Privacy Policy

Last updated: December 2024

1. Overview

ZeroDeploy (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

Account Information

When you sign up via GitHub OAuth, we collect:

  • GitHub username
  • GitHub user ID
  • Email address (if public on GitHub)
  • Profile avatar URL

Deployed Content

We store the files you deploy to the Service. This content is stored on Cloudflare R2 and served via Cloudflare’s global network.

Usage Data

We automatically collect:

  • Deployment metadata (timestamps, file counts, sizes)
  • API request logs (for debugging and security)
  • Error logs (to improve the Service)

Payment Information

Payment processing is handled by Polar. We do not store your credit card details. Polar’s privacy policy applies to payment data.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process payments and manage subscriptions
  • Send service-related communications (deploy notifications, security alerts)
  • Respond to support requests
  • Detect and prevent abuse, fraud, and security issues
  • Improve the Service and develop new features

We do NOT sell your personal information to third parties. We do NOT use your data for advertising purposes.

4. Data Sharing

We share data only with:

  • Cloudflare — Infrastructure provider (hosting, CDN, database)
  • Polar — Payment processing
  • GitHub — Authentication provider

We may also disclose information if required by law or to protect our rights and safety.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete all associated data including:

  • Account information
  • Organizations and sites
  • All deployed files and assets
  • Deploy tokens and custom domains

Some data may be retained in backups for up to 30 days after deletion. Anonymized, aggregated data may be retained indefinitely for analytics.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access — Request a copy of your personal data
  • Rectification — Correct inaccurate personal data
  • Erasure — Delete your account and all data (zerodeploy account delete)
  • Portability — Export your data in a machine-readable format
  • Objection — Object to certain processing of your data

To exercise these rights, contact us at privacy@zerodeploy.dev.

7. Data Security

We protect your data using:

  • HTTPS encryption for all connections
  • Secure token-based authentication (JWT)
  • Hashed deploy tokens (never stored in plain text)
  • Cloudflare’s enterprise-grade infrastructure security

While we implement reasonable security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

8. Cookies

The ZeroDeploy website and dashboard use minimal cookies for essential functionality only. We do not use tracking cookies or third-party analytics.

9. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

10. International Transfers

Your data may be processed and stored in various locations worldwide through Cloudflare’s global network. By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@zerodeploy.dev.