Legal

Privacy Policy

Last updated: 4 May 2025

1. Who we are

Deltio is a service operated by Osabee Limited, a company incorporated in England and Wales (Company No. 8401796), with registered office at 12 Helmet Row, London EC1V 3QJ, United Kingdom ("we", "us", "our").

We are the data controller for personal data processed in connection with your use of deltio.io and app.deltio.io (the "Service").

Contact: privacy@deltio.io

2. Data we collect

2.1 Account data

When you register, we collect your name, email address, and password (stored hashed). We also record your language and timezone preferences.

2.2 Usage data

We collect the website domains you add to the Service, sitemap URLs, SEO scan results, and server-status checks. This data belongs to you and is processed solely to deliver the Service.

2.3 Billing data

Payments are processed by Stripe, Inc. We receive a customer reference and subscription status from Stripe; we do not store card numbers or full payment details on our servers.

2.4 Technical data

We may collect IP addresses, browser type, and access timestamps in server logs for security and debugging purposes. These are retained for up to 30 days.

2.5 Communications

If you contact us via email or our support chat, we retain that correspondence to resolve your query.

3. How we use your data

  • To provide, maintain and improve the Service
  • To send you monitoring alerts and notifications you have configured
  • To process your subscription and send receipts
  • To respond to support requests
  • To detect and prevent abuse or security incidents
  • To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Legal basis (UK GDPR)

  • Contract performance — processing necessary to deliver the Service you subscribed to
  • Legitimate interests — security monitoring, fraud prevention, service improvement
  • Legal obligation — retaining billing records as required by law
  • Consent — marketing communications (you may opt out at any time)

5. Data sharing

We share data only with sub-processors necessary to operate the Service:

  • Supabase Inc. — database and authentication (EU region)
  • Stripe, Inc. — payment processing
  • Resend Inc. — transactional email delivery
  • Crisp IM SAS — customer support chat
  • Hetzner Online GmbH — infrastructure for our web-parsing service

All sub-processors are bound by data processing agreements and appropriate safeguards.

6. Data retention

We retain your account data for as long as your account is active. After account deletion we purge personal data within 30 days, except where retention is required by law (e.g. financial records for 6 years under UK tax law).

Monitoring data (sitemap snapshots, SEO results, server status) is retained within the Service according to our rolling limits (7 snapshots, 2 SEO scans, 24 status checks per site) and deleted automatically when superseded.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (without affecting prior processing)

To exercise any right, email privacy@deltio.io. We will respond within 30 days. You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use industry-standard measures including TLS encryption in transit, encrypted storage, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. International transfers

Some sub-processors are based in the United States. Transfers are made under Standard Contractual Clauses or equivalent safeguards approved under UK adequacy regulations.

10. Children

The Service is not directed to children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy. Material changes will be notified by email or via an in-app notice at least 14 days before taking effect.

12. Contact

Osabee Limited
12 Helmet Row, London EC1V 3QJ, UK
privacy@deltio.io