DotDeployer

DotDeployer Privacy Policy

Last updated: September 12, 2026

Version 1.0, effective 2026-09-12

DotDeployer is operated by Seller Tally LLC, a Wyoming limited liability company in Cheyenne, Wyoming (“DotDeployer”, “we”, “us”). This policy explains what we collect when you use the website at dotdeployer.com, the application at app.dotdeployer.com and its API (together, the “Service”), why we collect it, who we share it with, and the choices you have. It is written to be read; if something is unclear, email [email protected] and we will answer plainly.

1. The short version

  • We store what we need to run your account and operate the servers you connect: your sign-in identity, billing status, the credentials you give us for your cloud provider and repositories, the configuration of your servers and sites, and the logs of the jobs we run for you.
  • Secrets (provider tokens, SSH keys, environment variables, database passwords, storage keys) are encrypted before they are stored and are only decrypted to do the thing you asked for.
  • We do not sell your data, we do not run advertising, and our website analytics do not use cookies or identify you.
  • Your servers belong to you and stay in your own cloud account. We reach them over SSH only.
  • You can export or delete your data at any time by deleting your account or emailing us.

2. What we collect and why

Account data. When you sign in with Google, GitHub or an email address, our authentication provider (Google Firebase Authentication) gives us your email address, display name, a unique user ID and the sign-in method. We keep the time of each sign-in. We need this to know who you are, to send you the notifications you turned on, and to secure your account.

Billing data. Payments are processed by Stripe. We store your Stripe customer ID, your plan, subscription status and dates, and invoices’ metadata. Card numbers never reach our systems; Stripe holds them under its own privacy policy.

Infrastructure credentials. To provision and manage servers on your behalf you give us an API token for your cloud provider (Hetzner, DigitalOcean, Vultr, Akamai/Linode, Amazon Web Services) or, for a server you already own, its IP address and root SSH access. We generate an SSH key pair per account to reach your servers, and we store the public keys you add for yourself. If you attach object storage for backups, we store that access key. Every one of these is encrypted at rest with a key that is not stored in the database and is decrypted only inside the job that needs it.

Repository access. When you install the DotDeployer GitHub App, GitHub tells us the installation ID and the repositories you selected. We read the repository to build and deploy it and we receive push webhooks to trigger deployments. We do not keep a copy of your source code beyond the build that runs on your own server.

Server and site configuration. Server names, providers, regions, IP addresses, operating system version, installed packages summary, firewall rules, daemons, scheduled commands, sites, domains, branches, environment variables (encrypted), redirects, security rules (passwords encrypted), database names and generated database credentials (encrypted), alert rules, recipes you write, and team membership and roles.

Operational data. The log of each job we run (provisioning, deployments, backups, recipes, health checks), its output, timing and result; server metrics (CPU, memory, disk) collected by health checks; notifications we generated for you and whether they were emailed.

Support and contact. Emails you send to [email protected] and messages from the website contact form, with your email address so we can reply.

Website analytics. The website uses Cloudflare Web Analytics, which does not use cookies, does not fingerprint visitors and does not track you across sites. The application stores your sign-in session and your theme preference in your browser’s local storage; it sets no advertising or tracking cookies.

We do not collect data about the users of the applications you deploy; your application’s data lives on your server and is yours.

3. How we use it

To provide the Service (provisioning, deploying, monitoring and backing up on your instruction); to bill you; to notify you about jobs, alerts and account matters you opted into; to answer support requests; to secure the Service and detect abuse; to understand aggregate usage of the website; and to comply with law. We do not use your data to train machine-learning models and we do not profile you for advertising.

4. Who we share it with

We share data only with the providers that make the Service work, each bound to use it only for that purpose:

  • Google Firebase Authentication — sign-in identity.
  • Stripe — payments and invoices.
  • Resend — transactional email (job notifications, alerts, team invites, account emails).
  • Neon — hosting of our own database, where your account and configuration data lives.
  • MonsterASP and Cloudflare — hosting of the API and website, DNS and email routing.
  • GitHub — repository access through the DotDeployer GitHub App.
  • Your cloud provider — we send API calls carrying the token you gave us to create, configure and destroy servers in your account, and we connect to those servers over SSH.
  • Your object-storage provider — backups are written to the bucket you configured. We may disclose data if required by law or to protect the rights, safety or property of DotDeployer, our customers or the public. If Seller Tally LLC sells or transfers the DotDeployer business, your data may transfer with it; we will notify you by email before that happens. We do not sell personal information and have not done so.

5. Where it is stored

Our systems and sub-processors are in the United States. Your servers are wherever you chose to create them with your provider. If you use the Service from outside the United States, you are sending your data to the United States, where privacy law may differ from your country’s.

6. How long we keep it

  • Account, configuration and credentials: while your account exists. When you delete your account, or your subscription has been cancelled for 30 days, we delete stored credentials immediately and the rest of your account data within 30 days.
  • Job logs and metrics: while your account exists; we may delete logs and metrics older than 90 days.
  • Billing records: as long as tax and accounting law requires (typically seven years), held primarily by Stripe.
  • Support emails: three years. Deleting your DotDeployer account does not delete your servers, databases or backups — they remain in your own provider accounts, under your control, and keep running.

7. Your rights and choices

Wherever you live, you can: see the data we hold about you, get a copy of it, correct it, delete it, and object to or restrict processing that is not needed to provide the Service. Most of it is visible and editable inside the application; for anything else email [email protected] from the address on your account and we will respond within 30 days. You can disconnect a provider, revoke the GitHub App, remove an SSH key or delete a server at any time from the dashboard, and you can revoke our access on the provider’s side too. If you are in the European Economic Area, the United Kingdom or Switzerland, Seller Tally LLC is the controller of your account data and a processor of the data in your servers; our legal bases are performance of our contract with you, our legitimate interest in running and securing the Service, and consent where you turned something on. You may complain to your local supervisory authority. If you are a California resident, the rights above cover the access, deletion, correction and non-discrimination rights of the CCPA/CPRA; we do not sell or share personal information as those terms are defined there.

8. Security

Secrets are encrypted at rest; traffic between your browser, our API and your servers uses TLS or SSH; database ports on your servers are never opened to the public internet by us; access to our production systems is limited to the people who operate the Service. No system is perfectly secure — if we learn of a breach affecting your data we will tell you without undue delay.

9. Children

The Service is for adults running software businesses and projects. It is not directed at anyone under 18, and we do not knowingly collect data from them.

10. Changes to this policy

When we change this policy we will update the date at the top and, for material changes, email account holders before the change takes effect. Continued use after that date means you accept the updated policy.

11. Contact

Seller Tally LLC · Cheyenne, Wyoming, USA · [email protected]