This privacy policy for Deployment AI Inc ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

Visit our website at https://deployment.io, or any website of ours that links to this privacy policy
Use our application (https://app.deployment.io), or any other application of ours that links to this privacy policy
Connect to our API or MCP server through AI coding agents such as Claude Code, Cursor, or Windsurf
Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@deployment.io.

Summary of Key Points

What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with our Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?
We do not process sensitive personal information.

Do we receive any information from third parties?
If you sign up or log in using a third-party service (such as GitHub or Google), we may receive basic profile information (such as your name and email address) from that provider.

How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

How do we keep your information safe?
We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You may include: email addresses, names, passwords, and contact or authentication data. Payment information (such as credit card numbers) is collected and processed by our third-party payment processor and is not stored on our servers.

We also automatically collect certain information when you visit our Services, such as your IP address, browser and device characteristics, operating system, and information about how you use our Services.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, including:

To facilitate account creation and authentication
To deliver and facilitate delivery of services
To respond to user inquiries and offer support
To send you marketing and promotional communications (with consent)
To protect our Services
To identify usage trends

3. Do We Share Your Information?

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

Service Providers: We use third-party service providers to help us operate our Services, including cloud infrastructure providers, database hosting, analytics, and payment processing. These providers only access your data as needed to perform services on our behalf and are contractually obligated to protect it.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. API and MCP Server Data

When you connect to Deployment.io through our API or MCP (Model Context Protocol) server, including through AI coding agents such as Claude Code, Cursor, or Windsurf, we process the following data:

Authentication Data: OAuth tokens and API keys used to authenticate your requests. OAuth tokens are scoped to the permissions you approve and can be revoked at any time from your dashboard.
Tool Call Data: The parameters of each tool call (e.g., environment names, runner selections) are processed to execute the requested action. We do not have access to your full conversation history with AI agents — only the specific tool call parameters sent to our server.
Audit Logs: We log tool call metadata (tool name, timestamp, user ID, success/failure) for security and debugging purposes.

The MCP server is stateless — it does not retain session data between requests. All data transmitted to and from the MCP server is encrypted using HTTPS/TLS.

5. How Long Do We Keep Your Information?

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Account Data: Retained for as long as your account is active. When you delete your account, your personal data is deleted within a reasonable timeframe, except where we are required to retain it for legal or compliance purposes.
OAuth Tokens: Retained until you revoke access from your dashboard or the token expires.
API Keys: Retained until you delete them from your dashboard.
Audit Logs: Retained for a limited period for security and debugging purposes, after which they are automatically deleted.

6. Cookies and Tracking

We use the following technologies to understand how our Services are used:

Plausible Analytics: A privacy-friendly analytics tool that does not use cookies and does not collect personal data. It provides aggregate usage statistics only.
Google Tag Manager: Used to manage marketing and analytics tags on our website. You may opt out of Google's tracking by using browser privacy settings or the Google Analytics Opt-out Browser Add-on.

Our API and MCP server endpoints do not use cookies or tracking technologies.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct any inaccurate or incomplete personal information.
Deletion: Request that we delete your personal information, subject to legal retention requirements.
Portability: Request a copy of your data in a portable format.
Revoke Consent: Withdraw consent for marketing communications or OAuth-connected applications at any time.

To exercise any of these rights, contact us at privacy@deployment.io. We will respond to your request within 30 days.

8. International Data Transfers

Our company is incorporated in the United States. Your information may be transferred to, stored, and processed in locations where we or our service providers maintain facilities. By using our Services, you consent to the transfer and processing of your information in these locations, where data protection laws may differ from those in your jurisdiction.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have questions or comments about this policy, you may email us at privacy@deployment.io or contact us at:

Deployment AI Inc.
8 The Green, STE R
County of Kent, Dover, Delaware 19901

Privacy Policy