Privacy policy

What we collect

We collect only what the service needs to work.

• Your account. Your email address, your name and profile photo if you add them, and a hashed password if you sign in with one. Sign-in codes are sent to your email.
• Your workspace. Its name, who its members are and their roles, invitations, and the people each app is shared with.
• Your apps. The code you upload, its environment variables, the files an app stores on its disk, an icon, and screenshots of the running app that we take for your dashboard.
• Usage. How many requests each app served and how much data, per day, so we can show you usage and apply plan limits. We read an app’s recent logs on request and do not keep them.
• Visitors to your apps. When someone opens an app, we ask them to sign in and pass their email address to the app. Our hosting providers see technical details such as IP addresses while a request is handled.
• Cookies. Only the ones that keep you signed in. We do not use advertising or tracking cookies.

How we use it

• To run, secure and support the service, including signing people in and enforcing who can open each app.
• To email you about your account: sign-in codes, invitations, shares, and deploy failures.
• To show usage and apply plan limits.
• To investigate abuse and keep the service safe.

We do not sell your personal information and we do not use it for advertising.

Who else handles it

We use a small number of providers to run Doclet. They process data on our behalf and only for that purpose.

• Convex stores our database and handles sign-in.
• Fly.io runs your apps and stores their files.
• Vercel hosts this website and the dashboard.
• Resend sends our email.

We may also share information when the law requires it, or to protect the rights, safety or property of Doclet or others.

Apps you share

If you deploy an app and share it, the people who open it will be asked to sign in, and your app receives their email address. What your app then does with that information is up to you. If you collect personal information from your visitors, you are responsible for handling it lawfully.

How long we keep it

We keep your information while your account is open. We keep earlier versions of your code so you can roll back, and remove older uploads as part of routine housekeeping. When you delete an app, its code, files, and settings are deleted. When you delete a workspace, its apps and members are removed. Usage totals and backups can take a little longer to disappear.

Security

Access to every app is checked before a request reaches it, connections are encrypted, and passwords are stored hashed. No service can promise perfect security, so please use a strong password and tell us right away if you suspect a problem.

Your choices and rights

You can see and edit your profile in the dashboard, remove your photo, and leave a workspace. You can ask us to give you a copy of your information, correct it, or delete your account. If you live in California, the California Consumer Privacy Act also gives you the right to know what we collect, to delete it, and to correct it, and we will not treat you differently for using these rights. Email aryan@moonlit.company and we will respond within 45 days.

Children

Doclet is for businesses and developers and is not directed to children under 16. If you believe a child has given us personal information, contact us and we will delete it.

Where your data is handled

Doclet is operated from the United States, and your information is processed in the United States and wherever our providers operate.

Changes

If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you by email or in the dashboard.

Contact

Aryan Wadhera
Orange County, California, United States
aryan@moonlit.company