Legal

Privacy Policy

Last updated: April 8, 2026

Symplax is built for developers who care about control. We apply the same principle to your data:collect only what we need, protect it properly, and never misuse it.

1. Information We Collect

  • Account information:When you sign up, we collect your name, email address, and a hashed password. If you connect GitHub, we store an OAuth access token scoped to repository access.
  • Server credentials:IP addresses and SSH keys you add to manage your VPS instances. These are encrypted at rest using AES-256.
  • Usage data:Deployment logs, server metrics (CPU, RAM, disk), and activity events generated while using the dashboard. These are tied to your account and stored on our infrastructure.
  • Billing information:Payment is processed by a third-party provider (Flutterwave). We store your plan tier and billing cycle but never your raw card details.

2. How We Use Your Information

  • To operate and deliver the Symplax service:including deploying applications, monitoring servers, and sending notifications.
  • To communicate with you about your account, billing, and product updates.
  • To diagnose errors, improve reliability, and develop new features.
  • We do not sell your data to third parties. We do not use your data for advertising.

3. Data Storage & Security

  • All data is stored on secured infrastructure. Sensitive values (SSH keys, environment variables) are encrypted with AES-256 before being written to the database.
  • Data in transit is protected by TLS 1.3. Access to production systems is restricted to authorized personnel only.
  • Deployment logs are retained for 7 days (Free), 30 days (Pro), or 90 days (Team). After retention period, logs are permanently deleted.

4. Third-Party Services

  • AWS:We use AWS CodeBuild and ECR to build and store Docker images for your deployments. Your git repository is cloned temporarily during the build process and not retained.
  • GitHub:If you connect GitHub, we request OAuth access to clone repositories. You can revoke this access at any time from your GitHub settings.
  • Flutterwave:Handles payment processing. Subject to their own privacy policy.

5. Your Rights

  • You can export or delete your account data at any time from your account settings.
  • To request permanent deletion of all data associated with your account, contact us at the address below. We will process the request within 30 days.
  • You may disconnect GitHub or remove SSH keys and servers from your dashboard at any time.

6. Cookies

  • We use a minimal set of cookies strictly necessary to keep you authenticated. We do not use tracking or advertising cookies.

7. Changes to This Policy

  • We may update this policy as the product evolves. When we make material changes, we will notify you by email or via the dashboard. Continued use of Symplax after changes constitutes acceptance.

8. Contact

  • Questions about this policy? Reach us on X at @symplaxhq or via the contact form on our website.