We at Devpost, Inc. (“Devpost,” “we,” “us,” or “our”) have created this Privacy Policy (the “Privacy Policy”) because we know that you care about how we use and share the information you provide to us. This Privacy Policy relates to the information collection and use practices of Devpost in connection with our services (“Services”), which are made available to you through our websites located at www.devpost.com and www.devpost.team (the “Site”). The Services include the use of Devpost.com and Devpost for Teams, our proprietary hackathon hosting solution (the “Platform”), to host secure public and private hackathons that meet requirements stated on the Devpost website.

By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you agree with us collecting, using and sharing your information as described in this Privacy Policy. If you do not agree to any of its terms, you may not access or use the Sites and/or the Services.

I. What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or makes identifiable a particular individual. It also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations. We will refer to the Personal Data we obtain about you as “Your Data.” We explain the steps we take to keep Your Data secure, your choices regarding our use of this information, and how you contact us if you have any questions about our privacy practices.

Our Services may contain links to third-party websites (“External Sites”). We have no control over the privacy practices or the content of any such External Sites. As such, we are not responsible for their content, use or privacy practices. We strongly suggest that you review the applicable privacy policies and terms of service when visiting any External Sites.

This Privacy Policy applies to:

  • Visitors to our Site, who only view publicly-available content (“Visitors”);
  • Individuals who have signed up to access and use our Sites and/or Services to take part in Hackathons (“Users”); and
  • Individuals and organizations who have signed up to access and use our Services to post and/or sponsor Hackathons (“Posters”)

Capitalized terms not defined in this Privacy Policy shall have the meaning set forth in the Terms of Service.

II. The Information We Collect and/or Receive

In the course of providing the Services, we will collect and/or receive the following types of information. You authorize us to collect and/or receive such information.

1. Contact Information

When you register as a User or Poster to access and use our Services, when you contact us using the “Contact Us” feature, or when you sign up to receive our newsletter, you will be asked to provide certain information which may include your name, email address, and company name. 

If you sign up for and/or access our Services through a single sign-on service (e.g. Facebook, LinkedIn, or GitHub), you authorize Devpost to collect, use, and store through its applicable Application Programming Interface (“API”) any information that you have allowed the respective single sign-on service to provide to Devpost. Such information may include your first and last name, social media user name, social media profile picture, unique social media identifier and access token, and email address. 

We will refer to the information obtained under this section collectively as “Contact Information.”

2. Profile Information

You may voluntarily provide additional information to create a profile associated with your account (“Profile”). You may include information like a profile picture and screen name, your biography, your location, the name of the college or university you attended, degree type, major, grade point average, graduation date, software projects you have worked on, photos, skills, links to your social media profiles or personal website, and other information. We use this information to create your account Profile.

3. Billing Information

Posters who wish to purchase our Services will be required to provide certain additional information which may include a credit card number, debit card number, expiration date, billing address, and other payment related information (collectively, the “Billing Information”). Billing Information is collected and processed through a third-party payment processor. We do not directly obtain, process, or store any payment card information.

4. Hackathon Registration Information

If you are a User and you register to participate in a hackathon through our Services, you will need to provide your name, email address, and any other information required by the applicable Poster of the hackathon (collectively, the “Hackathon Registration Information”).

5. Hackathon Submission Information

If you are a User who has registered for a Devpost-hosted hackathon, when you provide your submission materials for the hackathon through our Services, you will need to provide your name, email address, the name of your submission, description of your submission, names of your team members and any other information required by the applicable Posters (collectively, the “Hackathon Submission Information”). Individual hackathons may require you to submit additional information on the submission form and may include additional terms and conditions relating to privacy. If there is a conflict between this Privacy Policy and the terms of a specific hackathon, the latter terms shall control with respect to that hackathon only.

6. Other Information

In addition to the kinds of information mentioned above, we may collect and/or receive the following information (“Other Information”):

a) Your activity

Information that we may automatically collect when you use the Services includes IP addresses, browser type and language, referring and exit pages and URLs, date and time, amount of time spent on particular pages, what sections of the Site Visitors visit, and similar information concerning your use of the Site and Services.

b) Cookies

We collect information using “cookie” technology. Cookies are small packets of data that a website stores on your computer’s or mobile device’s hard drive so that your computer will “remember” information about your visit. We use session cookies, which expire once you close your web browser, to help us collect information and to enhance your experience using the Services. If you do not want us to place a cookie on your hard drive, you may be able to turn that feature off on your computer or mobile device. Please consult your internet browser’s documentation for information on how to do this and how to delete persistent cookies. However, if you decide not to accept cookies from us, the Services may not function properly.

c) Third-party analytics

We may use one or more third-party analytics services (such as Google Analytics) to evaluate your use of the Site, compile reports on activity, collect demographic data, analyze performance metrics, and collect and evaluate other information relating to the Site, Services and mobile and internet usage. These third parties use cookies and other technologies to help analyze and provide us the data. By accessing and using the Site and/or Services, you consent to the processing of data about you by these analytics providers in the manner and for the purposes set out in this Privacy Policy. Please be advised that if you opt out of any service, you may not be able to use the full functionality of the Site and the Services.

Below is a list of analytics providers that we use; however, such a list may be subject to change based on how we wish to understand the user experience. You may use the accompanying links to learn more about such providers and, if available, how to opt-out from their analytics collection.

d) Third-party advertisers/remarketers

We may receive further information such as advertising identifiers, IP addresses, and post-conversion data from third party advertisers/remarketers and their service providers.

III. How We Use and Share Your Data

We may share, transfer, or disclose Your Data if you consent to us doing so, as well as in the following circumstances:

1. To provide our Services to you

On Devpost.com, your Profile is freely available for searching and viewing by any Visitor or User of the Services if it is not in Private mode.

We also use information collected pursuant to this Privacy Policy to provide our Sites and Services to you; to personalize your experience; to maintain and improve our Sites and Services; to solicit your feedback; to award prizes related to our Services; to update you about the hackathons we power; and to give you more tailored recommendations regarding future hackathons.

2. To assist us running our business

Like many businesses, we contract with other companies to perform certain business-related services. We may disclose information, including Your Data, to certain types of third-party companies, but only to the extent needed to enable them to provide such services, including, without limitation, hosting providers, analytics tools, customer support services, marketing and transactional email services, and payment processing. We may share Hackathon Registration Information and Hackathon Submission Information with applicable Posters. We may also disclose Your Data to any of our parent companies, subsidiaries, joint ventures, or other companies under common control with us in order to support delivery of our products and services.

3. Service Improvement, Including AI-Assisted Tooling

We use AI-assisted tools, including services from third-party AI providers (such as Anthropic, Google, and OpenAI), to help us operate, secure, and improve our internal processes and the Services, and certain AI-assisted features may be incorporated into the Services. These providers process content and information on our behalf as service providers, and we configure these services so that your content and information are not used to train their models. We do not use your content or information to train foundation models, and we seek to minimize the personal data processed by such tools.

4. To better understand and serve our customers

In an ongoing effort to better understand and serve our customers, and to improve the Sites and Services, we may analyze information provided by you in aggregate form in order to operate, maintain, manage, and improve the Services. This aggregate information does not identify you personally. We may share this aggregate data with our affiliates, agents, and business partners. We may also disclose aggregated user statistics in order to describe our products and services to current and prospective business partners and to other third parties for other lawful purposes.

5. Marketing

As permitted by applicable law, we may use Your Data for marketing purposes, such as informing you about our products and services and those of our third-party marketing partners that could be useful, relevant, valuable, or otherwise of interest to you.  Where required under applicable law, we will obtain your prior opt-in consent to send you electronic marketing communications. 

On occasion, a hackathon sponsor that advertises its own hackathon may use conversion-measurement pixels or similar technologies on that hackathon’s pages, solely to measure the effectiveness of its own campaign (for example, to understand whether visitors arriving from its advertisements went on to register or submit a project). These third parties may use cookies, pixel tags (also called web beacons or clear gifs), or other technologies to collect information in furtherance of such purposes, including to measure, analyze, report on, and/or manage advertising campaigns or other initiatives. For example, when a browser visits a site, pixel tags enable us and these third parties to recognize certain cookies stored within the browser to learn which ads or other content bring a user to a given site. 

Below is a list of advertising/remarketing providers that we use; however, such list may be subject to change based on the campaigns that we run. You may use the accompanying links to learn more about such providers and, if available, how to opt-out from their targeted ads or other personalization features. Please note you will not necessarily be opted-out of advertising or content generally; you may still receive generic ads or content.

  • For Google Adwords, you can set preferences for how Google advertises to you using the Google Ad Preferences page.
  • For LinkedIn, you can set preferences for how LinkedIn advertises to you using the General advertising preferences page.
  • In addition, you may opt-out of interest-based advertising by participating providers by visiting http://www.networkadvertising.org and http://www.aboutads.info/choices for details on how to do so.

6. As part of the sale or other transfer of our business

As we develop our business, we might sell or buy other assets or businesses. In the event of a corporate sale, merger, reorganization, sale of assets, dissolution, or similar event, Your Data may be part of the transferred assets associated with such transaction.

7. For legal purposes

To the extent permitted by law, we may also disclose Your Data: (i) when required by law, court order, or other government or law enforcement authority or regulatory agency; or (ii) whenever we believe that disclosing such information is necessary or advisable, for example, to protect the rights, property, or safety of Devpost or others. We may disclose Your Data to enforce our rights arising from any contracts entered into between you and us, including our Terms of Service and this Privacy Policy or if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Devpost, our customers or others.

8. Aggregated information

In an ongoing effort to better understand our Visitors, Posters, Users, and their use of our Services, we may analyze Your Data in aggregate form in order to operate, maintain, manage, and improve the Site and/or the Services. This aggregate information does not identify you personally. We may share this aggregate data with our affiliates, agents, and business partners. We may also disclose aggregated user statistics in order to describe our products and services to current and prospective business partners and to other third parties for other lawful purposes.

9. Otherwise with your consent

We may also disclose Your Data to fulfill any purpose for which you provide it or for any other purpose disclosed by us when you provide the information.

IV. Accessing and Modifying Personal Data and Communication Preferences

You may access, review, and/or make changes to Your Data you have provided to us by logging in on the Devpost.com Site, clicking on your username, and then clicking "settings". 

You may opt out at any time from the use of Your Data for direct marketing purposes by emailing the instructions to this email address: support@devpost.com. Please allow us a reasonable time to process your request.

In addition, you may manage your receipt of marketing and non-transactional communications by using the unsubscribe option included with any Devpost marketing email. We will use commercially reasonable efforts to process such requests in a timely manner. You should be aware, however, that it is not always possible to completely remove or modify information in our subscription databases. You can follow the link to “Edit your notification settings”  to adjust the receipt of transactional emails related to your account with Devpost. If you provide personal information to us that is contained in a submission to a hackathon, such information may not be edited after the competition submission deadline until the conclusion of the hackathon, per the rules of each competition. You can make a request to remove such information from a submission after a hackathon is over by emailing us at support@devpost.com.

You may access, review, and/or make changes to messaging received on Devpost.team by navigating to your Settings and the Notifications tab.

VI. How We Protect Your Data, and How Long We Keep It

We are committed to ensuring that Your Data is secure. Devpost takes reasonable and appropriate security measures to protect Your Data from loss, misuse, and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of such data, and compliance with applicable laws and regulations. You should keep in mind, however, that no internet transmission is 100% secure or error-free. In particular, email sent to or from the Site may not be secure, and you should therefore take special care in deciding what information you send to us via email or other electronic means. You, too, need to strive to protect against unauthorized access to your password and to your computer by signing off once you have finished using a shared computer.

We will retain Your Data in a form that identifies you only for as long as it serves the purposes for which it was initially collected as stated in this Privacy Policy, subsequently authorized, or as allowed under applicable law. We retain Your Data for as long as you have an account with us. In some cases we may retain Your Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes, or is otherwise permitted or required by applicable law, rule or regulation. Devpost may keep copies of User information, or other content provided by you, after their removal from the Site in archive storage, but in no event for more than 30 days. This archive storage may include past versions of stored items that have since been modified or deleted. We may further retain information in an anonymous or aggregated form, which cannot identify you personally. 

For additional information about our data retention policies please contact us at support@devpost.com.

VII. Do Not Track

As discussed above, third parties such as advertising networks and analytics providers may collect information about your online activities over time and across different websites when you access or use the Services. Currently, various browsers offer a “Do Not Track” option, but there is no standard for commercial websites. At this time, we do not monitor, recognize, or honor any opt-out or do not track mechanisms, including general web browser “Do Not Track” settings and/or signals.

VIII. Important Notice to Non-U.S. Residents

The Services are operated in the United States. If you are located outside of the United States, please be aware that any information you provide to us will be transferred to the United States where the privacy laws may not be as protective as those in your country of origin. If you are located outside the United States and choose to use the Services, you consent to any transfer and processing of Your Data in accordance with this Privacy Policy, and you do so at your own risk.

EU-U.S. and Swiss-U.S. Data Privacy Framework Notice. Devpost, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Devpost, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Devpost, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles (DPF Principles), the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Types of data; third parties. In reliance on the EU-U.S. DPF and the Swiss-U.S. DPF, Devpost processes customer/client data — including Contact Information, Profile information, Hackathon Registration Information, and Hackathon Submission Information of Visitors, Users, and Posters, as described in this Privacy Policy. Devpost does not process human resources data in reliance on the DPF. As described elsewhere in this Privacy Policy, Devpost discloses personal data to: (i) the organizers and sponsors of hackathons in which a User registers or participates (“Posters”), for the purpose of administering those hackathons; and (ii) service providers that perform services on our behalf — including cloud hosting, analytics, customer support tooling, transactional and marketing email delivery, payment processing, and AI service providers supporting our internal operations and product features — only to the extent needed to provide such services.

Access. Individuals have the right to access personal data that we hold about them received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF, and to correct, amend, or delete that data where it is inaccurate or has been processed in violation of the DPF Principles. To request access, correction, amendment, or deletion, please contact us at support@devpost.com with the subject line “DPF Request.”

Choice. Where we intend to disclose your personal data to a third party (other than an agent acting on our behalf) or to use it for a purpose that is materially different from the purposes for which it was originally collected or subsequently authorized by you, we will offer you the opportunity to opt out. You may exercise choice by contacting us at support@devpost.com with the subject line “DPF Request.”

Inquiries and complaints. In compliance with the EU-U.S. DPF and the Swiss-U.S. DPF, Devpost, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Devpost, Inc. at: support@devpost.com, with the subject line “DPF Request,” or by mail at Devpost, Inc., 250 Broadway, 24th Floor, New York, NY 10007.

Dispute resolution. Devpost, Inc. has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by us, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you. Binding arbitration. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See  https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction for more information on this process.

Enforcement. Devpost, Inc. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) with regard to personal data received in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF.

Disclosure to public authorities. Devpost may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Onward transfer liability. Devpost’s accountability for personal data that it receives in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF and subsequently transfers to a third party is described in the DPF Principles. In particular, Devpost remains responsible and liable under the DPF Principles if a third-party agent that it engages to process personal data on its behalf does so in a manner inconsistent with the DPF Principles, unless Devpost proves that it is not responsible for the event giving rise to the damage.

If you are a resident of the European Union (“EU”), United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined in our GDPR Addendum (the “Addendum”) at the end of this Privacy Policy. 

‍

IX. Notice to California Residents

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (the “CCPA”). For more information about your rights under the CCPA, please visit our CCPA Privacy Notice to California Residents.

Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to obtain certain information about the types of personal information that companies with whom they have an established business relationship (and that are not otherwise exempt) have shared with third parties for direct marketing purposes during the preceding calendar year, including the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. If you wish to submit a request pursuant to Section 1798.83, please contact us via email at support@devpost.com.

X. Notice to Nevada Residents

If you are a resident of Nevada, you have the right to opt-out of the sale of personal information to third parties. You can exercise this right by contacting us at support@devpost.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account.

XI. Updates to This Privacy Policy

This Privacy Policy is effective as of the date stated at the top. We may update this Privacy Policy from time to time and without prior notice to you to reflect changes in our privacy practices. We will indicate at the top of this Privacy Policy when it was most recently updated, and we encourage you to revisit this page periodically to stay aware of any changes. By accessing the Services after we notify you of changes to this Privacy Policy, you are deemed to have accepted such changes.

XII. How to Contact Us

If you have any questions about this Privacy Policy or our Sites in general, please contact us at support@devpost.com, help@devpost.team, or via mail to Devpost, Inc., 250 Broadway, 24th Floor, New York, NY 10007.

GDPR Addendum

Effective as of 10.28.2026

If you are a resident of the European Union (“EU”), United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) and the UK-GDPR with respect to your Personal Data, as outlined in this GDPR Addendum (the “Addendum”). 

For this Addendum, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to identify a person, and “processing” generally refers to actions that can be performed on data such as its collection, use, storage or disclosure. 

Devpost will be the controller of your Personal Data processed in connection with the Services. Where applicable, this Addendum is intended to supplement, and not replace, our Privacy Policy. If there are any conflicts between the Addendum and the other parts of the Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict.

‍

  1. Our Contact Information

Devpost is located at 250 Broadway, 24th Floor, New York, NY 10007. Please use this address or, preferably, reach out to support@devpost.com for any questions, complaints, or requests regarding this GDPR Notice; please include the subject line “GDPR Request.”

Our representative in the European Union is:

ePrivacy GmbH

Große Bleichen 21

20354 Hamburg

Germany

https://www.eprivacy.eu  

‍

  1. Types of Personal Data we Collect

We currently collect and otherwise process the kinds of Personal Data listed above in Section II of the Privacy Policy.

‍

  1. How we get the Personal Data and why we have it

We receive the Personal Data in the ways and for the purposes listed above in Sections II and III of the Privacy Policy. Under the GDPR, the lawful bases we rely on for processing this information are listed in the table below.

‍

Data Subject Category

Purpose & Legal Basis of Processing

Visitors, Hackathon Participants, and/or Posters (collectively, our “User Base”)

Newsletter: Sending our newsletter to Hackathon Participants based on our legitimate interest in providing the latest news and updates to such registered Users.

Recommendations: Our legitimate interest in utilizing information submitted by a Hackathon User, such as Profile Information or Hackathon Submission Information, to make recommendations for new Hackathons that may be of interest to such Hackathon Participant or feature such Hackathon Participant on the Site in cases where he or she is a winner.

Direct Marketing: Sending email marketing to our User Base based on their consent.

Provision of Services: We will process all Personal Data as necessary for the performance of contracts to which our User Base are a party, such as our Terms of Service and Privacy Policy, in order to provide our Services (or to take requested steps to enter into such contracts or execute a contract in your interests, such as our contracts with Posters regarding participation in Hackathons).

Such activities include: Allowing Profile registration (e.g., directly through us or through a social media or other third-party service at your discretion, such as Facebook or GitHub) and supplementation with other information, answering inquiries or working with Posters for hosting an in-person or online hackathon, processing Hackathon Submission Information for participation in Hackathons (e.g., sharing with Posters), or requesting payment.

Audience Measurement and Retargeting: Pursuant to their consent, our use of analytics or retargeting providers on our Site to understand how our User Base interacts with the Site or retarget such User Base (e.g., dropping a cookie on a Visitor’s browser when on our Site and showing a Devpost ad on other websites), respectively.

General Business Development: Our legitimate interest in furthering relationships with our User Base (such as by storing information regarding our User Base within a CRM or other database or file), ensuring customer satisfaction, and answering inquiries.

Information Security: Our web servers will log your IP address and other information (e.g., browser information, operating system, request date/time, user agent string, referral and exiting URL) in order to maintain an audit log of activities performed. We use this information pursuant to our legitimate interests in tracking Site usage, combating DDOS or other attacks, and removing or defending against malicious visitors on the Site.

Compliance with Applicable Law: We will process Personal Data as needed to fulfill our legal obligations, such as our obligations relating to tax, accounting, and finance.

‍

  1. Recipients of your Personal Data

Devpost personnel shall receive and process your Personal Data for the purposes described above. Certain Personal Data, such as Hackathon Submission Information submitted by Hackathon Participants, will be shared with Posters for participation in Hackathons; such Posters may be located all over the world.

Personal Data is also disclosed to the following categories of US-based recipients to effectuate the purposes described above: hosting providers, analytics and marketing providers, customer support services, marketing and transactional email services, and payment processors.

‍

  1. How we store and protect your Personal Data

We use reasonable administrative, technical, and physical safeguards to protect your Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction, for which we take into account the nature of the Personal Data, its processing, and the threats posed to it. Unfortunately, no data transmission or storage system can be guaranteed to be secure at all times. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us via email at support@devpost.com.

We retain your Personal Data for as long as needed to fulfill the purposes for which we obtained it, and delete it if you request it or such data is no longer relevant. In some cases, we may have to retain data to comply with our legal obligations (e.g., accounting, finance, and tax obligations). We will only keep your Personal Data for as long as allowed or required by law.

‍

  1. Your data protection rights

Under data protection law, you have rights, which include: 

‍

  • Right of access: You have the right to ask us for copies of your Personal Data. 
  • Right to rectification: You have the right to ask us to rectify Personal Data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 
  • Right to erasure: You have the right to ask us to erase your Personal Data in certain circumstances. 
  • Right to restriction of processing: You have the right to ask us to restrict the processing of your Personal Data in certain circumstances. 
  • Right to object to processing: You have the the right to object to the processing of your Personal Data in certain circumstances.
  • Right to data portability: You have the right to ask that we transfer the Personal Data you gave us to another organisation, or to you, in certain circumstances.
  • Right to withdraw consent: You have the right to withdraw your consent where consent is used as the legal basis for processing your Personal Data.
  • Objecting to Legitimate Interest/Direct Marketing: You may object to Personal Data processed pursuant to our legitimate interest. In such case, we will no longer process your Personal Data unless we can demonstrate appropriate, overriding legitimate grounds for the processing or if needed for the establishment, exercise, or defense of legal claims. You may also object at any time to processing of your Personal Data for direct marketing purposes by clicking “Unsubscribe” within an automated marketing email or by submitting your request to support@devpost.com with the subject line “GDPR Request.” In such case, your Personal Data will no longer be used for that purpose.

‍

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at support@devpost.com with the subject line “GDPR Request” if you wish to make a request.

‍

  1. Transfer of Personal Data to the United States

To transfer your Personal Data to the United States, we rely on the following, as appropriate: (a) our self-certification under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, to the extent applicable; (i) appropriate Standard Contractual Clauses to ensure adequate protection for your personal data, (ii) your consent; (iii) the derogations under Article 49(1)(b) and (1)(c) for performance of our contracts with you or to execute a contract in your interest with another entity/person, or (iv) any other valid transfer mechanisms, appropriate safeguards or exceptions under applicable law in effect at the time of such transfer.

‍

  1. How to complain

If you have any concerns about our use of your Personal Data, you can make a complaint to us at support@devpost.com with the subject line “GDPR Request.”

‍

You also have the right to lodge a complaint about the processing of your personal data with a supervisory authority of the European state where you work or live or where any alleged infringement of data protection laws occurred. A list of most of the supervisory authorities can be found here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

‍

  1. Disclosure to public authorities

Devpost may be required to disclose Personal Data in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. We may also disclose Personal Data to other third parties when compelled to do so by government authorities or required by law or regulation including, but not limited to, in response to court orders and subpoenas.

‍

  1. Corporate restructuring

In the event of a merger, reorganization, dissolution, or similar corporate event, or the sale of all or substantially all of our assets, the information that we have collected, including Personal Data, may be transferred to the surviving or acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such Personal Data as set forth in this Addendum. 

‍

  1. Updates to this Addendum 

If, in the future, we intend to process your Personal Data for a purpose other than that which it was collected, we will provide you with information on that purpose and any other relevant information at a reasonable time prior to such processing. After such time, the relevant information relating to such processing activity will be revised or added appropriately within this Addendum, and the “Effective Date” at the top of this page will be updated accordingly.

‍