Privacy Policy
Last updated: June 2026
zdeploy.app is operated by Wizewerx Ltd, which is the data controller for your personal data. This policy applies to zdeploy.app and its subdomains.
Our principle
We collect the minimum data necessary to run zdeploy.app. We do not build behavioural profiles, and we do not sell your data. zdeploy.app hosts the apps you deploy — it does not read or analyse their traffic to build a picture of you or your users.
What we collect
Account data
When you sign up (via Google or LinkedIn OAuth, or email one-time code), we store: your name, email address, and avatar URL (provided by the OAuth provider or set manually). We also store your membership tier and account creation date.
Deployment data
When you deploy an app, we store what's needed to run and manage it — app name, configuration, environment variables you set, and deployment status/history. Application code you push is stored to build and run your app. This is your data; we hold it to operate the service on your behalf, and deleting an app removes its deployment data (see retention below).
Authentication data
We issue a session cookie (HTTP-only, encrypted) to keep you logged in. We issue a JWT (RS256, 1-hour expiry) for API requests. JWT tokens include a unique ID (JTI) that can be revoked individually.
Server logs
Our infrastructure logs HTTP request metadata (timestamp, HTTP status, response time) for operational monitoring. Logs do not include request bodies or user identifiers beyond what's needed to trace an error. Logs are retained for 7 days and then permanently deleted.
Payment data
We do not collect any payment data right now. Membership is free during launch. No payment information, card details, or billing data of any kind is collected or stored. If and when paid tiers open, this section will be updated before any payments are taken.
What we do not collect
- ✕Browsing history or click-through tracking
- ✕Tracking cookies or third-party analytics
- ✕Device fingerprinting
- ✕Location data
- ✕Behavioural profiles or advertising identifiers
Who we share data with
We do not sell, rent, or share your personal data with third parties for commercial purposes. We share data only as required to operate the service:
- •OAuth providers (Google, LinkedIn) — for authentication only. We receive your name, email, and avatar. We do not send data back.
- •Payment providers — none currently. No payments are taken during the launch period. This will be updated before any payment processing begins.
- •Legal requirements — we may disclose data if required by law.
Data retention
| Data type | Retention |
|---|---|
| Account data | Until you request deletion |
| Deployment data | Until you delete the app |
| Payment records | Not collected during launch period |
| Server logs | 7 days |
| Session cookies | 24 hours (rolling) |
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- •Access — request a copy of the personal data we hold about you
- •Rectification — correct inaccurate data
- •Erasure — request deletion of your data ("right to be forgotten")
- •Portability — receive your data in a structured, machine-readable format
- •Objection — object to processing based on legitimate interests
- •Withdrawal — withdraw consent at any time (applies to marketing emails only; we do not send marketing emails)
To exercise any of these rights, contact us at privacy@zdeploy.app. We will respond within 30 days.
Data controller
zdeploy.app is operated by Wizewerx Ltd (company number 06003824, registered in England and Wales, registered office 124 City Road, London, EC1V 2NX), which is the data controller for all personal data processed through this service. See our legal notice for full entity details.
For data protection inquiries:
privacy@zdeploy.app
If you believe your data has been handled unlawfully, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. EU/EEA residents may also complain to their local data protection authority.
Changes to this policy
We may update this policy as the service evolves. Substantial changes will be announced via email to registered users. The "last updated" date at the top always reflects the current version.