Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including account information such as your name and email address; authentication records such as session and trusted-device identifiers; payment information such as billing details processed by Stripe; server configuration preferences; usage data related to your interaction with our services; and communications you send to us, including support requests, feedback, and inquiries. Dilmune uses passwordless authentication through WorkOS and GitHub OAuth and does not ask you to create a Dilmune password.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our cloud hosting services; process transactions and send related information such as purchase confirmations and invoices; send technical notices, updates, security alerts, and administrative messages; respond to your comments, questions, and customer service requests; monitor and analyze trends, usage, and activities in connection with our services; and detect, investigate, and prevent fraudulent transactions and other illegal activities.

3. Information Sharing and Disclosure

We may share your information with third-party cloud infrastructure providers, including DigitalOcean, Hetzner, and Vultr, as necessary to provision and manage your servers. We also use service providers such as WorkOS and GitHub for authentication, Stripe for payments, and PostHog for product analytics. We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. All data transmitted between your browser and our servers is encrypted using TLS. We implement industry-standard security practices including encrypted storage of sensitive data, regular security audits, and access controls.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services, plus a reasonable period thereafter for backup, archival, fraud prevention, or legal purposes. You may request deletion of your data at any time by contacting our support team, and we will process your request in accordance with applicable laws.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access and receive a copy of your personal data; the right to correct inaccurate information; the right to request deletion of your data; the right to data portability; the right to object to certain processing of your data; and the right to withdraw consent at any time where processing is based on consent.

7. Cookies and Tracking

We use essential authentication cookies, local storage for preferences and authenticated product analytics, and memory-based analytics on the public website. For details about these technologies and your available controls, please see our Cookie Policy.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate steps to ensure that your personal information receives adequate protection in the jurisdictions in which we process it, including standard contractual clauses and other lawful transfer mechanisms.

9. Changes to This Policy

We may change this privacy policy from time to time. If we make material changes, we will notify you by email (sent to the address associated with your account) or by means of a prominent notice on our website prior to the change becoming effective. We encourage you to review this policy periodically for the latest information on our privacy practices.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us or email us at [email protected].