Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including account information such as your name and email address; authentication records such as session and trusted-device identifiers; payment information such as billing details processed by Stripe; server configuration preferences; usage data related to your interaction with our services; and communications you send to us, including support requests, feedback, and inquiries. Dilmune uses passwordless authentication through WorkOS and GitHub OAuth and does not ask you to create a Dilmune password.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our cloud hosting services; process transactions and send related information such as purchase confirmations and invoices; send technical notices, updates, security alerts, and administrative messages; respond to your comments, questions, and customer service requests; monitor and analyze trends, usage, and activities in connection with our services; and detect, investigate, and prevent fraudulent transactions and other illegal activities.

3. Information Sharing and Disclosure

We may share your information with third-party cloud infrastructure providers, including DigitalOcean, Hetzner, and Vultr, as necessary to provision and manage your servers. We also use service providers such as WorkOS and GitHub for authentication, Stripe for payments, and PostHog for product analytics. We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

AI features

OpenAI is the provider for the features below. DeepSeek receives a request only when OpenAI cannot complete it. Refused or cancelled requests are not sent to DeepSeek.

• The SQL assistant ("Generate SQL" in the database query panel) sends your question and the names, data types, primary keys and foreign keys of your tables and columns, so the model can write a query. It does not send row data, credentials, connection strings, default values or row counts. Anything you type into the question is sent. The generated SQL fills the editor and never runs on its own.
• Muno, our AI assistant on web and mobile, sends your messages and the recent conversation history, with context about your active workspace: the name, ID, provider, region, size, IP address and status of your servers; the domain, type, status and associated server ID of your sites; the name, type, status and associated server ID of your databases; your plan; corrections saved to Muno's memory in that workspace by any member; the workspace's ten most recent activity entries; and the current page with the selected resource's identifiers, including workspace, app, server, site, database and associated server IDs. When Muno uses a tool to look something up for you, such as a server's logs, the result is sent too.
• Domain name suggestions send the domain you searched for when you ask for alternatives, so the model can propose them.

OpenAI states that it keeps API data in abuse monitoring logs for up to 30 days, unless longer retention is required by law or is reasonably necessary to protect its services or others from harm. We have not enabled zero data retention. OpenAI states that data sent to its API is not used to train or improve its models unless the customer opts in. We use OpenAI's default endpoint and have not chosen a data region, so we cannot name the country where a request is processed.

When OpenAI cannot complete an eligible request, DeepSeek receives it as the fallback. DeepSeek is a China-based company whose privacy policy says it stores personal data in the People's Republic of China. The policy gives no fixed retention period and lists model training as a use of personal data. We have not confirmed whether that use covers API requests.

4. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. All data transmitted between your browser and our servers is encrypted using TLS. We implement industry-standard security practices including encrypted storage of sensitive data, regular security audits, and access controls.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services, plus a reasonable period thereafter for backup, archival, fraud prevention, or legal purposes. You may request deletion of your data at any time by contacting our support team, and we will process your request in accordance with applicable laws.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access and receive a copy of your personal data; the right to correct inaccurate information; the right to request deletion of your data; the right to data portability; the right to object to certain processing of your data; and the right to withdraw consent at any time where processing is based on consent.

7. Cookies and Tracking

We use essential authentication cookies, local storage for preferences and authenticated product analytics, and memory-based analytics on the public website. For details about these technologies and your available controls, please see our Cookie Policy.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate steps to ensure that your personal information receives adequate protection in the jurisdictions in which we process it, including standard contractual clauses and other lawful transfer mechanisms.

9. Changes to This Policy

We may change this privacy policy from time to time. If we make material changes, we will notify you by email (sent to the address associated with your account) or by means of a prominent notice on our website prior to the change becoming effective. We encourage you to review this policy periodically for the latest information on our privacy practices.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us or email us at [email protected].