Last updated November 2026
This policy explains what information [legal entity name] ("Cloudilio", "we") collects when you use the platform, and how we use it. Contact us at [contact email] with any privacy question.
We use this information to run and secure the platform, deploy and monitor your applications, process subscriptions, send account and service emails such as password resets and downtime alerts, and meet legal obligations. We do not sell your personal information, and we do not use your code or data for advertising.
Authorized platform administrators have the technical ability to access customer applications, including their files, logs and environment variables. We limit this to what is needed for support, security and legal obligations. People you add to an application's team can see it according to their role.
We share information with service providers only as needed to run the platform:
We may also disclose information when the law requires it, or to protect the platform and its users.
Environment variables and GitHub access tokens are encrypted at rest using Fernet. Source code, application files, logs and persistent storage are isolated per application but are not encrypted by the platform, so do not store secrets in your code. No system is perfectly secure, and we cannot guarantee absolute security.
We use only the cookies needed for the platform to work: a session cookie that keeps you signed in and protects forms, and a "remember me" cookie if you choose that option. We do not use analytics or advertising cookies.
| Information | Kept for |
|---|---|
| Resource usage metrics | 7 days |
| Health check results and scheduled task history | 30 days |
| Application console logs | 3 to 14 days, depending on your plan |
| Automatic backups | 3 to 7 days, depending on your plan |
| Rate limiting records | About 1 day |
| Account details, security log, deployment history | While your account is open, and afterward as needed for legal, security or accounting reasons |
Deleting an application removes its source and release archives from our control servers. Its persistent data and backups can remain on the execution server until an administrator removes them, and you can ask us to do so.
You can change your notification preferences and manage API tokens from your account page. To access, correct or delete your personal information, including closing your account, email [contact email]. Depending on where you live, you may have further rights under local law, such as to object to certain processing or to complain to a data protection authority.
If your application collects personal information from its users, you are responsible for that information and for your own privacy notices. We host it on your behalf and handle it according to your instructions through the platform.
The platform is not intended for children, and we do not knowingly collect their information. Our servers and service providers may be in other countries, so your information may be processed outside the country where you live.
We will post any changes to this policy here, and will give you notice of significant ones.