Privacy

The short version

We store what you put into Deploy Desk so the app can work, and nothing more about you than that. We don't sell data, show ads, or run analytics or tracking scripts.

What we store

• Your account: your email address and a sign-in session cookie.
• Your projects: names, lore, notes, contract addresses, brand colours, uploaded images, stack items, costs and the project timeline.
• Mail: messages sent to your project domains, with attachments, and the replies you send.
• Helper conversations: what you ask and what it answers, until you delete them; plus a usage record per request (token counts and estimated cost) for your monthly allowance, which deleting a conversation doesn't remove.
• X: the connected account's handle and id, the posts you write or schedule, and the access tokens.
• Secrets: Porkbun keys, X tokens, your own X app's credentials and vault passwords are encrypted in Supabase Vault, read only by the server for the one job they're for, and never shown back in full.
• The access request form: your email, optional X handle, what you launch, your plan choice, your note, and a keyed hash of your IP address for rate limiting (the address itself isn't kept).

Who else sees it

Only the services that run the features you use, each for that job:

• Supabase hosts the database, sign-in and file storage; Vercel hosts the app.
• Mailgun receives and sends your project mail.
• Porkbun gets the domain requests you confirm, with your keys.
• DexScreener, GeckoTerminal, Helius and Etherscan get the contract addresses and dev wallets you track, never your account details.
• X, once the connector is live, gets the posts and images you send and your account's token.
• Anthropic, once the helper is live, gets each request: your question, the project's details and figures, and for an inbox summary, recent mail marked as untrusted. Credentials and vault passwords are never included.

While the helper and the X connector are in demo mode (labelled in the app), nothing is sent to Anthropic or X.

Who can read your data in Deploy Desk

You. Every table is locked to its owner in the database itself, so one account can't read another's projects, mail or conversations. Our operators can reach the database to run and fix the service, and only do so for that.

Keeping and deleting

Data stays until you delete it. Deleting a project deletes its records, files and timeline; deleting a conversation deletes its messages; disconnecting X or archiving a project deletes its X tokens. To delete your whole account, reply to your invitation email and we'll remove it and everything in it.

Cookies

One sign-in session cookie, and a short-lived one while you connect an X account. No advertising or analytics cookies.

Changes and contact

We'll update this page when what we store or who we share it with changes, and say so in the app. Questions or requests: reply to your early-access invitation email.