Privacy Policy

Selfhost.dev ("Selfhost.dev", "Company", "we", "our" or "us") is committed to protecting your privacy and handling personal data in a transparent and secure manner.

This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you access or use the Selfhost.dev website, dashboard, APIs and related services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy.

1. Scope of This Policy

This Privacy Policy describes how your personal information is collected, used and shared when you visit, subscribe, register or make a purchase from https://selfhost.dev (the "Site"). This policy applies to:

• Visitors to our website
• Individuals who create accounts
• Customers and their authorised users
• Individuals who communicate with us

This Policy does not apply to data processed by our customers within their own hosted environments. In those cases, the customer acts as the data controller.

2. Information We Collect

2.1 Account Information

• Name
• Email address
• Company name
• Billing address
• Phone number (if provided)
• Account credentials

2.2 Billing & Payment Information

Payment information is processed securely via third-party payment providers. Selfhost.dev does not store full credit card details.

2.3 Usage Data

• IP address, including the address an account was created from
• Browser type and device information
• A random identifier the dashboard keeps in your browser and sends with each request
• Operating system
• Log files
• Session activity
• Dashboard interaction data
• API usage metrics

2.4 Support Communications

When you contact support, we may collect:

• Message content
• Attachments
• Diagnostic logs you choose to share

2.5 Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain sessions
• Analyse usage
• Improve platform performance
• Ensure security

You may disable cookies in your browser settings; however, certain features may not function properly.

3. How We Use Information

We use collected information to:

• Provide and maintain the Services
• Authenticate users
• Process payments
• Improve product performance
• Monitor infrastructure reliability
• Detect and prevent fraud or abuse, such as one person creating several accounts to receive the welcome credit again. For this we compare the network, browser and identifier accounts were created from
• Provide customer support
• Comply with legal obligations
• Communicate service updates

We do not sell personal data.

4. Customer Data Processing

Selfhost.dev primarily acts as a Data Processor when processing personal data contained within Customer Data. In such cases:

• The Customer is the Data Controller
• Processing occurs solely under the Customer's instructions
• Data is used only to provide the Services

A Data Processing Addendum (DPA) may apply where legally required.

5. AI Features

Two features in the console use third-party AI models. Ask AI is the console's assistant. Talk to Database answers questions about the data in a managed PostgreSQL database. Deploys from GitHub can also use one when our own checks cannot tell how to build a repository. This section says what each of them sends to an AI model provider, what it never sends and how long we keep what it stores.

5.1 Ask AI

• When you send a message, the sentence you typed (500 characters at most) and a short description of where you are in the console go to an AI model provider, which works out what you are asking. The description is the kind of page you are on and a few yes-or-no facts, such as whether your organisation has projects or databases. It never includes the names or IDs of your resources.
• The sentence can also go to a second AI model provider when the first cannot work out what you mean or when no screen in the console answers your question. In the second case it writes a short general answer, marked "Written by AI". We do not store those answers.
• Greetings and thanks are answered in your browser and are not sent.
• Prices, your balance, the status of your resources and anything else from your account are never sent. The console works those answers out in your browser, from the same data its pages show you.
• We use what you type to answer you and to improve how the assistant understands requests. We store each sentence encrypted and erase it after 90 days. A record of how the assistant handled it, such as the cards it offered and the one you chose, is kept for up to 365 days and then deleted.
• The conversation is also kept in your browser, for your account and organisation, until you start a new chat or sign out. Your browser drops it after 7 days unused.

5.2 Talk to Database

• Talk to Database works only on managed PostgreSQL databases. Only owners and admins of an organisation can use it. Selfhost.dev staff cannot use it on your databases.
• To write a starter file, we read your database's table and column names, column types, keys, enum labels and estimated row counts. We never read a row. No AI model is involved in this step. We delete that copy of your schema after 7 days.
• We store the file you approve, with its earlier versions.
• For each question, an AI model provider receives your question, the names, descriptions, value labels and instructions in your approved file, today's date and, for a follow-up, the names chosen for the previous answer. It returns which names in the file answer the question. Our code writes the SQL from those names.
• An AI model provider never receives rows, results, the SQL, the SQL expressions in your file, hidden columns, other databases' files or anything else in your account.
• The SQL runs on your database as a read-only account that can read only the tables and columns your file lists. The rows come back to our servers encrypted. We erase them as soon as your browser collects them (after 15 minutes if it never does). Your browser keeps them in the conversation as described in 5.1.
• We store your questions, the names chosen, the SQL and the sentence shown to you encrypted. We erase them after 90 days. A record of each question without that text, such as its status and timings, is deleted after 365 days.

5.3 Deploys from GitHub

When our checks cannot tell how to build and start a repository you deploy from GitHub, some of its files can go to an AI model provider, which suggests the build and start commands. Only these files are sent, when the repository has them: package.json, requirements.txt, pyproject.toml, Pipfile, go.mod, Gemfile, main.py, app.py, wsgi.py, asgi.py, manage.py, server.js, index.js, app.js and README.md. Each is cut to 8 KB, with anything that looks like a secret removed first. Environment files, keys, lockfiles and the rest of your code are never sent.

5.4 The providers

AI model providers process what we send them under their own terms. Some of them may keep it or use it to improve their own services. That is why we send as little as we can and never send rows from your databases. Please do not type passwords, keys or personal data into the assistant.

6. Data Sharing & Disclosure

We may share information with:

6.1 Service Providers

Third-party vendors who support our operations, including:

• Cloud infrastructure providers such as Amazon Web Services
• Payment processors
• Analytics providers
• Customer support tools
• Sign-in, email delivery and error-tracking services
• AI model providers, as described in section 5

Each of them processes data under its own terms with us. Our Security page lists them.

6.2 Legal Compliance

We may disclose information if required to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect rights, property or safety

6.3 Business Transfers

In the event of a merger, acquisition or asset sale, personal data may be transferred subject to confidentiality obligations.

7. Data Retention

We retain personal data only as long as necessary to:

• Provide the Services
• Fulfill contractual obligations
• Comply with legal requirements
• Resolve disputes

Upon account termination:

• Account data may be retained for up to 30 days for recovery
• Thereafter, it may be deleted or anonymized unless retention is legally required
• We keep a normalised form of the email address and the network an account was created from for as long as we need them to apply the one-welcome-credit-per-person rule and to prevent abuse

The AI features keep what they store for the periods set out in section 5.

8. Data Security

Selfhost.dev implements appropriate technical and organisational safeguards, including:

• Encryption in transit (TLS) for the website, the console and our API
• TLS for database connections where the engine and its settings use it (our Security page says which engines)
• Role-based access controls
• Secure authentication mechanisms
• Infrastructure monitoring
• Regular security updates

However, no system is completely secure and we cannot guarantee absolute protection.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access personal data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent (where applicable)

To exercise your rights, contact: team@selfhost.dev. We may require identity verification before processing requests.

10. Children's Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Cookies Policy

Selfhost.dev uses:

• Essential cookies
• Analytics cookies (to improve platform performance)

You can manage cookie preferences through your browser settings.

12. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for their privacy practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If material changes occur, we will:

• Update the "Last Updated" date
• Provide notice via email or dashboard (where appropriate)

Continued use of the Services after updates constitutes acceptance.

14. Contact Information

If you have questions about this Privacy Policy or data practices, contact:

Selfhost.dev Team
Email: team@selfhost.dev
Registered Address: WeWork, Ground floor, RAHEJA WOODS, Kalyani Nagar, Pune, Maharashtra 411006