Privacy Policy

1. Who we are

Desplega Labs operates assets.dev(“the Service”). We are the data controller for personal data collected through the Service. You can reach us at contact@desplega.sh.

2. What we collect

Account data: email address, name, and payment information (processed by Stripe — we never store card numbers).

Usage data: render history, API calls, template selections, and quota consumption associated with your account.

Brand data: URLs, colors, fonts, and logos you provide for brand extraction. This data is used solely to power your renders.

Analytics: we use Plausible Analytics, a privacy-friendly tool that collects no personal data and sets no cookies. It measures aggregate page views and referrers only.

Product & advertising analytics (consent-based): with your consent we use PostHog for product analytics and session diagnostics in the application, and advertising pixels (TikTok, Meta, Reddit) to measure whether our ads lead to sign-ups. Identifiers shared with ad platforms (email, user ID) are SHA-256 hashed before transmission. In the EEA, UK, and Switzerland these run only after you accept the consent banner; elsewhere they are enabled by default and you can opt out by emailing us.

3. How we use your data

We use your data to provide and improve the Service, process payments, send transactional emails (receipts, quota alerts), and respond to support requests. We do not sell your data. With your consent, we share hashed conversion events with the ad platforms listed above solely to measure our own advertising.

4. Sharing

We share data only with the subprocessors necessary to run the Service — currently Stripe (payments), AWS (infrastructure), Plausible (analytics), and PostHog (product analytics, consent-based) — plus, with your consent, hashed conversion events with TikTok, Meta, and Reddit to measure our advertising. We do not share your data with third parties for their own marketing.

5. Retention

We retain account data for as long as your account is active and for up to 90 days after deletion to allow recovery. Render outputs are stored per your plan settings and deleted on expiry. Analytics data is aggregated and retained indefinitely.

6. Your rights

Under GDPR and applicable law you have the right to access, correct, delete, or port your personal data. You may also object to or restrict processing. To exercise these rights, email us at contact@desplega.sh. We will respond within 30 days.

7. Cookies

Plausible sets no cookies. Both the marketing site and the application store a consent-preference cookie (av_consent) and, with your consent, advertising cookies from TikTok, Meta, and Reddit plus PostHog analytics cookies. The application also uses a session cookie for authentication. In the EEA, UK, and Switzerland a small banner asks before any advertising cookies are set; declining keeps the Service fully functional.

8. Security

We use industry-standard encryption in transit (TLS) and at rest. Access to production systems is restricted to authorised personnel. We conduct regular security reviews.

9. Changes

We may update this policy from time to time. We will notify you of material changes by email or in-app notice at least 14 days before they take effect.

10. Contact

Privacy questions or complaints: contact@desplega.sh.