Privacy policy
Utplava deploys the apps you build. To do that it needs to know who you are, which repositories you want deployed, and the settings those apps need. This page explains exactly what that means.
In short: we only see the GitHub repositories you choose to share. We don't sell your data, show you ads or use tracking cookies. You can delete your apps at any time from the dashboard.
Who we are
Utplava is run by DealUp Strategies Private Limited, Mangalore, Karnataka, India ("we", "us"). For anything about your data, email contact@dealup.co.in.
What we collect
Your account
When you sign in with GitHub we store your GitHub user ID, username, display name and profile picture link. We don't ask GitHub for your email address or password, and we don't keep the GitHub sign-in token after signing you in.
The repositories you choose
When you install the Utplava GitHub App, you pick which repositories it can access. For those repositories we store their names, IDs and default branch, and we read their code to build and deploy your app. We can't see repositories you didn't select.
Your app's settings
Environment variables and secrets you give an app (for example an API key it needs) are encrypted before they are stored, using a key managed in Amazon Web Services. They are only decrypted to hand them to your running app.
Deployment records
For each deployment we keep the commit it came from, its status, build logs and timestamps, so you can see what happened and so problems can be fixed.
Your app's database
If your app needs a database, we create one for it. What your app stores there belongs to you and your app's users; we don't read it.
Cookies
The dashboard uses one essential cookie to keep you signed in. There are no analytics, advertising or tracking cookies.
How we use it
- To sign you in and show you your workspace and apps
- To build, deploy and run the apps you ask us to deploy, including redeploying when you push to your main branch
- To keep the service secure and working, and to help you when something goes wrong
- To let us know when someone new signs up or starts their first deploy, so we can offer help
We don't sell your data, use it for advertising, or use your code to train AI models.
Services we share data with
Utplava is built on these providers. Each receives only what it needs to do its part:
- GitHub: sign-in, and access to the repositories you select
- Vercel: builds and hosts your apps and the Utplava dashboard
- Neon: hosts Utplava's own records and your apps' PostgreSQL databases
- Trigger.dev: runs the background jobs that carry out deployments
- Amazon Web Services: manages the encryption key that protects your app settings
- Resend: sends us a short email when someone signs up, containing their GitHub username
These providers may process data outside India. We'll only share data with anyone else if the law requires it.
How long we keep it
We keep your account and app records while you use Utplava. When you delete an app, its hosting, database and saved settings are removed; a record that the deployments happened is kept so the history stays accurate. If you ask us to delete your account, we remove your account details and remaining apps.
Your choices
- Delete an app at any time from its page in the dashboard.
- Remove repository access in GitHub under Settings → Applications → Installed GitHub Apps.
- Access, correct or delete your data by emailing contact@dealup.co.in. We'll reply within 30 days.
Security
Data travels over HTTPS, app secrets are encrypted at rest, and Utplava's own access to your repositories is limited to the ones you select. If we ever find a breach that affects your data, we'll tell you.
Children
Utplava isn't meant for children, and you need to be old enough to have a GitHub account to use it.
Changes
If this policy changes, we'll update the date at the top. If a change is significant, we'll tell you in the dashboard or by other reasonable means.