Privacy Policy

Last updated: July 21, 2026

1. Who We Are

Deploy Day is operated by TSV Studios LLC ("we", "us", "our"). This policy explains how we collect, use, store, and protect your information when you use our automation build services.

2. Information We Collect

Account Information: Name, email address, and billing details provided during checkout and registration.

Automation Data: To build and operate your automation, we may process data from connected services (e.g., email content from Gmail, payment data from Stripe, search data from Google Search Console). This data is processed solely to execute the scoped automation you have requested.

API Credentials: OAuth tokens, API keys, or app passwords you provide to connect third-party services. These are stored encrypted and are never shared, sold, or used for purposes outside your scoped automation.

3. How We Use Your Information

We use your information exclusively to:

  • Build, test, and deliver the scoped automation.
  • Operate the automation on an ongoing basis (if a retainer is active).
  • Communicate build updates, billing, and support.
  • Send the daily summary emails and alerts generated by your automation.

We do not use your data to train AI models, sell advertising, or create derivative products. We do not sell or rent your data to third parties.

4. How We Store & Protect Data

Infrastructure: Data is stored in Supabase (PostgreSQL) and processed on Hetzner servers in Finland. Backup storage is located in Germany. Our frontend is hosted on Vercel (USA). All data in transit is encrypted via TLS 1.2+.

Encryption: API credentials and sensitive tokens are encrypted at rest using LUKS full-disk encryption and application-level encryption (n8n encryption key). We maintain a tested key recovery runbook.

Access: Only authorized TSV Studios personnel can access production systems. We do not share server access with third parties.

5. Third-Party Services

We rely on the following sub-processors to deliver the service:

  • Stripe -- payment processing.
  • Supabase -- database and authentication.
  • Vercel -- frontend hosting.
  • Hetzner -- workflow execution (n8n) in Finland; backup storage in Germany.
  • Anthropic (Claude) -- AI processing for summarization and drafting.
  • Google (Gmail API, Search Console API) -- email and search data access.

Each sub-processor has its own privacy policy and terms. We only share the minimum data necessary to perform their function in our stack.

6. Data Retention

We retain automation data for the duration of your active account plus 30 days after cancellation or termination. After 30 days, data is securely deleted from our systems. Backups may retain encrypted copies for up to 90 days before automatic purge. If you require immediate deletion, contact us.

7. Your Rights

You have the right to access, correct, or delete your personal data. You may also revoke API access at any time by disconnecting the integration in your connected service (e.g., Google Account permissions). To request a full data export or deletion, email hello@yourdeployday.com.

8. Cookies & Tracking

We use essential cookies for authentication (Supabase Auth) and Stripe checkout. We do not use third-party advertising cookies or tracking pixels for marketing purposes.

9. Changes to This Policy

We may update this policy as our service evolves. We will notify you of material changes via email or a notice in the dashboard. Continued use after changes constitutes acceptance.

Contact

For privacy questions or data requests, contact us at hello@yourdeployday.com.