Privacy Policy

SBM Development SRL (“we”, “us”, or “our”) operates the GoDeploy application for iOS and macOS, and the website at godeployapp.com. This Privacy Policy explains how we collect, use, and protect your information when you use our app and services.

By using GoDeploy, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Information We Collect

1.1 Server Credentials

When you add a server to GoDeploy, you provide a hostname, port, username, and either a password or an SSH private key. These credentials are stored exclusively in the iOS/macOS Keychain (encrypted by the operating system, access-controlled per device). They are never stored in our database and never transmitted to our servers or any third party.

1.2 SSH Connections

GoDeploy connects directly from your device to your Linux server over SSH. There is no intermediary server, cloud relay, or proxy. All SSH traffic flows between your device and your server only.

1.3 AI Analysis Data

When a deployment fails and you use the AI Fix or AI Merge features, the following data is sent to our API server for processing via Anthropic’s Claude API:

• The deployment log output (command output, error messages)
• Server context: hostname, OS type, SSH username (no passwords or keys)
• Project context: repository URL, branch name, deploy path
• For AI Merge: the two file versions being merged (server + remote content)

This data is encrypted in transit via TLS. Anthropic does not use this data for model training. Passwords, SSH keys, and .env file contents are never sent.

1.4 Subscription & Purchase Data

Subscriptions and in-app purchases are processed entirely by Apple through the App Store. We do not collect or store your payment information. We receive a signed transaction (JWS token) from Apple to verify your subscription status and grant AI credits.

1.5 User Identity

GoDeploy identifies users via your iCloud user record ID (an anonymous identifier tied to your Apple ID). We do not collect your name, email address, or any personal information. There is no signup, no login screen, and no account to create.

1.6 Usage Analytics

GoDeploy does not include any third-party analytics SDKs. We do not track which features you use, which screens you visit, or how long you use the app. We track a lifetime deploy counter server-side for future product improvements — this is a simple number, not tied to any personal information.

2. How We Use Your Information

• Deployments — Your server credentials are used solely to establish SSH connections and deploy code from your Git repositories.
• AI diagnostics — Deploy logs and file contents are sent to Anthropic to generate AI-powered analysis, fix suggestions, and file merges.
• Purchase verification — Signed App Store transactions are validated server-side to grant subscription benefits and AI credits.
• iCloud sync — If enabled (Pro feature), your server list and project configurations sync across your devices via Apple’s CloudKit Private Database.

3. Third-Party Services

Service	Purpose	Data Shared
Anthropic (Claude API)	AI analysis & file merge	Deploy logs + file content (no credentials)
Apple App Store	Subscription & purchase processing	Payment handled entirely by Apple
Apple iCloud (CloudKit)	Server/project sync (optional, Pro)	Server configs, credentials (encrypted by Apple)
GitHub / Bitbucket	Deploy key registration (optional)	Public SSH key only, via their APIs

We do not sell, rent, or share your data with any other third parties.

4. Data Security

• All SSH connections use industry-standard encryption (SSH protocol).
• Server credentials are stored in the device Keychain with kSecAttrAccessibleWhenUnlockedThisDeviceOnly protection.
• AI requests use TLS encryption in transit to our API server and to Anthropic.
• No server credentials, passwords, or SSH keys are ever transmitted to our servers.
• No software, agents, or daemons are installed on your Linux servers.
• iCloud sync uses Apple’s CloudKit Private Database — encrypted, accessible only by your Apple ID.

5. Data Retention

• Server credentials — Stored in your device Keychain until you delete the server from GoDeploy.
• Deployment history — Stored locally on your device. Not synced to iCloud. Deleted when you clear data in Settings.
• AI analysis results — Cached on our server for 5 minutes to avoid duplicate API calls. Not retained long-term.
• Purchase records — Transaction verification data is retained on our API server for credit accounting.
• iCloud data — Managed by Apple. Deleted when you disable iCloud sync or remove the app.

6. Children’s Privacy

GoDeploy is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

7. Your Rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to access, correct, delete, or port your data. Since GoDeploy stores credentials locally on your device and does not maintain user accounts, most data management can be done by deleting servers from the app or uninstalling it. For any data held on our API server, contact us below.

8. International Data Transfers

AI requests are processed by Anthropic, which may process data in the United States. Purchase verification requests are processed by our API server. TLS encryption and minimal data transfer are used for all requests.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of GoDeploy after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or your data:

• Email: [email protected]
• Company: SBM Development SRL
• Website: godeployapp.com