Privacy Policy
Last updated: 25 October 2026
Deploybot (deploybot.dev, with the console at console.deploybot.dev) lets you catalog, deploy and watch services on hosts you run yourself. Deploybot is run by an individual based in New Zealand, who is responsible for your personal information under the New Zealand Privacy Act 2020. This policy explains what we collect, why, and who processes it. Questions go to support@deploybot.dev.
What we collect
- Account details. When you sign in with Google we receive your name, email address and Google account ID. We do not get your Google password.
- Projects and members. The projects you create or join and who is a member of each.
- What your hosts send. The agents on the hosts you enrol send host metrics, process lists and the services they discover.
- What you configure. Catalog entries, env sets, files and registry credentials. Secret values are encrypted at rest.
- History. Deploy history and an audit log of actions in your projects.
- Technical data. A session cookie that keeps you signed in, a cookie that remembers your theme preference, and request logs kept to run and secure the service.
We do not use advertising or tracking cookies, we do not sell your data, and we do not build profiles of you for anyone else.
Deploybot is not meant for anyone under 16, and we do not knowingly collect personal information from them. If you believe someone under 16 has an account, email support@deploybot.dev and we will delete it as described below.
How we use it
- To run the service: sign-in, your projects, and the deploys and monitoring you ask for.
- To keep the service secure.
- To find and fix problems.
AI agents
Deploybot itself calls no AI service. If you connect an AI agent or other MCP client, it acts with your own access, and what it reads or changes is up to you and that client.
Who processes your data
- HostUS provides the server that runs Deploybot and stores its database.
- Google provides Google sign-in.
- Your own hosts run the agent and receive what you deploy to them, including the env sets, files and credentials those deploys need.
Your data is stored and processed in the United States, which may be outside your country. Google sign-in may process data in other regions.
How long we keep it
We keep your data for as long as your account or the project it belongs to exists. To delete your account, email us from the address on the account and we will do so within 30 days. Deleted data can remain in database backups and server logs for up to 30 more days before it is overwritten.
Your rights
- You can view and edit your projects and settings in the console.
- You can ask for a copy of your personal information, a correction or its deletion by emailing support@deploybot.dev.
- If you are not happy with how we handle your information, you can complain to the Office of the Privacy Commissioner in New Zealand.
Changes
If we change this policy, we will post the new version on this page with a new date.