Protected by Scarecrow

We’ll start with the TL;DR (Too Long; Didn’t Read):

• Your data belongs to you. We’ll delete it upon request. Also, we typically delete all data when a subscription has been canceled for 30 days.
• We do not willingly share your information with ANYBODY, beyond the bare minimum required to set up billing (currently an email address).
• You can delete site data yourself from the dashboard.
• Hmm. That’s about it.
• Thanks for reading!

Okay, but there’s more. Not in a legal sense, but if you’re interested in the privacy and security of your data, we also:

• Encrypt all of your files both in storage and in transit. Even when we download files for a backup or gather them for a restore, we store them encrypted with “ephemeral keys” that do not exist anywhere but in RAM. In other words, even if somebody were to get the hard drive, they could not read your files.
• Store credentials (SFTP and FTP logins mainly) in our database, but all credentials are encrypted with multiple secrets that are NOT in the database. In other words, even if somebody were to get access to our entire database, they could not use that to log in to manage your sites.
• STRONGLY DISCOURAGE email addresses as login credentials. They’re convenient, but the problem is that everybody uses them. Instead, we have usernames. If you forget your password, you can recover it via entering your username. Our system will then give you a one-time password and send a link to your primary email address. You will need both the link and the one-time password in order to do the reset. We do this because we are a disaster recovery service, and quite often the disaster was due to a credentials compromise. Possibly by accessing an email account and resetting passwords! If you do not remember your username, contact us and we’ll figure something out.
• Sync customer files to multiple cloud providers, but this is in a zero-trust architecture, meaning that all files are encrypted and the cloud providers cannot read your files.
• NEVER host content (such as “captchas”, social media images, scripts from some other website) that can be used to track users/visitors.
• Do not send images or tracking links in any email.
• There’s more, but we hope this is enough to give you the general vibe.

We LIKE privacy.