1. Who this page is for
The EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the UK GDPR give people rights over their personal data. This page explains each right and how to use it with Deployxa. It applies to personal data Deployxa controls: your account, billing, support and website data, as described in the Privacy Policy.
If you are a user of an app that is hosted on Deployxa, the app’s owner controls your data. Contact them directly. If you contact us instead, we will pass your request to the app owner where we can identify them, as set out in our Data Processing Agreement.
2. Your rights and how to exercise them
| Right | What it means | How to exercise it |
|---|---|---|
| Information (Art. 13–14) | To be told what we collect, why and for how long. | Read the Privacy Policy and Cookie Policy. |
| Access (Art. 15) | To get a copy of your personal data and details of how it is used. | Download your data archive under Settings, Privacy, or email [email protected] for a full copy. |
| Rectification (Art. 16) | To correct inaccurate or incomplete data. | Edit your profile and billing details in account settings, or email us. |
| Erasure (Art. 17) | To have your data deleted when there is no longer a reason to keep it. | Request account deletion under Settings, Privacy. We delete your workspaces, projects and containers; some billing records are kept where the law requires. |
| Restriction (Art. 18) | To ask us to pause processing while a dispute about your data is resolved. | Email [email protected]. |
| Portability (Art. 20) | To receive data you gave us in a machine-readable format and move it elsewhere. | Export your account data as JSON under Settings, Privacy. Your source code stays in your own repository. |
| Objection (Art. 21) | To object to processing based on legitimate interests, and always to direct marketing. | Email [email protected]. If we send you marketing emails, each one has an unsubscribe link. |
| Withdraw consent (Art. 7) | To withdraw consent at any time, without affecting earlier processing. | Change your choices in Cookie Settings in the site footer. |
| Automated decisions (Art. 22) | Not to be subject to decisions based solely on automated processing that have legal or similarly significant effects. | Deployxa does not make such decisions. Automated abuse detection may pause a deployment, and you can ask for a human review by replying to the notice. |
3. Making a request
- Use the self-service tools in your account where they exist; they are the fastest route.
- Otherwise, email [email protected] from the address on your account and say which right you want to use.
- We may ask for information to confirm your identity before acting, so that we never give your data to someone else.
- You can make a request through an authorized representative; we will ask for proof of their authority.
- Requests are free. If a request is clearly unfounded or excessive, for example repetitive, we may charge a reasonable fee or decline it, and we will explain why.
4. Response timelines
We respond without undue delay and within one month of receiving your request. If a request is complex, or you send many requests, we may extend this by up to two further months; if so, we will tell you within the first month and explain why. If we decide not to act on a request, we will tell you why within one month and explain your right to complain.
5. Complaints to a supervisory authority
We would like the chance to resolve any concern first, so please contact [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, work or where the alleged infringement took place.
- In the EU and EEA, the European Data Protection Board publishes a list of national authorities.
- In the United Kingdom, the authority is the Information Commissioner’s Office (ICO).
- In Switzerland, it is the Federal Data Protection and Information Commissioner (FDPIC).
6. Other privacy laws
If you live outside Europe, you may have similar rights under local law, for example under California’s CCPA/CPRA or other national data protection laws. Use the same routes above. We handle these requests on the same timelines unless your local law requires a shorter one.
Questions about this document? Email [email protected].