Privacy policy

What Command Deck is

An online dashboard that shows each customer the status of their own software products by reading data from services they connect (for example GitHub, Vercel, Stripe, Google Search Console and Google Play). Each customer account is kept separate: no customer can see another's data.

Our role

For your account details (email, billing) we are the data controller. For data we read from your connected services on your behalf, we act as your data processor; our Data Processing Agreement applies.

What we collect

• Connection keys and tokens you add, stored encrypted (AES-256-GCM) and used only on our server to read your data.
• Data read from your connected services, such as deployment status, uptime, payment totals, search clicks and app release status, used to show your dashboard and send you alerts. Most of it is read live and not stored; we keep uptime history, alert history and an activity log.
• Your account details: your email address, your business name, the people you invite, and your plan.
• Your contact details for alerts (email address and, if you choose, mobile number).
• Billing details are handled by Stripe; we never see or store your card number.

Google user data

If you connect Google, Command Deck requests read-only access to Google Search Console (search performance) and the Google Play Developer API (app release status and reviews). This data is used only to show you your own dashboard and alerts. It is not sold, shared with third parties, used for advertising, or used to train AI models. Command Deck's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove access at any time at myaccount.google.com/permissions or by disconnecting in Command Deck's Settings.

AI assistant

If you switch on the assistant, a plain-English summary of your dashboard is sent to Anthropic's API to answer your question. Keys and passwords are never sent. Google user data is not sent to the assistant.

Who processes data for us

Vercel (hosting), Neon (database, EU/US), Brevo (sign-in links, alert emails and texts), Stripe (payments) and Anthropic (assistant, only if you switch it on).

How long we keep it

Keys are kept until you disconnect them. Uptime history is kept for 120 days. You can delete your whole account and all its data yourself, instantly, from the Account page. Billing records are kept as long as the law requires.

Your rights

Under UK GDPR you can ask to see, correct or delete your data, or object to its use, by emailing info@securityapproval.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).