Privacy Policy
Last updated: August 12, 2026
This policy describes how BARALA KEBA ("we", the "Publisher"), the publisher of the App Deployer platform, collects, uses and protects your personal data when you use the Service.
1. Data we collect
- Account data: name, email address, password (hashed, never stored in plain text).
- Billing data: handled directly by our payment partner Paddle.com Market Limited — we never store your bank details.
- Configuration data: application, environment and deployment target names, environment variables (encrypted at rest), SSH connection credentials (encrypted at rest), webhook configuration.
- Activity logs: deployment history, output of commands executed (which may contain information you choose to print from your own scripts — avoid printing secrets in plain text there), audit log of actions performed on your workspace.
- Technical data: IP address, browser type, server logs, for security and diagnostic purposes.
2. Why we use it
- Provide, operate and maintain the Service (running the deployments you configure);
- Manage your account, subscription and billing through Paddle;
- Notify you of events related to your deployments (failure, status);
- Keep the platform secure and prevent abuse (rate limiting, webhook deduplication);
- Comply with our legal and regulatory obligations.
3. Legal basis for processing
Processing of your data relies on the performance of the contract between us (providing the Service), our legitimate interest (security, fraud prevention), and, where applicable, your consent (optional marketing communications).
4. Sharing your data
We never sell your personal data. It may be shared with:
- Paddle.com Market Limited, our official reseller, for processing payments and subscriptions;
- our hosting and infrastructure providers, to operate the Service technically;
- competent authorities, where required by law.
Your SSH credentials and encrypted environment variables are never shared with a third party and are only decrypted for the time strictly necessary to run a deployment you triggered.
5. Retention period
Your account data is kept as long as your account is active. If your account is deleted, your personal data is deleted or anonymized within a reasonable timeframe, subject to legal retention obligations (in particular accounting requirements).
6. Your rights
Depending on your jurisdiction (in particular if the General Data Protection Regulation — GDPR — applies to you), you have a right of access, rectification, erasure, restriction of processing, portability and objection regarding your personal data. You can exercise these rights by contacting us at privacy@app-deployer.dev.
7. Security
Passwords are hashed, server connection credentials and environment variables are encrypted at rest. Access to a workspace's resources is scoped by role. Despite these measures, no system is 100% infallible; in the event of a security incident affecting your data, we will notify you in accordance with applicable regulations.
8. Cookies
We use cookies strictly necessary for the Service to function (authentication session, cross-site request forgery protection). We do not use third-party advertising cookies.
9. Changes to this policy
This policy may be updated periodically. The date of the last update appears at the top of this page.
10. Contact
For any question about this policy or your personal data, contact us at privacy@app-deployer.dev.