PrivacyPolicy.

1. Data we collect

• Account data: your name, email address, password hash, and — if you sign in or deploy with GitHub — your GitHub username and the repository access you grant.
• Workspace data: projects, environment variables, domains, team members and settings you create in the dashboard or CLI.
• Hosted content: the code, container images, databases and files you deploy. We process this only to run the Services for you.
• Usage and log data: deploy and runtime logs, resource usage, IP addresses, browser and device information, and timestamps.
• Billing data: plan, invoices and billing address. Card details are collected and stored by Paddle, our merchant of record — we never see your card number.

2. How we use it

• To provide the Services: building and running your apps, provisioning databases, issuing TLS certificates and routing traffic.
• To secure the platform: preventing fraud, abuse and violations of our Acceptable Use Policy.
• To communicate with you: service notices, security alerts, billing messages and support replies.
• To improve the Services: aggregated, de-identified analytics about how features are used.

We do not sell your personal data, and we do not use your hosted content to train AI models.

3. Who we share it with

We share personal data only with service providers that help us run DockHosting, under contracts that limit their use of it:

• Paddle: payment processing, invoicing and tax compliance.
• Infrastructure providers: the data centers and networks that host your apps and databases.
• Let's Encrypt: the domain names you add, so we can issue TLS certificates.
• GitHub: when you connect a repository, to read the code you choose to deploy.

We may also disclose data when required by law, or to protect the rights and safety of our users and the platform.

4. Cookies

We use essential cookies to keep you signed in and to secure your session. We do not use advertising cookies.

5. Retention

We keep account and workspace data while your account is active. When you delete a project, database or account, the related data is deleted from our systems within a reasonable period, except where we must keep records (for example invoices) to meet legal obligations.

6. Security

Traffic to the Services is encrypted with TLS, databases are reachable only over a private network by default, and access to production systems is restricted. No system is perfectly secure — see section 5 of our Terms of Service for your responsibilities.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can manage most data from the dashboard; for anything else, email legal@dockhosting.dev.

8. Changes

We may update this policy from time to time. We will notify you of significant changes by email or dashboard notification before they take effect.