Privacy Policy

Information We Collect

Account Information

When you create an account, we collect:

• Email address — For authentication and essential communications
• Display name (optional) — How you want to be identified
• Password — Securely hashed, never stored in plain text

Application Data

To provide the service, we store:

• Application configurations — Names, environments, deployment settings
• Repository information — GitHub repository URLs you connect
• Deployment logs — For troubleshooting and monitoring
• Usage metrics — Number of apps, deployments, API calls (aggregated, not granular user tracking)

Technical Information

For security and reliability:

• IP addresses — To prevent abuse and secure your account
• Session data — To keep you logged in securely
• Error logs — To diagnose and fix issues

How We Use Your Information

We use your data exclusively to:

• Provide the service — Deploy, manage, and monitor your applications
• Authenticate you — Verify your identity and maintain secure sessions
• Communicate — Send essential updates, security alerts, and support responses
• Improve reliability — Debug issues, optimize performance, and prevent abuse
• Comply with law — Meet legal obligations when required

We do not:

• Sell your data to third parties
• Use your data for advertising
• Share your data with data brokers
• Train AI models on your private repositories or code

Data Sharing & Third Parties

Service Providers

We use trusted third-party services to operate ViberSpace:

• Hosting infrastructure — Your apps run on secure cloud providers (Fly.io)
• Email delivery — For authentication codes and essential notifications
• GitHub — When you connect repositories, we interact with GitHub's API using OAuth

These providers are contractually obligated to protect your data and use it only for providing their services.

Legal Requirements

We may disclose data if required by law, court order, or to protect rights, property, or safety.

Data Security

We implement industry-standard security measures:

• Encryption in transit — All data transmission uses TLS/HTTPS
• Encryption at rest — Sensitive data is encrypted in databases
• Password security — Passwords are hashed using bcrypt
• Access controls — Strict employee access policies and audit logs
• Regular updates — Security patches applied promptly

While we take security seriously, no system is 100% secure. If you discover a vulnerability, please report it responsibly.

Your Rights & Controls

You have full control over your data:

• Access — Request a copy of all data we hold about you
• Correction — Update or correct inaccurate information
• Deletion — Delete your account and associated data at any time
• Export — Download your data in a portable format
• Opt-out — Unsubscribe from non-essential emails

To exercise these rights, contact us at the email below.

Data Retention

We retain data only as long as necessary:

• Active accounts — Data kept while your account is active
• Deleted accounts — Most data deleted within 30 days; some logs retained for 90 days for security
• Legal holds — Data preserved if required by law or ongoing investigation

Cookies & Tracking

We use minimal cookies:

• Session cookie — Keeps you logged in (essential, cannot be disabled)
• CSRF token — Protects against cross-site request forgery (security, cannot be disabled)

We do not use analytics cookies, advertising cookies, or third-party tracking scripts.

Children's Privacy

ViberSpace is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately.

International Data Transfers

ViberSpace operates globally. Your data may be processed in countries outside your residence. We ensure adequate safeguards are in place for international transfers.

Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email or a prominent notice on the platform.

Continued use of ViberSpace after changes constitutes acceptance of the updated policy.