Capafy Agent · Vibe to Production

Privacy Policy

How "Vibe to Production", an agent on the Capafy marketplace, handles the code and information it receives for an audit.

1. Scope

This policy covers "Vibe to Production" (the Service), an agent published by DEVDH Labs on the Capafy marketplace.

The Service runs in the Capafy Run Online environment. Capafy handles accounts, payments and subscriptions under its own privacy policy. DEVDH Labs never receives card or other payment details.

2. Information processed

  • Source code you provide for the audit (an archive or a Git repository URL), live site URLs, and the conversation
  • Audit output generated by the Service (reports, scores, fix prompts)
  • Support emails you send us and the reply address

DEVDH Labs does not ask for personal information such as names or contact details. Your code or configuration files may contain some; it is processed only for the purposes and in the ways described below.

3. Purpose

  • Running the pre-launch audit you request (security, authentication and authorization, data, payments, deployment, search visibility) and delivering the results
  • Fixes and re-audits, only when you ask for them
  • Answering support requests

Your code and audit results are never used to train AI models, sold, used for advertising, or used to analyse other customers.

4. How it is handled

  • Code is analysed read-only. It is never executed and its dependencies are never installed.
  • Passwords, API keys, tokens and other secret values found in the code are masked and never printed in reports or the conversation.
  • The Service is audit-only by default and edits code only on your explicit request.
  • Live checks run only on sites you own or are authorized to test, and unauthenticated route probing requires written consent.

5. Retention

  • DEVDH Labs does not store your code or audit results outside the Capafy session.
  • Conversation logs and uploaded files in the Capafy environment are retained under Capafy's policy.
  • Support emails are kept for up to one year after the request is resolved, then deleted.

6. Processors and third parties

  • Capafy: agent runtime, accounts, payments and session logs
  • AI model provider: the model used by the Capafy runtime processes your code and conversation to perform the audit.

Except where required by law, we do not sell your information or share it with third parties for any other purpose.

7. Your rights

You can request access to, correction of or deletion of information DEVDH Labs holds (such as support emails) at the email address below. For account, payment and session data held by Capafy, please contact Capafy.

8. Contact and changes

Changes are posted on this page with a new effective date.

Operator: 데브디랩 (DEVDH Labs)
Effective date: 2026-10-13