Privacy Policy

We collect only what we need to operate the Service:

• Account details: your name, email address, and organization name (if provided) when you register.
• Billing records: transaction IDs and payment amounts associated with your subscriptions.
• Service logs: operational logs related to your applications and their hosting environment, used for deployment, monitoring, and troubleshooting.

We use the information above to:

• create and manage your account and applications;
• verify bKash payments and process subscription billing;
• operate, monitor, and support the hosting Service;
• send transactional email such as invoices, payment reminders, suspension and deletion warnings, and security notices;
• protect the platform, prevent abuse, and comply with legal obligations.

We do not sell your personal data. We do not use your data for third-party advertising.

The site uses a small number of cookies and shows a cookie consent banner on your first visit. Cookies are used for:

• Session cookies — keeping you signed in to the dashboard while you use the Service.
• Preference cookies — remembering choices such as your theme selection and consent decision.

You can accept or decline non-essential cookies through the consent banner. Essential session cookies are required for the dashboard to function.

We deliberately keep payment data to a minimum on both payment rails:

• Card payments (USD): card data is handled entirely by Paddle, which acts as the Merchant of Record for card payments. Your card details are never transmitted to or stored on our systems.
• bKash payments (BDT): we store only the bKash transaction ID you submit in the dashboard, along with the amount, so we can verify the payment. We never ask for your bKash PIN or account credentials.

We share data only with the processors required to run the Service:

• Paddle — payment processing and Merchant of Record for card payments.
• Cloudflare — DNS and CDN services.
• Our hosting provider — the underlying infrastructure on which the platform runs.

Each of these providers processes data only as needed to deliver their service to us. We do not otherwise disclose your personal data except where required by law.

We keep your account and billing data for as long as your subscription is active and for a reasonable period afterward to satisfy record-keeping and dispute-resolution needs. Service logs are retained for operational purposes and rotated on a reasonable schedule. If your subscription lapses, application data follows the suspension and deletion timeline described in our Terms of Service (7-day grace period, then suspension, then 30 days of retention with email warnings before permanent deletion).

You have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your personal data; and
• withdraw consent for non-essential cookies at any time via the consent banner.

To exercise any of these rights, email us at hello@opendock.cloud. We will respond within a reasonable timeframe and honor verified deletion requests, subject to any records we must retain for legal or billing purposes.

We apply reasonable technical and organizational measures to protect your data, including access controls that limit staff access to production systems, encrypted connections (HTTPS/TLS) for data in transit, and automated backups of hosted applications. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take the protection of your data seriously and act promptly on reported issues.

We may update this Privacy Policy as the Service evolves. We will revise the “Last updated” date on this page and, for material changes, notify customers by email or through the dashboard.

Privacy questions and data requests can be sent to hello@opendock.cloud.