Privacy Policy

1. Introduction

Deployara is operated by Florida Logic Studio LLC, a Florida limited liability company. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI assistant platform at deployara.vercel.app and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and an optional display name. Passwords are hashed using bcrypt and never stored in plain text.

Payment Information

Payments are processed by Stripe, Inc. We do not store your full credit card number, CVV, or other sensitive payment details. We only receive and store a reference to your Stripe customer ID for subscription management.

Usage Data

We collect information about how you use the Service, including:

• Chat messages sent to your AI agents
• Agent configurations and system prompts
• AI responses generated for you
• Timestamps and session information

Technical Information

We automatically collect certain technical information including IP address (via Cloudflare), browser type, device information, and referring URLs. We use a single HTTP-only session cookie for authentication purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Send transactional emails (receipts, password resets, security alerts)
• Respond to your support requests and inquiries
• Improve and optimize the Service
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations

4. Bring Your Own Key (BYOK) Model

Deployara operates on a BYOK model for AI providers. This means:

• You provide your own API keys for OpenAI, Anthropic, Google, or other AI providers
• Your API keys are encrypted at rest and only used to route requests on your behalf
• We do not have access to your AI provider accounts or billing
• You maintain full control over your AI usage and associated costs
• AI requests go directly from our servers to your chosen provider

5. Data Storage and Security

Your data is stored on secure cloud infrastructure in the United States. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for sensitive data
• Secure password hashing using bcrypt
• Regular security audits and monitoring
• Access controls and authentication

While we implement robust security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users within 72 hours of discovering any data breach.

6. What We Do NOT Do

We are committed to your privacy. We do NOT:

• Use tracking cookies or analytics pixels
• Deploy advertising IDs or social media trackers
• Sell, rent, or trade your personal information
• Share your data with third parties for marketing purposes
• Use your data to train, fine-tune, or improve AI models
• Access or read your chat conversations except for technical support when you request it

7. Third-Party Services

We use the following third-party services:

• Stripe - Payment processing (PCI-DSS Level 1 compliant)
• Cloudflare - DNS, CDN, and DDoS protection
• Resend - Transactional email delivery
• Neon - PostgreSQL database hosting
• Vercel - Frontend hosting
• Railway - API hosting

Each of these providers has their own privacy policy governing their handling of data.

8. Data Retention

• Active accounts: Data retained while your account is active
• After cancellation: Account data deleted within 30 days
• Payment records: Retained for 7 years per IRS requirements
• Security logs: Retained for 90 days

You may request immediate deletion of your data at any time by contacting us.

9. Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Correction - Request correction of inaccurate data
• Deletion - Request deletion of your data
• Export - Receive your data in a portable format
• Opt-out - Unsubscribe from non-essential communications

To exercise these rights, email us at privacy@deployara.vercel.app or use the account settings in your dashboard.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected
• Right to know if your data is sold or disclosed and to whom
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. International Users

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to such transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification to registered users.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: