Privacy Policy

Last updated: 2 November 2026

Devmastr is a business name of RW Media Pty Ltd (ABN 82 623 586 372), registered in Victoria, Australia ("Devmastr", "we", "us"). This policy explains how we handle personal information when you use devmastr.com, the client portal or our services. We follow the Australian Privacy Principles.

1. What we collect

• Contact details: name, business name, email, and a phone number if you give one (for example, so we can call you for an intro call).
• Enquiry and project information: your answers to our intake and pre-work questions, call bookings, notes, messages, requests and files you share with us.
• Portal information: your login and activity, and records of what you accept or sign off (the document, time, your typed name and position, IP address and browser).
• Billing information: invoices, payments and payment references. We don't collect or store card details.
• Referral information: if you refer someone, the name and email you give us (with their permission), and payout details if you're owed a reward.
• Testimonials: what you write and how you said we may use it.
• Business contacts: if we've reached out to you about our services, your name, business, published business contact details and our notes.
• Technical information: IP address, browser and device details, and security logs, to keep the site secure and stop spam.

We only collect what we need. If you don't give us information we ask for, we may not be able to provide a service.

2. How we use it

To answer enquiries, book calls, run Discovery, quote, build and support projects, run care plans, issue invoices, keep financial records, run our referral program, show testimonials you've approved, keep our systems secure, and meet our legal obligations. We don't sell personal information or use it for third-party advertising.

Automated decision. If the budget you choose on our enquiry form is below our minimum project size, our system automatically tells you we're not the right fit, without a call. It uses only the budget range you select. You can contact [email protected] and we'll look at it personally.

3. Updates and unsubscribing

We only send occasional updates if you tick the box asking for them. Every update has an unsubscribe link, and we act on it within 5 business days. Service emails about your project, invoices and account aren't marketing and still come while you're a client.

4. Cookies and similar

We use only essential cookies: to keep you signed in, keep forms secure (including Cloudflare Turnstile spam protection), and remember your light or dark display choice in your browser. If you arrive through one of our referral or tracked links, we set a first-party cookie for 90 days so we know which link brought you. We don't use analytics or advertising cookies.

5. Who we share it with

Only service providers that help us run the business, our accountant and professional advisers, and anyone the law requires. Our service providers are:

• Proton (email), Switzerland
• Cloudflare (website security, delivery and spam protection), United States and global
• our hosting provider (website, portal and database), United States
• Google (calendar for call bookings), United States
• Toggl (time tracking, using project references only), European Union
• DocuSign (signing contracts), United States
• Dropbox (off-site backups), United States
• GitHub (our code; no client personal information), United States

So your information may be stored or handled in the United States, Switzerland and the European Union. We choose providers with strong security and privacy practices.

6. Information inside the systems we build

When we build or support a system for you, the personal information in it is yours. We handle it only on your instructions, under our Data Processing Schedule, and you are responsible for your own privacy obligations to your users.

7. Security

Access controls, two-step sign-in for our admin accounts, encryption of sensitive data, private file storage with short-lived links, audit logs and regular backups. No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and, where the law requires, the regulator.

8. How long we keep it

• Client records, contracts and invoices: 7 years after our last invoice to you (the law requires this for financial records).
• Enquiries that don't go ahead: 2 years.
• Business contact records: 2 years after we last contacted you.
• Project files: 12 months after handover or after your care plan ends.
• Backups: daily copies for about two weeks and weekly copies for two months. Tracked-link cookie: 90 days. After that we delete or de-identify the information.

9. Access, correction and complaints

Email [email protected] to see or correct your information, or to make a complaint. We'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes

We may update this policy. The current version and date are always on this page.