Privacy Policy

Data we hold

• ->Account data: your email address and name, plus a PBKDF2-hashed password. We never store plaintext passwords.
• ->Service data: the domains you submit for each subscription and the onboarding method you chose.
• ->Hosting credentials: when you grant hosting access, those credentials are stored encrypted at rest in our Cloudflare D1 database and are used only to perform the work you subscribed to.
• ->Billing metadata: your Whop membership ID and subscription status. Card numbers and payment details never touch our systems — Whop handles those.

Who touches your data

• ->Cloudflare: hosts this application, the database, and the DNS/CDN configuration we manage for your domains. Operational data transits and is stored on Cloudflare infrastructure.
• ->Whop: processes payments and manages subscription state. Their privacy policy governs payment data.

We do not use advertising trackers, analytics beacons, or third-party cookies. The only cookie we set is the session cookie that keeps you logged in.

How long we keep it

Account and service data is kept while your account is active. When you cancel a subscription, its configuration is wound down at the end of the billing period. Hosting credentials are deleted when the associated service request is closed or when you ask us to delete them, whichever comes first.

Access, correction, deletion

You can export or delete your data at any time by emailing support@demdexus.com from your account address. Deletion removes your account, sessions, and service records; we may retain billing records where the law requires it. We answer requests within 30 days.

This policy

If this policy changes materially, we notify the email address on your account at least 14 days in advance. The current version is always at demdexus.com/privacy.