Deployz helps software teams deploy applications into AWS accounts they control. This page explains our approach to data protection and how responsibilities are shared.
1. Data protection roles
Deployz generally acts as a controller for account, billing, service security, and business information. When handling personal data on behalf of a customer to provide deployment services, Deployz generally acts as a processor or subprocessor, depending on the circumstances. Customers determine how their deployed applications collect and process end-user data. Deployz does not automatically process all data held in a customer’s AWS environment.
2. Customer-controlled infrastructure
Deployed applications, databases, and storage run in customer-controlled AWS accounts. Customers manage infrastructure and data, including AWS regions, subject to available configurations. Deployz separately processes repository information, settings, artifacts, logs, and operational metadata. An EU AWS region for your application does not necessarily mean all Deployz operational information stays in the EU.
3. Individual rights
Depending on the circumstances, GDPR provides rights to access, correct, erase, obtain, restrict, or object to processing of personal data, and to withdraw consent where relevant. For Deployz account information, use our contact form. For data collected by a deployed application, contact that application’s operator. We reasonably assist customers with applicable data subject requests for data processed on their behalf.
4. Security
Deployz uses reasonable technical and organizational safeguards suited to its services. Customers remain responsible for security of their applications, AWS accounts, permissions, and application data.
5. Third-party providers
We use providers for infrastructure, repository integrations, AI, payments, communications, and other operations. Where required, we put appropriate data protection arrangements in place. Our Data Processing Addendum includes a service-provider list.
6. International data transfers
Deployz and providers may process information outside the European Economic Area. Where required, appropriate legal transfer safeguards, which may include Standard Contractual Clauses, must be put in place.
7. Retention and deletion
We retain information as reasonably necessary for our services, security, legal obligations, and legitimate operations. Customers control retention and deletion within their AWS accounts; closing Deployz does not automatically remove AWS resources.
8. Security incidents
We investigate suspected incidents and provide breach notifications and reasonable assistance as required by applicable law and our Data Processing Addendum.
9. Data Processing Addendum
The DPA explains our contractual commitments when Deployz processes personal data on customers’ behalf: https://deployz.dev/dpa
10. Contact
Thalia Technologies Private Limited — Mumbai, India
Website: https://deployz.dev
Data protection inquiries: https://share.hsforms.com/1dOsn_DJtRhq47DXIaRjeLw5auur