Privacy Policy

Last updated: 13/10/2026

1. Introduction

Welcome to Arya Studio ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website devshelf.io and related services, including our browser extension.

2. Data We Collect

We process the following types of information:

  • Authentication & Account Data: Managed via Auth0, storing your email address, name, and profile picture.
  • User Content & Preferences: Your unique user ID, saved resources, and submitted links stored in our database.
  • Technical & Processing Data: Text embeddings and prompts processed for AI features, plus transactional email details.

3. How We Use Your Data

  • To operate and provide your DevShelf.io account and saved resources.
  • To generate embeddings and AI recommendations via LLM models.
  • To send transactional emails (support, system notices, and account updates) via Resend.
  • To analyze anonymous aggregate usage metrics without cookies via Simple Analytics.

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Performance of a contract: To deliver the core DevShelf.io service and extension functionality.
  • Legitimate interest: To maintain platform security, improve search capabilities, and measure privacy-friendly website analytics.
  • Consent: For opting into future product updates or newsletters.

5. Subprocessors & Service Providers

We share data strictly with the following trusted third-party service providers acting as subprocessors:

  • Auth0: Identity management and user authentication.
  • Supabase: Database and cloud storage hosting.
  • Vercel: Web hosting and serverless edge infrastructure.
  • Simple Analytics: Cookie-free, privacy-focused audience measurement (no user tracking or persistent identifiers).
  • Google Gemini (Google Cloud): LLM processing and content embeddings generation.
  • Resend: Transactional email delivery service.

6. International Data Transfers

Some of our service providers (e.g., Vercel, Google Gemini, Resend) process data outside the European Economic Area (EEA). These transfers are secured using legal safeguards such as EU Standard Contractual Clauses (SCCs) and/or the EU-U.S. Data Privacy Framework certification.

7. Browser Extension (DevShelf. Quick Access)

Our official browser extension does not store any authentication tokens locally; it relies on your active session from devshelf.io. It caches your saved resources locally in your browser storage solely to ensure fast performance.

8. Analytics

We use Simple Analytics to collect privacy-friendly aggregate usage data. Simple Analytics operates without cookies, does not collect personal identifiers, and respects user privacy by design.

9. Data Retention Periods

We retain your personal data strictly for the duration necessary to fulfill processing purposes:

  • Account Data & Saved Resources: Retained for as long as your account remains active. Deleted within 30 days upon account deletion request.
  • LLM Prompts & Embeddings: Ephemeral processing or retained only for the active lifecycle of the corresponding resource.
  • Technical Server Logs: Retained by hosting infrastructure for up to 12 months for security monitoring.
  • Transactional Email Logs: Retained by Resend for up to 90 days for troubleshooting.

10. Your Rights & Complaints (CNIL)

Under the GDPR, you have the right to access, rectify, erase, restrict, or port your data, or object to its processing. To exercise these rights, contact us at ybutte.pro@gmail.com.

If you believe your rights have not been respected, you have the right to lodge a complaint with the French Supervisory Authority, the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.

11. Security

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or alteration.

12. Contact

Arya Studio ybutte.pro@gmail.com