Implementation Note
Registration copy should say that the user has reviewed the Privacy Policy, not bundle all privacy processing into consent to the Terms. Marketing emails, non-essential cookies and third-party advertising/analytics should use separate choices.
Information We Collect
PocketBay may collect account information (name, email, login method, avatar, organization information), identity and verification information (if you use payments, KYC/KYB, enterprise features or security verification), billing and payment-related information (payment method, transactions, invoices, taxes, refunds, chargebacks and payout information handled by third-party payment providers), project and service data (code, files, configurations, environment variables, logs, build records, deployment status, resource usage, domains, databases, storage, errors and AI diagnostic data), device and usage data (IP address, User-Agent, device, browser, pages, clicks, sessions, API calls, performance, crashes and security events), and support, feedback, complaint and communication content you submit.
For easier review, the main information categories, their uses and their default visibility are:
| Category | Main uses | Default visibility |
|---|---|---|
| Account, contact and necessary billing data | Sign-in, orders, security and service contact | Not public; profiles you choose to publish are handled separately |
| Operational, deployment and necessary fault information | Builds, diagnostics, security and billing | Not made public by default merely because a project is Public |
| Project Memory and private derivatives | Enabled continuous project understanding, Bayo, private retrieval and export | Private; not distributed with copies |
| Confirmed public Project Genome | Project display, discovery, comparison and relations | Published only after public authorization and field checks pass |
| Copy authorization and confirmation records | Creating copies, licence management, complaints and disputes | Restricted access; not used as a public user profile |
| App end-user data | Hosting and similar services under the developer's lawful instructions | Governed by the applicable DPA, permissions and the app's privacy notes |
The specific boundaries of each category are explained by dedicated policies such as the Project Memory and Genome Data Policy.
PocketBay may receive information from third parties, including GitHub/GitLab/OAuth providers, payment/KYC providers, cloud providers, domain/certificate providers, error monitoring, analytics tools, referrers, team administrators, enterprise customers, public sources and security/anti-abuse data sources.
Do not submit unnecessary sensitive personal information, full payment-card numbers, health information, children's data, government identity documents, trade secrets or highly sensitive data to PocketBay unless PocketBay expressly agrees in writing and you have satisfied all legal requirements.
How We Use Information
We use information to create and manage accounts, provide deployment and hosting services, build and run projects, process logs and errors, provide AI diagnostics and automation, bill and collect payments, handle KYC/KYB and risk controls, monitor security, prevent fraud and abuse, verify identity, provide customer support, send notices, improve products, analyze performance, comply with law, handle disputes, enforce terms, protect PocketBay and third-party rights, and fulfill legal obligations.
We may use aggregated, de-identified or anonymized information for statistics, product improvement, security research, capacity planning, market analysis and business reporting. Such information does not reasonably identify you or your end users.
Where we process certain information based on consent, such as marketing emails, non-essential cookies or specific third-party advertising/analytics, you may withdraw consent using the provided method. Withdrawal does not affect processing before withdrawal or processing necessary to provide the Service.
The platform determines the lawful basis for each specific activity, including processing necessary to perform the services you request, valid consent, legal obligations and other bases recognized by applicable law. Lawful bases are not mechanically interchangeable across jurisdictions; the "legitimate interests" of one law is not a universal basis in all regions.
Memory, public fields, marketing, non-essential cookies, model training and other new non-essential uses are managed separately. Confirming that you have read this Privacy Policy is not consent to every processing activity. After you withdraw a consent, the platform stops the further processing that relied on it and handles existing data according to law.
Sharing and Third-Party Services
We may share information with cloud infrastructure, storage, database, CDN, domain, certificate, payment, KYC/KYB, bank, tax, email, SMS, identity, AI model, monitoring, logging, analytics, security, anti-abuse, customer support, legal, audit, affiliate, contractor and other service providers. We share only as needed to provide, protect, bill, improve, comply with law or operate the Service.
If you connect third-party services or choose publishing, payment, payout, KYC/KYB, Discover or integration features, your information may be provided to the relevant third parties according to your authorization or feature requirements. Third parties process information under their own terms and privacy policies, and PocketBay does not control their independent processing.
We may disclose necessary information in connection with mergers, financing, reorganizations, asset sales, business transfers, bankruptcy, legal proceedings, regulatory requests, law-enforcement requests, rights complaints, security incidents, abuse investigations or protection of PocketBay, users, upstream providers or third-party rights.
We distinguish entrusted processing from a provider's independent use of data according to the actual data control and purposes involved, and do not exclude our own platform responsibility through labelling. Recipients' identities, service purposes, data categories, processing regions and retention arrangements follow the Data Processing Addendum and Subprocessor Notice and the platform's actual disclosures.
Where cross-border provision is involved, the relevant notices identify the regions, data and types of recipients involved. The platform and customers each perform their respective cross-border obligations; where separate consent, impact assessments, standard contracts, security assessments, certification or other mechanisms are required, they are completed under the specific applicable conditions.
Developer and End-User Data
If you process your customers', users', employees', suppliers' or other individuals' data through PocketBay, you may be the controller or business for that data, and PocketBay may act as processor, service provider or platform service provider. You are responsible for determining applicable law, providing notices, obtaining consent or another lawful basis, responding to data-rights requests, handling cross-border transfers, retention/deletion, security safeguards and end-user complaints.
PocketBay's Privacy Policy does not replace a developer's own privacy policy. Developers publishing to Discover or processing end-user data should provide clear, valid and accessible privacy policies and user terms in their listings and apps.
If you need a Data Processing Addendum (DPA) or enterprise data-protection terms, use PocketBay's Data Processing Addendum and Subprocessor Notice or sign a separate written agreement with PocketBay.
Retention, Deletion and Security
We retain information for as long as needed to fulfill the purposes described in this policy, provide the Service, perform contracts, satisfy legal, tax, audit, payment, dispute, security, backup, disaster recovery and compliance requirements. Retention periods vary by information type. Project data, logs, build artifacts, caches, databases, backup copies and system records may be deleted, anonymized, isolated or retained based on plans, features, costs, upstream services, free/Beta policies, non-payment, termination or security reasons.
We use reasonable technical and organizational measures to protect information, but no internet service can guarantee absolute security. You should use strong passwords, multi-factor authentication, least privilege, secret rotation, backups, access controls, secure configurations and monitoring, and you are responsible for your account, projects, code, secrets, environment variables and end-user security.
Deleting an account or project may not immediately delete all backups, logs, billing, audit, security, payment, KYC/KYB, tax or legal records. We delete, anonymize or retain information within a reasonable period according to system cycles, legal requirements and business needs.
Your Rights, Choices and Contact
Depending on your location and applicable law, you may have rights to access, correct, delete, export, restrict processing, object to processing, withdraw consent, unsubscribe from marketing, manage cookies, complain or appeal. You may contact us through account settings or at support@pocketbay.com. We may need to verify your identity and authority.
Premium bulk export, professional organization or migration services may be commercial offerings, but your basic statutory data rights — access, copying, correction, deletion and others — are not refused on the ground that you have not purchased them.
You may choose not to provide certain information, but this may prevent registration, deployment, payment, payout, KYC/KYB, support or use of certain features. You may unsubscribe from marketing emails; service, billing, security, legal and transactional notices generally cannot be unsubscribed because they are necessary to provide the Service.
This policy may be updated. Material changes will be notified through the website, dashboard, email or other reasonable means. Your continued use after an update means you have reviewed the updated policy. The Chinese version controls; if the English version conflicts with the Chinese version, the Chinese version prevails unless otherwise agreed in writing.
Project Memory and Public Genome
Project Memory is optional. Before first upload or model processing, PocketBay describes the source, scope, purpose and necessary recipients and obtains a separate choice. Full Memory and private derivatives remain private and are not distributed with Licensed Copies; Public Genome contains only authorized, reviewed project characteristics. See the Project Memory and Genome Data Policy for details.