Privacy Policy

1. Overview

SupaDeploy.com ("SupaDeploy", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hosting services and website.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide

• Account information: name, email address, and password when you register
• Payment information: billing address and payment method details (processed securely by our payment provider; we do not store raw card data)
• Support communications: messages you send to our support team
• Deployment data: code and configuration you upload to our platform

Information Collected Automatically

• Usage data: pages visited, features used, and actions taken in the dashboard
• Log data: IP address, browser type, operating system, referring URLs, and timestamps
• Infrastructure metrics: CPU, memory, and network usage for your hosted applications
• Cookies and similar technologies: session identifiers and preference data

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain our hosting services
• Process payments and send billing-related communications
• Send transactional emails (account confirmation, invoices, SLA credit notices)
• Respond to support requests and troubleshoot issues
• Monitor and improve platform performance and reliability
• Detect, prevent, and address security incidents and abuse
• Comply with legal obligations
• Send product updates and announcements (you may opt out at any time)

We do not sell your personal data to third parties.

4. Sharing of Information

We may share your information with:

• Service providers: third-party vendors who assist in delivering our services (payment processors, infrastructure providers, email delivery services) under strict data processing agreements
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice to you
• Legal requirements: when required by law, court order, or government authority
• Protection of rights: to enforce our Terms of Service or protect the rights, property, or safety of SupaDeploy or others

We require all third parties to handle your data securely and only for the purposes we specify.

5. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: required for the platform to function (authentication sessions, CSRF protection)
• Analytics cookies: help us understand how users interact with the platform (we use privacy-respecting analytics)
• Preference cookies: remember your settings and choices

You can control cookies through your browser settings. Disabling essential cookies may prevent some features from working correctly.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained for the duration of your account plus 30 days after closure
• Billing records are retained for 7 years to comply with tax and accounting requirements
• Application logs are retained for 30 days
• Infrastructure metrics are retained for 90 days

You may request deletion of your personal data at any time, subject to legal retention requirements.

7. Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Access controls limiting employee access to customer data
• Regular security audits and vulnerability assessments
• Isolated execution environments for hosted applications

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If a breach occurs, we will notify affected users as required by law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal obligations)
• Portability: receive your data in a machine-readable format
• Objection: object to certain processing activities
• Opt-out: unsubscribe from marketing emails at any time via the link in each email

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant data protection authorities.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the dashboard at least 14 days before the changes take effect. Your continued use of the services after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

[email protected]