What we collect
- Account details: your name, email address, a hashed password, your two-step sign-in settings, and the workspaces you belong to.
- Your apps: the code Claude pushes, each version's message, and the prompts from your conversation that you or Claude choose to attach to a version.
- Usage: per-app request counts, data transfer, database and file sizes, and the number of people who signed in to each app, counted per hour.
- Activity: a log of changes in your workspace (who did what, when, and from which IP address).
- Billing: handled by Stripe. We keep your Stripe customer ID and what you're subscribed to, never your card number.
How we use it
To run &Deploy for you: hosting and building your apps, signing you in, showing usage and suggesting sizes, billing, keeping the service secure, and contacting you about your account. We don't sell your information, and we don't use your apps or prompts to train AI models.
Who we share it with
Only the providers we need to run the service, each for a specific purpose:
| Provider | What for | What they receive |
|---|---|---|
| Akamai Cloud (Linode) | Hosting, databases, files, DNS | Your apps and their data |
| Stripe | Payments and invoices | Workspace name, owner email, billing details |
| Postmark | Email from &Deploy and your apps | Email addresses and message content |
| Anthropic | Working out how to build a pushed app, and writing price explanations | A list of your app's file names and its build settings files (such as package.json) |
| OSV.dev (Google) | Checking dependencies for known vulnerabilities | The names and versions of your app's packages |
We may also disclose information if the law requires it.
Your apps' users
When people use an app you host on &Deploy, you decide what data the app collects, and you're responsible for telling them. We process that data on your behalf, only to run your app. Their sign-ins are stored in your app's own database, separate from &Deploy accounts.
How long we keep it
Account information is kept while your account is open. App data is kept until you delete the app, then for 30 days before permanent removal. The activity log is kept for the life of the workspace.
Security
Passwords are hashed; secrets, database passwords and keys are encrypted at rest; all traffic uses HTTPS. See Security for more.
Your choices
You can update your details, disconnect Claude, delete apps and close your account at any time. To get a copy of your data or ask a privacy question, contact us.