1. Privacy Commitment & Architecture#
DevLabs Jamaica ("DevLabs", "we", "us", or "our") operates developer-first geospatial infrastructure. We adhere to privacy-by-design principles: our edge network is optimized for real-time spatial computation rather than end-user surveillance. We do not track, profile, monetize, or harvest individual personal identities through API calls.
This Privacy Policy explains what information we collect when you visit devlabsja.com, create an account, or transmit API requests through our edge worker infrastructure.
2. Information We Collect#
| Data Category | What We Collect | Purpose & Legal Basis | Retention Period |
|---|---|---|---|
| Account Credentials | Name, email, PBKDF2 password hash, 2FA code hash | Authentication & account security | Until account deletion |
| API Telemetry | Request timestamp, endpoint called, status code, latency ms | Billing meter & service diagnostics | 30 days in Analytics Engine |
| Network Security | Connecting IP address, User-Agent header | Rate limiting, DDoS prevention & fraud mitigation | Rolling 7-day security logs |
| Invoices & Billing | Monthly bill totals, request counts, payment receipts | Tax compliance & statutory financial records | 7 years (statutory requirement) |
3. What We Do NOT Collect or Retain#
/apiv1/route or /apiv1/geocode are computed entirely in volatile edge memory and discarded upon response transmission.- We do not sell, rent, broker, or trade developer account data or API query contents to third-party data aggregators or advertising networks.
- We do not inject tracking cookies, behavioral tracking scripts, or ad-tech beacons into our console or documentation portals.
- We do not inspect or store proprietary business payload data passed within application queries beyond the minimum necessary for spatial computation.
4. Cookies & Session Storage#
Our web console uses strictly necessary session cookies (lw_session) configured with HttpOnly, Secure, and SameSite=Strict flags. These cryptographic tokens verify administrative and developer authentication. No tracking or marketing cookies are utilized.
5. Data Security & Storage Architecture#
DevLabs leverages Cloudflare Workers, Durable Objects, and Hyperdrive with encrypted TLS 1.3 connections in transit and AES-256 encryption at rest. Passwords are cryptographically salted and hashed using PBKDF2 with 100,000 iterations. Two-factor authentication (2FA) is enforced on all login sessions.
6. Your Rights & Data Subject Requests#
You have the right to request access to your account profile, export your project telemetry summaries, update your credentials, or request complete account termination and data erasure. To exercise your rights, email privacy@devlabsja.com.
7. Policy Updates#
We may update this Privacy Policy periodically to reflect infrastructure enhancements or regulatory requirements. Continued use of DevLabs following published amendments constitutes acceptance of the revised policy.