom product as it exists during early access. Write to hello@develoom.com with any question about either.

## What the website collects

- **Analytics.** develoom.com uses Google Analytics 4 to count visits and understand which pages are read. Google Analytics sets cookies and processes an abbreviated IP address, page URLs, referrers, and device information. It is used for aggregate traffic understanding only, and never to build advertising profiles.
- **Early access signups.** The signup forms collect one thing: an email address, plus a short label recording which form it came from. That message is delivered through Resend, our email provider, to hello@develoom.com, and a confirmation email is sent back to you. The address is used to contact you about early access. It is not sold, rented, or added to a newsletter.
- **Embedded video.** The demo page embeds a YouTube player through youtube-nocookie.com, which avoids cookies unless you press play. Once you play the video, Google's own terms apply to that playback.
- **Hosting.** The site runs on Cloudflare Pages. Cloudflare processes standard request logs, including IP addresses, for delivery, security, and abuse prevention.

## What the product reads

During early access, develoom connects to the tools your team already uses, such as GitHub, Linear, Jira, Slack, and Google Docs, through OAuth granted by your team.

- **Read-only.** develoom reads signals. It does not write anything back into your tools.
- **Your permissions still apply.** develoom respects existing access controls. If a manager cannot see something in your tools, they will not see it in develoom.
- **Processed, not hoarded.** Activity is processed and summarised into growth evidence. Raw commits, messages, and tickets are not retained long-term.
- **No model training.** Customer data is never used to train AI models, ours or anyone else's.
- **Deletion on disconnect.** Disconnect at any time and your data is deleted within 24 hours.

## Sub-processors

develoom relies on a small set of providers to run: Cloudflare for hosting and delivery, Google Analytics for website measurement, Resend for transactional email, and the AI providers used to generate growth synthesis, which operate under agreements that exclude training on customer data. The current list for a pilot is shared with the team before any connection is made.

## Your choices and rights

- Ask what is held about you, ask for a copy, or ask for deletion, by emailing hello@develoom.com with "privacy" in the subject. Requests are answered within 30 days.
- Block analytics cookies in your browser, or use any tracker blocker. The site works without them.
- Withdraw from the early access list at any time by replying to any email from us and asking to be removed. Your address is deleted from the list.

If you are in the EU, UK, or California, the rights described in the GDPR, UK GDPR, and CCPA apply and are handled through the same address.

## Children

develoom is a workplace product for engineering teams. It is not directed at children and does not knowingly collect data from anyone under 16.

## Changes

Material changes to this policy are noted here with a new "last updated" date, and early access teams are told directly before any change that affects how their data is handled.

## Contact

Privacy questions and data requests: hello@develoom.com. Postal contact: develoom, San Francisco, California, United States.