Royat Deploy is operated by مؤسسة رؤيات (Royat). Contact: support@royat.io. We aim to reply within one business day.
Account: your name, email address, and a hashed password. We never
store your password itself.
Payment: the amount, currency, date, plan and a payment reference. Card
details are entered on the payment provider's own form and never reach our servers. We do
not receive, process or store card numbers or security codes.
Operational: HTTP request logs at the edge, and an authorisation audit log
recording who called which API endpoint and whether it was allowed. These record a token's
database identifier, never the token itself, and never cookies or authorisation headers.
Your content: whatever you deploy and store, which we hold on your behalf
and do not inspect except as needed to run or restore the service.
To run the service, to bill you, to keep the platform secure and abuse-free, and to meet legal obligations.
Our payment provider (Royat Pay, on MyFatoorah) receives the details needed to take a payment. Our infrastructure provider hosts the servers. We do not sell personal data and we do not use it for advertising.
| Data | Retention |
|---|---|
| Account record | While the account exists |
| Payment records | Kept for accounting purposes after the account closes |
| Edge and audit logs | 90 days |
| Platform backups | Rotated; older copies are deleted automatically |
Deleting your account removes your applications, databases and their volumes. Payment records are retained for accounting. Copies inside a backup disappear as that backup rotates out. Write to support@royat.io to request access to, correction of, or deletion of your personal data.
Traffic is encrypted with HTTPS. Secrets are encrypted at rest. Access to production is restricted and audited. No system is perfectly secure; if a breach affects you, we will tell you.