Information we collect
We collect information you provide directly, data needed to run deployments and monitoring on your servers, and operational metadata to operate the platform securely.
Account information
- Name and email address
- Password (stored as a one-way hash)
- Authentication and security events (e.g., login timestamps, IP address)
Server and project information you provide
- Server connection details (hostnames/IPs, ports, usernames)
- SSH keys and other secrets required to access your infrastructure (stored encrypted at rest)
- Repository URLs, deploy paths, and deployment configuration
Operational data
- Deployment logs and status metadata
- Server metrics collected by executing commands on your servers (when enabled)
- Audit logs for security and account activity
How we use information
- To provide and operate the Service (deployments, health checks, file browsing, terminal access)
- To secure the Service, prevent abuse, and investigate incidents
- To provide support and troubleshoot issues you report
- To process billing and manage subscriptions if you enable paid plans
How deployments work (important)
sshship is designed so your workloads run on your infrastructure. The Service connects to your servers over SSH using the credentials you provide and runs your configured deployment steps. Outputs from those commands may be shown in the dashboard and stored as deployment logs. You should avoid printing secrets in logs.
Tip: Treat deploy logs like production output — scrub or avoid echoing secrets.
Data retention
We retain information as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may delete resources in the UI, which will remove them from the application subject to backups and operational retention.
Security
We use reasonable administrative, technical, and organizational measures to protect information, including encryption for stored secrets. No method of transmission or storage is 100% secure, and you use the Service at your own risk.
In short: we protect data in line with industry practice, but you should also use strong passwords, 2FA where available, and least-privilege SSH keys.
Your choices
- You can update your profile information in the dashboard.
- You can remove servers/projects and revoke SSH keys at any time.
- You can request access to or deletion of personal information by contacting us.
International transfers
If you access the Service from outside Cameroon, your information may be processed in the jurisdictions where our infrastructure or service providers operate.
Contact
For privacy questions or requests, contact hello@sshship.cloud.