Privacy Policy

1. Introduction

NestApp ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our managed DevOps platform.

2. Data We Collect

We collect the following types of information:

• Account Information: Name, email address, company name, and contact details
• Usage Data: Information about how you use our platform, including deployment logs and resource metrics
• Technical Data: IP address, browser type, device information, and operating system
• Service Configuration: Application configurations, deployment settings, and infrastructure preferences

3. How We Use Your Data

We use your data to:

• Provide and maintain our DevOps platform services
• Process deployments and manage your infrastructure
• Send service-related notifications and updates
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for sensitive data at rest
• TLS encryption for data in transit
• Role-based access control (RBAC)
• Regular security audits and penetration testing
• Secure credential management with encryption

5. Cookies

We use essential cookies to:

• Maintain your session and authentication
• Remember your preferences (e.g., theme selection)
• Analyze platform usage to improve our services

You can control cookies through your browser settings.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to data processing
• Request data portability
• Withdraw consent at any time

7. Data Retention

We retain your data only as long as necessary to provide our services and comply with legal obligations. Account data is retained while your account is active. Deployment logs and metrics are retained for 90 days by default.

8. Third-Party Services

We may share data with trusted third-party services for:

• Cloud infrastructure providers (AWS, GCP, Azure)
• Monitoring and analytics services
• Payment processing

All third parties are contractually obligated to protect your data.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers outside the EU.

10. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact us at:

Email: privacy@nestapp.com