Privacy and Data Policy

What we keep about you

• Your account: your email address, your password as a one-way hash (never the password itself), the public half of your passkeys, your two-factor settings and your plan.
• Signing in: a session cookie, and the API tokens you create. Both are stored only as hashes. We use the IP address you connect from to rate-limit sign-in attempts and to check that a new account is not being opened through Tor, and record it when you agree to these policies. Accounts cannot be opened with a throwaway inbox.
• Billing: if you subscribe, Stripe takes your card. We keep Stripe’s customer and subscription ids and the subscription’s status; we never see or store card numbers.
• Activity: a log of what is done to your apps — deploys, settings, members — with the email of the person who did it.
• Advertising and analytics: our website and dashboard use Google Analytics. If you arrive from a Google ad, the ad’s click id is kept in a cookie for 90 days and saved with your account when you sign up, so we can tell which ads bring people.

What we keep about your apps

• The code you push or upload, the images we build from it, and the build and deploy logs.
• Environment variables, encrypted at rest.
• Databases and other add-ons, persistent volumes, and the backups you schedule.
• Runtime logs, and metrics: CPU, memory, and per-minute request counts and response times. We do not keep the content of requests to your app.
• A screenshot of your app’s home page, shown in your dashboard — and on our public showcase only if you turn that on for the app.

The personal data your app keeps about its own users is yours to look after. We store and process it only to run your app, and do not look at it except where the abuse checks below read your app’s files.

How we look for abuse

To enforce the Fair Use Policy, apps are checked automatically when they are deployed and while they run:

• Our own checks read each app’s process list, the addresses it is connected to, and its files.
• Part of that review is done by a language model from OpenAI. It is sent the app’s name and how it starts, its process list, the addresses it is connected to, a listing of its files and short excerpts of some of them. Files that usually hold secrets (.env files, private keys, certificates, credential files) are never read, and values that look like passwords, tokens or keys are removed from the excerpts before they are sent. Your environment variables are not sent.
• When an account is suspended, we keep its record, email address included, and compare the addresses of new sign-ups with it to spot the same person coming back. A match is sent to us to look at; it never closes an account by itself.

Who helps us run DeployCloud

• DigitalOcean — the servers your apps and data run on, in New York, United States.
• Amazon Web Services — off-site copies of our backups (S3, United States).
• Stripe — payments.
• Twilio SendGrid — the emails we send you.
• OpenAI — the abuse review described above.
• Google — analytics and ad measurement.

We do not sell your data, and we do not share it with anyone else unless the law requires us to.

How long we keep it

• Your account and your apps: until you delete them. Deleting your account deletes its apps with their containers, images, add-ons, volumes and backups. The line in our activity log that records the deletion stays.
• A suspended account’s apps are stopped at once and deleted 7 days later. The account record stays, as described above.
• Off-site backups exist to recover the platform from a disaster. They are not used for anything else, and something deleted from the platform stays in them until those copies age out.

Your choices

• Change your email, password, passkeys and two-factor settings, or delete your account, from the Account page.
• Ask us for a copy of the data we hold about you, or to correct or delete it, at the address below.
• The session cookie is needed to sign in. Analytics and advertising cookies can be blocked in your browser without breaking anything.

Changes

When this policy changes in substance, you will be asked to agree to it again before you next deploy.

Contact

Questions, requests about your data, or a suspension you think is wrong: sales@devcloudsoftware.com. Write from the address on your account, so we know the request is yours.