At Pushify, the security of your personal data is important to us. This Privacy Policy explains the information we collect when you use Pushify, how we use it, and your rights.

1. Information We Collect

1.1. Account Information

When you create an account we collect:

Name and email address
Password (hashed irreversibly)
Profile picture (optional)
Identity information from GitHub or Google when you sign in via OAuth

1.2. Payment Information

Payments are processed through our PCI-DSS compliant payment provider. Your card details are never stored on our servers — they are handled directly by the provider. We only store the payment status, subscription tier, and billing history.

1.3. Usage Data

IP address, browser type, and device information
Deployment history and activity logs
Error and performance data
Server, project, and database usage metrics

2. How We Use Your Information

To provide and maintain the service
To manage your account and authenticate you
To process payments
To provide customer support
To improve the service and fix bugs
To meet our legal obligations

3. Who We Share Your Information With

We do not sell your personal data. Information is only shared with providers strictly required to deliver the service:

Payment processor — for billing and subscription management
Hetzner Cloud — server infrastructure (only when you opt in)
Anthropic — AI Assistant feature (only the messages you explicitly send)
Legal authorities — only when legally required

4. Data Retention

While your account is active, your data is retained. When you delete your account:

Profile and account data are deleted within 30 days
Activity logs are deleted within 90 days
Invoice and payment records are retained for 10 years (legal obligation)
Data temporarily present in backups is purged within 60 days

5. Cookies

Our site uses cookies for session management, preference memory, and security. We do not use third-party advertising cookies. You can manage cookies via your browser settings.

6. Data Security

All connections are encrypted with HTTPS / TLS 1.3
Passwords are hashed with bcrypt
SSH private keys are stored encrypted with AES-256
Regular security audits and penetration tests
Our servers are hosted in ISO 27001 certified data centers

7. Your Rights (GDPR / KVKK)

Under applicable data protection laws you have the right to:

Know whether your personal data is being processed
Request a copy of your processed data
Ask for correction, deletion, or destruction of your data
Object to automated decision-making based on your data
Request data portability

To exercise these rights please contact support@pushify.dev.

8. Children's Privacy

Pushify is not directed to people under 18. We do not knowingly collect data from users under 18.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified by email, and the update date appears at the top of the page.

10. Contact

For all privacy-related questions: support@pushify.dev