CloudSlash / Privacy

Privacy Policy

How we handle account information, workspace connections, and operational telemetry across CloudSlash services.

Effective November 2026 · support@devilabs.dev ↗

01

Scoped access

Hosted workspaces only inspect systems you explicitly authorize.

02

Encrypted secrets

Connection credentials and API keys are encrypted at rest and in transit.

03

Workspace control

Export or delete workspace snapshots and connections at any time.

This Privacy Policy describes how DeviLabs ("CloudSlash", "we", "us", or "our") collects, uses, and shares information across cloudslash.dev, the Plugin Registry (registry.cloudslash.dev), and CloudSlash Horizon (app.cloudslash.dev).

1. Information we collect

  • Account & Workspace Data: Name, email address, authentication identifiers, organization membership, roles, and billing metadata.
  • Connected Source Metadata: Read-only connection parameters, encrypted credentials, and system topology snapshots (resource identifiers, dependency edges, utilization metrics, tags, and cost estimates) collected by plugins you run or upload.
  • Usage & Telemetry Data: Feature interaction logs, API request metadata, performance diagnostics, and device/browser preferences.

2. How we use information

We process information to provide, secure, and maintain your workspace; execute authorized plugin scans and policy evaluations; enforce subscription quotas; provide customer support; and develop, train, benchmark, commercialize, and improve CloudSlash products, heuristics, and intelligence services.

3. Sharing & infrastructure processors

We share data with trusted infrastructure and authentication processors required to deliver the service (including Clerk for identity, Cloudflare for edge delivery, and managed cloud database/compute providers), with third-party plugin endpoints you explicitly invoke, with commercial partners or analytics services where permitted by law, to comply with legal obligations, or as part of a merger, acquisition, financing, or sale of assets. Data may be processed in the United States and other regions where our infrastructure providers operate.

4. Security & retention

All hosted traffic is encrypted over TLS, and stored connection secrets are encrypted using AES-256-GCM. We retain workspace data for as long as your account is active or as needed to provide the service, comply with legal obligations, and resolve disputes. Derived, de-identified, or aggregated benchmarking insights may be retained indefinitely.

5. Your choices & rights

You can disconnect sources, delete snapshots, or request account deletion at any time through your workspace settings or by contacting support@devilabs.dev. Essential session cookies and local storage keys are used to maintain authentication state and UI theme preferences across CloudSlash subdomains.