Privacy Policy
Effective Date: February 18, 2025
1. Introduction
Deplyr Corp ("Deplyr," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our services ("Services"). By accessing the Services, you agree to the practices described below.
2. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account Data | Name, email, job title/function, intended use | Create & manage your account |
| Billing Data | Payment-method details (handled by PCI-compliant provider) | Process subscriptions |
| Integration Data | Google user data (Sheets, OAuth) Xero, HubSpot, QuickBooks, Airtable data (if you connect) | Provide requested integrations & user-facing features |
| Usage Data | Log files, device/browser info, IP address | Operate, secure & improve the Services |
Google user data compliance. Deplyr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (including "Limited Use"). We never use Google data for advertising or disclose it except as needed to run the Services.
3. How We Use Your Information
- Provide, operate, and maintain the Services (including integrations with Google, Xero, HubSpot, QuickBooks, Airtable, Railway, AWS, and Cloudflare).
- Communicate with you about feature updates, beta invitations, billing, and support.
- Understand aggregate usage to improve performance and reliability.
No data sales: we never sell or rent Personal Data to third parties.
3.1 Automated decision-making
Deplyr does not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.
4. Legal Basis for Processing
We process Personal Data only with your consent or when otherwise lawful. You may withdraw consent at any time by emailing compliance@deplyr.com.
5. How and Why We Share Your Information
We share data solely to deliver the Services or comply with law:
- Service Providers — vetted vendors that help us send communications, host infrastructure, and process payments (see §5.1).
- Legal Requirements — when necessary to meet legal obligations or defend our rights.
5.1 Sub-processors
| Sub-processor | Purpose |
|---|---|
| Google LLC | User authentication (OAuth) and optional Google Sheets integration |
| Railway | Hosting of Deplyr application servers and databases |
| Amazon Web Services, Inc. | Cloud infrastructure supporting user-generated tools and storage |
| Cloudflare, Inc. | Global edge caching, TLS termination, and traffic acceleration |
Only the minimum data required for each function is shared.
6. Data Security
- Encryption. All Personal Data is encrypted in transit (TLS 1.2+) and at rest within our cloud providers.
- US data residency. All primary production data stores reside within the United States; no production data is stored outside the US.
- Breach notification. If a data breach occurs, we will notify affected users and regulators within 72 hours of discovery.
6.1 Responsible Disclosure
Security researchers may report vulnerabilities to security@deplyr.com. We operate a responsible-disclosure (bug-bounty) program and investigate all valid reports promptly.
7. Data Retention
| Scenario | Retention Rule |
|---|---|
| Active account | We keep data for the life of the account. |
| Account deletion | Basic contact details archived unless you request full deletion. |
| Back-ups | Encrypted, rotating backups kept only for disaster-recovery cycles. |
Google-derived (or other integration-derived) data is retained only as long as needed to provide the integration. You may request deletion at any time via compliance@deplyr.com.
8. Your Rights
| Right | What it means | SLA |
|---|---|---|
| Access | Obtain a copy of your Personal Data | 30 days |
| Correction | Fix inaccurate or incomplete data | 30 days |
| Deletion | Ask us to erase your data | 30 days |
| Withdraw Consent | Opt-out of marketing or integrations | Immediate |
Contact compliance@deplyr.com to exercise any right.
9. Cookies & Tracking
Deplyr uses cookies strictly for essential authentication and performance. We do not deploy third-party advertising or cross-site tracking cookies.
10. Third-Party Links
Our site or communications may link to external websites. Their privacy practices are independent of Deplyr; please review their policies before providing data.
11. Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect information from them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced at least 30 days in advance via email and in-app notice. The "Effective Date" above will always reflect the latest version.
13. Contact Us
Questions or concerns? Email compliance@deplyr.com.