EvolveDev

GDPR overview

The site never mentions the GDPR: the acronym appears nowhere on the pages reviewed, and no compliance claim is made either way. The privacy policy, updated on 2 September 2025, is built on India's DPDP Act 2023 — rights of access, correction, erasure, grievance and nomination — with a section granting additional rights, including erasure, objection, restriction and portability, to users in the EEA, the UK and California. International transfers rely on the Standard Contractual Clauses incorporated into the vendor's agreement with AWS for EEA, UK and Swiss users, and a legal basis is stated for each purpose: GDPR vocabulary without the name. On the other side of the ledger, there is no EU representative under Article 27, no data protection officer, no published DPA, no named sub-processor list and no certification. The only contact point is the Indian Grievance Officer, Challa Pradyumna, at support@evolvedev.io.

Who owns the data?

The terms of service, last updated on 13 December 2023, only address ownership of the vendor's own website material — its design, layout, look, appearance and graphics. They say nothing about who owns the engineering data you feed into the platform: no licence clause, no return clause, no deletion clause on termination. The privacy policy describes what the vendor does with personal data rather than who owns it, states that it does not sell your personal data, and lists categories of recipients: payment processors, cloud hosting, analytics, support and emailing platforms, legal authorities and a possible acquirer. The FAQ adds that EvolveDev works through webhooks and does not store or access your git data.

Reuse rights

Nothing in the terms of service explicitly allows or forbids you to reuse your own data or the platform's outputs, so the question is simply not settled contractually. In practice the product documents several ways out: reports and dashboards can be shared in a few clicks and pushed to email or Slack, and the REST Platform API, available from the Pro plan, is presented as a way to integrate key metrics and insights directly into existing internal dashboards such as Looker, Tableau or QuickSight. What the terms do lock down is the vendor's own material: reproduction is prohibited other than in accordance with the copyright notice, and creating a link to the site requires prior written consent. One practical limit applies to your own data too: history is only reachable inside your plan's retention window — 15 days on Free, 3 months on Starter, 1 year on Pro, 5 years on Enterprise — so exporting early matters. A portability right is spelled out only for users in the EEA, the UK and California.

Data retention & training

Hosting summary

Data is hosted on Amazon Web Services in the US-West region, in the United States, as stated in section 10 of the privacy policy. The vendor itself, SAASFOUNDRY TECHNOLOGIES LLP, is based in Bangalore, Karnataka, India, so the operating jurisdiction and the hosting jurisdiction differ. For users in the EEA, the UK and Switzerland, transfers rely on the Standard Contractual Clauses incorporated into the vendor's agreement with AWS. No data residency option and no alternative region are offered. Beyond AWS, named as the infrastructure partner, no sub-processor is identified: the privacy policy only lists categories of third parties, namely payment processors, cloud hosting, analytics, support and emailing platforms. The vendor states that it does not store git data, ingesting webhook events instead, and that card details are not held on its own servers but handled by a third-party payment processor. Note finally that the domain resolves behind Cloudflare on an anycast address, which concerns website delivery only and says nothing about where the data is stored.