1. Who controls your data
Devign LLC, a limited liability company registered in the State of Wyoming, United States, is the controller of the personal data described here. For privacy questions, including any request to exercise your rights, contact info@devignlb.com.
We are a United States company serving creators in Europe, Turkey, Latin America and the Middle East, so this policy is written to meet the GDPR and UK GDPR, Turkey's KVKK, and United States state privacy laws at the same time. Where those give you different rights, you get whichever applies to you.
2. What we collect, and why
We collect only what the Service needs to function.
- Account identifier — your phone number (agency creators) or your email address. Used to create your account, send you a one-time sign-in code, and identify you across the Site and the Launcher. Legal basis: performance of our contract with you.
- Creator profile — for agency creators, the display name, username, avatar URL, level and activity figures already held in your Devign creator record. Used to show who is signed in and to determine whether the catalogue is free for you. Legal basis: performance of our contract.
- Entitlement and payment status — whether you are an agency member and whether you hold a paid unlock. Card details are never sent to or stored by us; they go directly to our payment processor. Legal basis: contract, and legal obligation for transaction records.
- Support correspondence — anything you send us, including diagnostic logs you choose to attach. Legal basis: our legitimate interest in answering you.
- Security and abuse signals — request metadata such as IP address and timestamps recorded by our servers, used to rate-limit one-time codes and detect abuse. Legal basis: our legitimate interest in keeping the Service secure.
3. What stays on your computer
This is the part most creators care about, so we want to be precise. When you run a game, the Launcher connects to your TikTok LIVE room and receives events — gifts, likes, comments, follows and shares. Those events are processed locally, on your own machine, by the Event Bridge component, and are passed straight to the running game to drive gameplay.
Viewer names and profile pictures arrive with those events and are cached locally so games can display them. We do not upload that viewer data to our servers, we do not build profiles from it, and we do not sell it. Clearing the Launcher's cache removes it.
Diagnostic logs are written to your machine and stay there unless you choose to send them to support.
4. Browser storage on this Site
The Site does not use advertising or analytics cookies. It stores three items in your browser's local storage:
- devign.session.v1 — your signed-in session, so you are not asked to sign in on every page.
- devign.lang.v1 — the language you picked.
- devign.settings.v1 — your launcher-related preferences, when set.
5. Who we share it with
We do not sell personal data. We share it only with providers who help us run the Service:
- WhatsApp / Meta Platforms — delivery of the one-time sign-in code to agency creators' phone numbers. Meta receives the phone number in order to deliver the message.
- Stripe — to take the monthly subscription payment, store your payment method for renewals, and handle cancellations and refunds. Stripe receives your email address and payment details and acts as an independent controller for payment data; we never receive or store your card number.
- Our hosting and email infrastructure — servers we operate, which store your account record and send verification and support email from our own mail server.
- Authorities — where we are legally required to disclose, and only to the extent required.
6. Where your data goes
Devign is a United States company. Our servers are operated by us, and account records, verification codes and support correspondence are processed on infrastructure we control and by the providers listed above, which may be located in the United States and in Europe.
If you are in the EEA, the UK, Turkey or Switzerland, using the Service means your personal data is transferred to the United States. Where that transfer is not covered by an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant) as the transfer mechanism, together with the technical measures described in section 10. You can ask us for a copy of the safeguards.
7. How long we keep it
- Account records: for as long as your account exists, and up to 12 months after deletion in a limited form to prevent re-registration abuse.
- One-time codes: minutes — they expire shortly after being issued and are not retained afterwards.
- Payment and refund records: as long as tax and accounting law requires.
- Support correspondence: up to 24 months.
- Locally cached viewer data and logs: controlled entirely by you, on your machine.
8. Your rights
Depending on where you live — in particular under the GDPR in the EEA, the UK GDPR, and Turkey's KVKK — you have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to processing, to receive it in a portable format, and to withdraw consent where processing is based on consent.
To exercise any of these, email info@devignlb.com. We will respond within one month. You also have the right to complain to your local data protection authority.
9. If you are in the United States
Residents of California and of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Texas and Utah) have the right to know what personal information we collect and why, to request a copy of it, to correct it, to request deletion, and not to be discriminated against for exercising any of those rights.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We run no advertising or analytics trackers on this Site, so there is nothing to opt out of — but you may still submit any of the requests above.
To make a request, email info@devignlb.com. We will verify it against the email address or phone number on the account before acting, and respond within 45 days. You may use an authorised agent.
10. Children
The Service is not directed at anyone under 18 and we do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
11. Security
Access to your account is protected by a one-time code rather than a password you have to remember and reuse. Traffic between the Site, the Launcher and our servers is encrypted in transit. No system is perfectly secure; if a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as the law requires.
12. Changes
If we change this policy materially we will update the date at the top and notify account holders before the change takes effect.