Legal

Privacy Policy

Last updated: October 21, 2026

This policy explains what information FluentOps collects when you use our websites, platform and CLI, how we use it, and the choices you have.

01Scope

This policy covers the FluentOps websites and the platform (dashboard, CLI, deployments). It does not cover the applications you deploy with FluentOps — you are responsible for the privacy practices of your own apps and their visitors’ data.

02Information we collect

  • ·Account information: email address, name, language, and — if you sign in with GitHub or Google — the identifier and basic profile those providers share with us.
  • ·Content you deploy: source code, build artifacts, environment secrets and assets you upload or connect via Git. Secrets are stored encrypted and used only to run your applications.
  • ·Usage and logs: deployment history, build logs, runtime and access logs of your projects, resource metrics (e.g. egress, build minutes) used to operate plan limits and billing.
  • ·How you use FluentOps: the pages of our site and of the dashboard you open and the actions you take (signing up, creating a project, deploying), linked to your account once you sign in. Before that, a random identifier stored in your browser joins one visit to the next.
  • ·Our emails: when you follow a link in an email from us, we record that you did and which email it was. We do not use open-tracking pixels.
  • ·Notes from our team: if we help you or write to you, we may keep a short note and a follow-up date on your account.
  • ·Technical data: IP address, browser/device information and the session stored in your browser to keep you signed in and to protect against abuse.
  • ·Payment information: handled entirely by Paddle, our merchant of record. We never receive or store your card number — we only receive subscription status and transaction references.

03How we use information

These are the purposes the Service needs, and you cannot opt out of them while you have an account:

  • ·To operate the Service: build, deploy, serve and back up your projects.
  • ·To enforce plan limits, meter usage and manage subscriptions.
  • ·To provide support and respond to your requests.
  • ·To secure the platform: abuse prevention, fraud detection, incident response.
  • ·To send transactional messages: verification, billing, limits reached, outages and security notices about your projects.

04Secondary purposes, and how to refuse them

We also use your information for the following. They are not needed to provide the Service, and you can refuse them at any time without losing anything:

  • ·Understanding how each account uses FluentOps: from your activity we estimate where you are (just signed up, publishing, growing), whether something seems stuck, and whether a paid plan would fit you. This only decides which message we might send you; it never changes your plan, your price or your access.
  • ·Sending you suggestions based on that: a deploy that failed and how to fix it, a feature you have not tried, or an offer of the Pro plan when it fits what you are doing.
  • ·Sending you a weekly summary of your projects and getting-started tips.
  • ·Improving the product, mostly from aggregated numbers (how many people complete each step).

To refuse: turn off Summary and suggestions in your Account page, or use the unsubscribe link at the bottom of any of those emails. To also ask us to stop analyzing your account for this purpose, write to the contact below and we will mark it as not to be contacted.

05How we share information

We do not sell your personal information. We share it only with:

  • ·Infrastructure providers — Amazon Web Services (hosting, storage, CDN and email delivery; primarily US regions).
  • ·Paddle — payment processing, tax handling and receipts for paid plans, as merchant of record.
  • ·GitHub / Google — only when you choose to sign in or link repositories with those services.
  • ·Authorities — when required by law or to protect the Service and its users, and only to the extent required.

06Data retention

  • ·Your account: while it exists. When you ask to delete it, there is a 30-day window to change your mind; after that your account, projects and their content are deleted.
  • ·Pages you visit and actions you take in the product: 90 days.
  • ·Access logs of your sites, including visitor IP addresses: 7 days. Traffic totals: 90 days.
  • ·The activity log of your account (deploys, settings changes, emails we sent): up to 24 months. If you delete your account, your email address is removed from it within 12 months; the entries remain without it.
  • ·Notes from our team, follow-ups and the record of suggestions we sent you: up to 24 months.
  • ·Security records about IP addresses that attacked the platform: up to 24 months.
  • ·Form submissions your sites receive: until you delete them or the project.
  • ·Backups: daily, kept for 7 days.
  • ·Billing records: kept by Paddle for as long as tax law requires.

07Security

Traffic is encrypted in transit (HTTPS), passwords are stored hashed, secrets are encrypted at rest, and internal access follows least-privilege practices. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

08International transfers

Our infrastructure runs primarily on AWS in the United States. By using the Service you understand your information is processed there and in other locations where our providers operate, protected by the safeguards in this policy and our providers’ certifications.

09Cookies and browser storage

We do not use cookies for tracking, and there are no third-party advertising or analytics trackers on our site or dashboard. We do keep a few things in your browser’s local storage:

  • ·Your session, so you stay signed in.
  • ·Your language and display preferences.
  • ·A random identifier for our own product analytics, described in section 2. It is not shared with anyone and is not used for advertising.

You can clear all of it from your browser settings at any time. Sites you deploy with FluentOps may use their own analytics or pixels; that is up to their owners.

10Your rights

Under Mexican data protection law (LFPDPPP) you may exercise your ARCO rights — access, rectification, cancellation and opposition. If you are in a jurisdiction with similar rights (e.g. the EEA/UK), you may likewise request access, correction, deletion, restriction or portability of your personal data, and object to the analysis described in section 4.

  • ·Access and portability: download everything we keep about your account as a file from your Account page (Your data → Download).
  • ·Rectification: change your language from your Account page; for anything else, write to us.
  • ·Cancellation: delete your account from your Account page.
  • ·Opposition: see section 4, or write to us.

For anything else, write to the contact below. We answer within 20 business days. You may also complain to your data protection authority — in Mexico, the Secretaría Anticorrupción y Buen Gobierno, which took over the INAI’s data protection duties in 2025.

11Minimum age

The Service is not directed to persons under 16 and we do not knowingly collect their data.

12Changes

We may update this policy; material changes will be announced by email or in-product notice. The “Last updated” date above reflects the current version.

13Contact

Privacy requests and questions: support@fluentops.org. See also our Terms of Service.