top of page

Privacy Policy

PRIVACY POLICY
Effective Date: September 2025

DevCode Red Team LLC (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our website (https://www.devcode.online) or engage our cybersecurity services. Our services include red team operations, penetration testing, and other security assessments. We operate under ethical and legal standards guided by industry-recognized frameworks and privacy-focused methodologies.

 

We collect personal and operational information based on your interaction with us. If you visit our website, we may collect your name, email address, browser type, IP address, and referral data through contact forms or analytics tools. If you engage with us as a client, we may collect your business name, contact information, system and network details, vulnerability data, and security configuration information related to the agreed scope of services. We also collect logs, screenshots, and other relevant data during authorized assessments. We only collect what is necessary to deliver services, and only within the boundaries defined by our engagement agreement.

 

We use the data we collect to deliver and customize our services, communicate with you, prepare assessment reports, and fulfill legal or contractual requirements. We do not sell, rent, or use your data for marketing purposes. All access to client data is strictly controlled and based on operational necessity. No testing is ever performed without formal written authorization, and we strictly adhere to the boundaries defined in the scope of engagement.

 

Data protection is central to how we operate. We follow a “Privacy by Design” approach that includes limiting data access to only what is necessary, storing client information securely, and encrypting all data at rest and in transit using industry standards such as AES-256 and TLS. All engagement-related access is logged internally. Where possible, we use anonymized or synthetic data and avoid accessing real user information unless explicitly authorized to do so. Testing in production environments is only performed if necessary and permitted by the client.

 

Client data, reports, and testing artifacts are retained only as long as necessary. By default, we retain reports and related data for 90 days following project completion, after which all sensitive material is securely deleted unless otherwise requested in writing. We use secure deletion methods and provide data retention or deletion documentation upon request. You may also request earlier deletion or longer retention based on your compliance needs.

 

We use certain third-party tools and platforms to support our security assessments. These include services like Shodan, Censys, GreyNoise, n8n, and others. We only share information with such tools to the extent required for OSINT and automation, and we ensure that these third parties meet security and privacy standards aligned with our own.

 

As a client or website user, you have the right to request access to the information we hold about you. You may also request corrections to your data, ask that your information be deleted, or withdraw consent to data collection that is not essential to service delivery. To exercise these rights, you may contact us directly at juan.roman@devcode.online.

 

In the event of an accidental data exposure or confirmed breach involving client information during an engagement, we will notify the affected party within 72 hours of discovery. We will provide a full report of the incident and assist with any required remediation steps in coordination with your team.

 

DevCode Red Team LLC is based in Fort Worth, Texas, and operates under the laws of the State of Texas. Any legal matters related to this Privacy Policy or our services will be handled in the applicable courts of Tarrant County, Texas. This Privacy Policy may be updated periodically. The effective date at the top will reflect the most recent version, and continued use of our services or website implies your acceptance of the current terms.

 

If you have any questions about this policy or how we handle your data, you can contact me at juan.roman@devcode.online. I am committed to maintaining transparency and protecting your information throughout every engagement.

bottom of page