Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Email address, password (hashed), and account preferences
• Usage Data: Information about how you use the Service, including instance deployments and configurations
• Technical Data: IP addresses, browser type, device information, and access logs
• Payment Information: Processed and stored by our payment provider, Dodo Payments

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process your subscription and manage billing
• Deploy and manage VPS instances on your behalf
• Communicate with you about the Service, updates, and support
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats

3. Data Storage and Security

Your account data is stored securely in our PostgreSQL database. Passwords are hashed using industry-standard bcrypt encryption. We use JWT tokens for authentication, stored in your browser's local storage. We implement reasonable security measures to protect your data, but no method of transmission over the internet is 100% secure.

4. Third-Party Services

We use the following third-party services:

• Hetzner Cloud & OVHcloud: VPS hosting providers where your instances are deployed
• Dodo Payments: Payment processing for subscriptions

These services have their own privacy policies governing the data they collect and process.

5. Your VPS Data

Data stored on your deployed VPS instances is under your control. We do not access, monitor, or store the content of your VPS instances unless required for technical support with your explicit permission.

Important: All AI model prompts, responses, and any data processed by your bot stay on your VPS. We never see, log, or have access to your bot's conversations or outputs. This is a core privacy feature of self-hosted deployment.

You are responsible for the data you store on your instances and ensuring compliance with applicable data protection laws.

6. Cookies and Tracking

We use JWT tokens stored in local storage for authentication. We do not use third-party tracking cookies for advertising purposes. We may use essential cookies for Service functionality and analytics to improve user experience.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we may retain certain information for legal and accounting purposes. You can request deletion of your account data by contacting support.

8. Your Rights

You have the right to:

• Access and review your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the Service. Your continued use after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us through our support channels.