Privacy Policy

When you create a Dockfly account, we collect the information you provide directly: your name, email address, and authentication details (e.g., GitHub OAuth identity). We also collect data automatically when you use the service, including IP address, browser type, request timestamps, and usage events.

We use the information we collect to:

• Provide, operate, and maintain the Dockfly service.
• Bill you accurately and process payments.
• Send transactional emails (deploy notifications, billing receipts).
• Detect, prevent, and respond to security incidents and abuse.
• Improve the product based on aggregated usage patterns.

We do not read, scan, or otherwise inspect the contents of your services, databases, environment variables, or build artifacts. Your code and data are yours.

We share your information only with vendors that provide infrastructure critical to running Dockfly (cloud hosting, payment processing, email delivery). All vendors are bound by data processing agreements that mirror this policy. We do not sell your data, full stop.

We retain your account data for as long as your account is active. After you delete your account, we permanently remove your personal data within 30 days, except where retention is required for legal or accounting purposes (typically up to 7 years).

We use industry-standard practices to protect your data: TLS in transit, envelope encryption at rest, role-based access controls, and regular third-party security audits. Secrets you store in Dockfly are encrypted with per-tenant data keys and never logged.

We use session cookies to keep you signed in and a small number of functional cookies to remember your preferences. We do not use third-party advertising cookies.

You have the right to access, correct, export, and delete your personal data. You can do most of this from the dashboard's settings page; for anything else, email [email protected].

Dockfly is operated from Indonesia. Your data may be transferred to and processed in the regions where your services run (Singapore today, Frankfurt and US-East soon). We rely on standard contractual clauses for cross-border transfers.

We may update this policy from time to time. If we make material changes, we'll notify you by email and post a prominent notice on the dashboard before the changes take effect.

Questions about privacy? Email [email protected]. For account or billing questions, use [email protected].