Privacy Policy

Kodebyte ("we", "us", or "our") operates Vessl (https://vessl.sh). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using Vessl, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and handling your data responsibly.

We collect the following types of information:

Account Information

When you register, we collect your name, email address, and password (stored in encrypted form). If you use social login (GitHub or Google), we receive your profile information from those providers.

Usage Data

We collect information about how you interact with the Service, including deployment activity, feature usage, log data, IP addresses, browser type, and device information.

Payment Information

Payment transactions are processed by our payment partner, Midtrans. We do not store your full credit card numbers or banking details. We only retain transaction records (amount, date, status) for billing purposes.

Server Credentials

To manage deployments on your servers, you may provide SSH keys or server credentials. These are encrypted at rest and used solely to perform the actions you request.

Communications

If you contact us via email or support channels, we retain those communications to respond to your inquiries.

We use the information we collect to:

• Provide, operate, and maintain the Service

• Process payments and manage your subscription

• Send transactional emails (receipts, deployment notifications, alerts)

• Respond to your support requests and inquiries

• Monitor and analyze usage patterns to improve the Service

• Detect and prevent fraudulent or abusive activity

• Comply with legal obligations

We will not sell, rent, or share your personal information with third parties for their own marketing purposes.

We may share your information with trusted third-party service providers who assist us in operating the Service, subject to confidentiality obligations:

• Midtrans — payment processing

• Cloudflare — network security and traffic management

• Sentry — error monitoring and diagnostics

• Email providers — transactional email delivery

We may also disclose your information if required by law, court order, or government regulation, or to protect the rights, property, or safety of Vessl, our users, or the public.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Application logs and deployment records may be retained for up to 90 days for debugging and auditing purposes.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/HTTPS

• Encryption of sensitive credentials at rest

• Access controls limiting who can access your data internally

• Regular security reviews and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We use cookies and similar tracking technologies to maintain your session and preferences. Specifically:

• Session cookies — required for authentication and to keep you logged in

• Preference cookies — to remember your settings

We do not use third-party advertising cookies. You can instruct your browser to refuse all cookies; however, some parts of the Service may not function properly without them.

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you

• Correction — Request correction of inaccurate or incomplete data

• Deletion — Request deletion of your account and associated data

• Portability — Request your data in a structured, machine-readable format

• Objection — Object to processing of your data in certain circumstances

To exercise any of these rights, please contact us at **Contact Us. We will respond to your request within 14 business days**.

The Service is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove that information.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending an email to your registered address. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

This Privacy Policy is governed by the laws of the Republic of Indonesia. By using the Service, you consent to the collection and processing of your data in Indonesia.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: Contact Us

Website: https://vessl.sh

Vessl is a product by Kodebyte.