Privacy Policy

Last updated: 12 September 2026

This Privacy Policy explains how Devtrixx (“Devtrixx”, “we”, “us” or “our”) collects, uses, stores and shares personal data when you visit devtrixx.com, create an account, buy a marketplace product, pay for an installation plan, or contact support. By using the site you acknowledge this policy. If you do not agree, please do not create an account or complete a purchase.

1. Who we are

Devtrixx is a digital product studio and marketplace. We sell production-ready scripts, Laravel admin panels, Flutter apps and related installation services. Questions about this policy, including access or deletion requests, should go to support@devtrixx.com.

2. Information we collect

Devtrixx collects account email, order records and license keys to deliver digital products. The categories below are the data we actually process in the course of running the marketplace.

Account data

Name, email address and a hashed password when you register.
Role on the site (buyer or admin) and whether the account is banned.
If Google sign-in is enabled, a Google account identifier plus the name and email Google returns so we can create or link your Devtrixx account. We do not receive your Google password.
Optional profile image path if you later upload an avatar.

Orders, licenses and checkout

Order type (product or installation), item, amount, currency, status, timestamps and related metadata.
Whop checkout and payment identifiers used to confirm payment and fulfill the order.
License records: unique purchase code, status (for example active or revoked) and, when domain binding is completed through the validator, the bound domain.

Payments

Payment data is processed by Whop. Card numbers, bank details and other payment instruments are collected on Whop’s checkout, not on Devtrixx forms. We store only the identifiers and status we need to mark an order paid and issue a license.

Contact and support

If you use the contact form we store your name, email, optional subject and message so we can reply. Emails sent to support@devtrixx.com are handled as correspondence.

Installation access you choose to share

Installation is delivered after you provide access (for example server or cPanel login, database credentials, domain or DNS, SMTP, app icons or store listing access). Share only what is needed for the plan you bought. Rotate or revoke those credentials after we confirm delivery. We use them solely to install and verify the product on your environment.

Technical and session data

Session cookies so you stay logged in, plus a CSRF token cookie that protects forms.
Standard server logs that may include IP address, browser user agent, requested URL, referrer and timestamps, used for security, debugging and abuse prevention.
Signed webhook payloads from Whop (payment events). We keep the webhook id, type and payload so fulfillment is idempotent and disputes can be investigated.

We do not run third-party advertising pixels or sell-side trackers on the storefront. If we add analytics later, this policy will be updated first.

3. How we use personal data

Create and secure your account, including login, logout and Google sign-in when enabled.
Take you to Whop checkout, record the order, and fulfill paid product orders by issuing a unique purchase code.
Show your licenses and orders on the account dashboard.
Deliver installation plans after access is provided and communicate about that work.
Answer contact messages and provide product or license support.
Prevent fraud, enforce bans, revoke licenses when required, and keep the marketplace available.
Meet accounting, tax and legal obligations.
Improve the catalog, documentation links and site reliability using aggregated, non-identifying patterns where possible.

4. Legal bases

Where a privacy law requires a legal basis, we rely on: (a) performance of a contract — account, checkout, license delivery and installation; (b) legitimate interests — security, fraud prevention, support history and service improvement, balanced against your rights; (c) consent — optional Google sign-in and any optional marketing you later opt into; and (d) legal obligation — records we must keep for tax or dispute handling. You may withdraw consent without affecting processing that already happened.

5. Sharing

We share personal data only as needed to operate the marketplace:

Whop — checkout, payment confirmation and webhooks. Whop’s own privacy terms apply to card and wallet data.
Google — only if you choose Google sign-in and that feature is enabled.
Hosting, email and infrastructure providers — to serve the site, store the database and deliver transactional mail.
Professional advisers or authorities — if required by law, to protect Devtrixx or other users, or to resolve a dispute.

We do not sell personal data. We do not share email lists with marketers. We do not allow third parties to use Devtrixx data for their own advertising.

6. International transfers

Devtrixx, Whop and our hosting providers may process data in countries other than yours. Where a transfer law applies we use appropriate safeguards (for example contractual clauses required by the provider). Payment processing location is determined by Whop.

7. Retention

Accounts — kept while the account is open. After a verified deletion request we remove or anonymize profile fields that are not legally required.
Orders, invoices and license keys — kept for the life of the license and for a reasonable accounting period afterwards so we can prove a purchase, re-issue support and handle chargebacks.
Contact messages — kept long enough to resolve the request, then deleted or archived on a routine schedule.
Installation credentials — used only for the job. We do not keep production passwords as a standing vault; you should revoke access after delivery.
Webhook events and security logs — kept for operational and fraud-review windows, then rotated.
Sessions — expire according to the site session settings.

8. Security

We hash passwords, use HTTPS on the public site, verify Whop webhooks with a shared secret, and restrict admin tools to staff accounts. No method of transmission or storage is perfectly secure. Keep your purchase codes private; anyone with an active code may be treated as the licensee for support and domain binding.

9. Cookies

Essential cookies run the logged-in session and protect forms. They are required for checkout and the account dashboard. We do not use those cookies to profile you for ads. You can block cookies in your browser, but login and purchase will not work without the session cookie.

10. Your rights

Subject to applicable law, you may request access to the personal data we hold, correction of inaccurate fields, deletion, restriction, portability, or an objection to processing based on legitimate interests. You may also withdraw Google sign-in by disconnecting that method and using email login instead (or asking us to clear the stored Google id).

To request deletion or a copy of your data, email support@devtrixx.com from the address on the account. We will verify the request before acting. We may retain order, payment and license records where we must (fraud, tax, unfulfilled support, or to prevent re-use of a revoked code). Deleting an account does not automatically refund a purchase or cancel a bound domain.

11. Children

The marketplace is for business buyers and is not directed at children under 16. We do not knowingly collect data from children. If you believe a child created an account, contact support and we will close it.

12. Third-party sites

Product pages may link to live demos, documentation or Whop checkout. Those sites have their own policies. We are not responsible for their content or practices.

13. Changes

We may update this policy when the product, processors or law changes. The “Last updated” date at the top will change. Continued use of the site after an update means you accept the revised policy. Material changes will be reflected on this page; we may also email the address on your account when the change affects how we use data we already hold.

14. Contact

Privacy and deletion requests: support@devtrixx.com. You can also use the contact form on this site.