Privacy Policy

Effective Date: June 18, 2026 | Last Updated: June 18, 2026

Deployd (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, read our blog, or use our services, including Testing-as-a-Service (TaaS), MVP Development, and ERP Testing.

1. Data Controller Information

Deployd is the data controller responsible for your personal data. You can reach us at the offices below or by email at privacy@deployd.io.

United States Office
Deployd
12645 Olive Blvd, 2nd Floor
Creve Coeur, MO 63141
United States

India Office
Deployd
9th Floor, Brigade IRV
Nallurhalli Road, Nallurhalli
Whitefield, Bengaluru
Karnataka 560066
India

2. Personal Data We Collect

Information you provide directly

Contact details (name, email, company, phone) when you submit a contact form, subscribe to our newsletter, or create an account.
Any information you voluntarily include in messages or inquiries you send to us.

Information collected automatically

Log and device data such as IP address, browser type, operating system, referring URLs, pages viewed, and date/time of access.
Data collected through cookies, analytics, and similar tracking technologies (see Section 8).

Information from third parties

Professional and business information from sources such as LinkedIn and identity/verification services, where permitted by law.

3. How We Use Your Personal Data

We process your personal data on the following legal bases (GDPR): performance of a contract, our legitimate interests, your consent, and compliance with legal obligations. We use your data to:

Provide, operate, and improve our services and website.
Respond to inquiries, requests, and support needs.
Send newsletters and marketing communications where you have opted in.
Analyze usage trends and measure content and service performance.
Detect, prevent, and address fraud, security issues, and technical problems.
Comply with applicable legal and regulatory obligations.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share it with:

Service providers who process data on our behalf, such as Vercel (hosting), Amazon Web Services (infrastructure), and Google Analytics (analytics).
Business partners (such as Worksoft) where necessary to deliver our services.
Legal and regulatory authorities when required by law, court order, or to protect our rights, safety, or property.
Acquirers, in connection with a merger, acquisition, or sale of assets.

5. Data Retention

Data Type	Retention Period
Active customer records	Up to 7 years
Contact form submissions	3 years
Newsletter subscriptions	Until unsubscribe + 30 days
Analytics data	26 months
Cookies	Session or up to 2 years

We retain personal data only as long as necessary to fulfill the purposes described in this policy or to meet legal obligations.

6. Your Privacy Rights (GDPR)

If you are located in the EU, EEA, or UK, you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. We respond to verified requests within 30 days (extendable to 45 days where permitted). To exercise these rights, contact privacy@deployd.io.

7. Your Privacy Rights (U.S.)

California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to access and delete it, to correct inaccuracies, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. We do not sell personal information.

Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser.

Other U.S. States

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, and others) may have rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling. To exercise these rights or to appeal a decision, contact privacy@deployd.io.

8. Your Rights Under India’s DPDP Act, 2023

If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to:

Access a summary of the personal data we process about you.
Request correction, completion, or erasure of your personal data.
Nominate another individual to exercise your rights in the event of death or incapacity.
Grievance redressal through our privacy contact below.

To exercise these rights, contact privacy@deployd.io. If your concern is not resolved, you may escalate to the Data Protection Board of India.

9. Sensitive Personal Information

We do not collect or process sensitive personal information (such as government identifiers, precise geolocation, racial or ethnic origin, health, or biometric data) for the purpose of inferring characteristics about you.

10. Automated Decision-Making and Profiling

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing, including profiling. Where we use analytics or AI-assisted tools to improve our services, these do not make consequential decisions about individuals without human involvement.

11. Cookies and Tracking Technologies

We use cookies and similar technologies for essential functionality, preferences, analytics, and marketing. You can manage or disable cookies through your browser settings, and you can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. Disabling some cookies may affect site functionality.

12. International Data Transfers

Deployd operates in the United States and India, and your personal data may be transferred to and processed in countries other than your own. For transfers from the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

13. Data Security

We protect your personal data using safeguards including TLS/SSL encryption in transit, database encryption, access controls, regular security audits, and employee training. In the event of a data breach affecting your rights, we will notify the relevant authorities and affected individuals as required by law, generally within 72 hours of becoming aware. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children’s Privacy

Our website and services are not directed to children. We do not knowingly collect personal data from children under 16 (GDPR) or under 13 (COPPA). If you believe a child has provided us with personal data, please contact us so we can delete it.

15. Newsletter and Marketing

If you subscribe to our communications, you may unsubscribe at any time using the link in any email or by contacting us. We process unsubscribe requests promptly, typically within 10 business days.

16. Third-Party Websites and Services

Our website may link to third-party sites and services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review their privacy policies.

17. Supervisory Authorities (GDPR)

If you are in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the EU/EEA, you may contact your national data protection authority. We ask that you contact us first so we can address your concern.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we do, we will revise the “Last Updated” date above and, for material changes, notify you by email where appropriate. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.

19. Contact Us

For privacy-related questions, concerns, or to exercise your rights, contact us:

Email: privacy@deployd.io