Privacy Policy

What we collect

• Account details — your email address, username and a hashed password. If you sign in with GitHub, we receive your GitHub username, public profile and email address (the read:user and user:email scopes). We never get your GitHub password.
• Your content — the pockets, hook files, schemas and binaries you create, plus the instances you deploy, their deployment logs and any custom domains you attach.
• Billing details — Lemon Squeezy, our Merchant of Record, collects your payment details. We receive only what we need to manage your plan: your name and email as given at checkout, the plan, subscription status, and renewal dates. We never receive your card number.
• Technical data — IP addresses, browser user agent and request logs, kept by our hosting providers for security and debugging.

Data inside your instances

The records your PocketBase instances store — including data about your own app's users — belong to you. We host it on your behalf and access it only to run the service, to fix a problem you ask us about, or when the law requires. For that data you are the controller and we act as your processor.

How we use it

• to create and secure your account, and to sign you in;
• to host your pockets and instances and run the deployments you start;
• to apply your plan's limits and manage your subscription;
• to send account emails: address verification, password resets, and notices about billing or instances that are about to be stopped or deleted;
• to prevent abuse and keep the platform secure.

We process this data to provide the service you signed up for (contract), to meet legal obligations, and for our legitimate interest in keeping PocketsHub secure. We don't sell your data, we don't show ads, and we don't send marketing email.

Cookies

We use only cookies that are needed for the site to work: one that keeps you signed in, and a short-lived one that protects the GitHub sign-in flow. We don't use analytics, advertising or tracking cookies.

Who we share it with

We share data only with the providers that run PocketsHub for us, and only what each one needs:

• Amazon Web Services — hosts our servers, database and your instances;
• Vercel — serves the pocketshub.com website;
• Cloudflare — DNS and network protection for our API;
• Lemon Squeezy — checkout, payments, invoices and tax;
• GitHub — only if you choose to sign in with it;
• an email delivery provider — to send account and billing emails.

Some of these providers process data outside Morocco, including in the United States and the European Union, under their own data-protection commitments. We may also disclose data if the law requires it.

How long we keep it

We keep your account data and content for as long as your account exists. Deleting an instance removes it and its data. When you ask us to delete your account, we delete its data within 30 days, except what we must keep for legal or accounting reasons. Server logs are kept for a limited time and then discarded.

Your rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it. Many details can be changed directly in your account settings; for anything else, email support@pocketshub.com and we'll answer within 30 days. You also have the right to complain to your data-protection authority — in Morocco, the CNDP.

Security

Passwords are hashed, all traffic uses HTTPS, and access to production systems is restricted. No system is perfectly secure; if a breach affects your data, we'll tell you without undue delay.

Children

PocketsHub is not meant for children under 16, and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date above, and email you before any significant change takes effect.