EU Privacy Notice

Last updated: October 26, 2026

This notice covers Devin EU at app.devin.eu. For Devin US and Cognition’s other services, see our Privacy Policy.

This notice explains how we handle personal data when you use the EU version of Devin at app.devin.eu, including EU enterprise sites (such as yourcompany.enterprise.devin.eu). It applies to people in the European Economic Area (EEA), Switzerland, and the UK. Our Cookie Notice explains the cookies and similar technologies we use.

Devin EU and Devin US are separate. Devin EU has its own accounts, and your Devin EU account isn’t connected to Devin US. Cognition AI, Inc. processes Devin EU data as our service provider, on our instructions, as described in sections 4 and 5. If you also use Devin at app.devin.ai, Cognition AI, Inc. is the controller for that service and its Privacy Policy applies.

1. Who we are

Cognition AI Labs Ireland Limited, 70 Sir John Rogerson's Quay, Dublin 2, Dublin, D02 R296, Ireland, (“Cognition,” “we,” “us,” or “our”) is the controller of your personal data for the EU version of Devin. You can contact us about privacy at privacy@cognition.ai.

If you use Devin through your organization. Your organization controls its content, meaning what you and your team put into Devin and what Devin produces. We process that content on your organization’s behalf and follow its instructions. We don’t use it for our own purposes, including to train AI models, whether ours or third parties’. Unless your organization’s agreement with us says otherwise, we are the controller of your account details and usage data, as described in this notice. For questions about your organization’s content, please contact your organization.

2. What we collect

  • Contact and account details: your name, email address, company name, password, and the usernames of any Git accounts you connect.
  • Content: what you put into Devin, what you authorize Devin to access (such as repositories), and what Devin produces, such as prompts, code, files, and outputs.
  • Communications: messages you send us, support requests, feedback, and survey responses.
  • Technical and usage data: information our servers receive when you use Devin, such as your IP address, browser and device details, approximate country, the features you use, and how much you use Devin. It doesn’t include your content.
  • Analytics and session recordings (only with your consent): additional usage data collected in your browser through cookies, such as pages viewed, errors, and recordings of clicks, mouse movements, and scrolling. Page text, images, and anything you type are hidden in recordings.

Content you upload, such as code and repositories, may include other people's personal data, such as names in commit history. We handle it as described in this notice.

Where it comes from. Most of this comes from you. We also receive account details from your organization if it sets up your access, and your username from Git providers you connect. Technical and usage data is collected automatically when you use Devin.

3. Why we use it and our legal basis

Where we rely on legitimate interests, you can ask us for more detail on how we balanced our interests against your rights.

What's required. We need your account details to provide Devin. Without them, we can’t create your account. Analytics and session recording are optional. Devin works the same either way.

4. Who we share it with

  • Service providers that work on our behalf, such as cloud hosting, AI model providers, and Datadog for performance monitoring and session recording. They can only use your data to provide services to us. You can request our list of service providers at privacy@cognition.ai.
  • Your organization, if you use Devin through a work account. Its administrators may see your account details and the content you create.
  • Other users, when you choose to share a Devin session or link.
  • Our affiliates, including Cognition AI, Inc. (United States), which helps us with reporting, billing, and sales.
  • Advisors and authorities, such as lawyers, auditors, and regulators, or when the law requires it.
  • A buyer or successor, if we're involved in a merger, acquisition, or sale of assets.

We don’t sell your personal data or share it for targeted advertising.

5. Where your data is processed and international transfers

We host Devin EU in the EU, and our AI model providers process your content only in the EEA and Switzerland. Some data is stored or accessed outside the EEA, for example for support, performance monitoring, and business reporting such as billing, finance, and sales, as described below.

Some of the companies we share data with are outside the EEA, including Cognition AI, Inc. and Datadog, Inc. in the US. When your data is transferred to a country without an EU adequacy decision, we protect it with the European Commission's Standard Contractual Clauses, with the Swiss amendments for Swiss data and the UK International Data Transfer Addendum for UK data. Some data is processed in Switzerland, which the EU recognizes as providing adequate protection. You can request a copy of the safeguards we use at privacy@cognition.ai.

6. How long we keep it

We retain your personal data as needed to provide Devin to you, comply with legal obligations, or protect our or others’ interests. How long we retain personal data includes considerations such as when the information was collected or created, whether it is necessary in order to continue offering you Devin, whether we are required to hold the information to comply with our legal obligations, or information preservation requirements. We also keep certain information where necessary to protect the safety, security, and integrity of Devin or users.

In line with these considerations, we delete information that is no longer needed for the above purposes or when you request deletion of your information.

We may keep data longer if the law requires it or we need it for a legal claim.

For cookies, analytics, and session recordings, see our Cookie Notice.

7. Your rights

You have the right to:

  • access your personal data and get a copy
  • correct data that's wrong or incomplete
  • delete your data
  • restrict how we use your data
  • receive your data in a portable format
  • object to our use of your data based on legitimate interests
  • object to marketing at any time
  • withdraw your consent at any time, without affecting what we did before you withdrew

To exercise these rights, email privacy@cognition.ai. We may need to confirm your identity first. We'll respond within one month, which can be extended in some cases. If you use Devin through your organization, we may refer requests about your organization's content to them.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

8. Complaints

If you have concerns, please contact us first at privacy@cognition.ai. You also have the right to complain to a data protection authority, such as the one where you live or work. Our lead authority is the Irish Data Protection Commission (www.dataprotection.ie). If you’re in the UK, you can complain to the Information Commissioner's Office (ico.org.uk). If you’re in Switzerland, you can complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

9. Children

Devin isn't intended for anyone under 18, and we don't knowingly collect their data.

10. Changes to this notice

We are constantly trying to improve Devin, so we may need to update this Privacy Notice from time to time as well. We post any changes we make to this Privacy Notice on this page and post the date at the top. If the changes are significant, we'll tell you in advance, for example by email or in Devin.