Privacy policy

1. Data we collect

• Account data: your email address, a cryptographically hashed password, account status and creation date.
• Billing data: order and payment records, including the payment provider's transaction reference and the amount and currency. We never receive or store your full card number.
• Job data: filenames, file sizes, checksums, processing status and the results produced for you.
• Technical data: session records, IP address and browser user agent, recorded for authentication, security and rate limiting.
• Support data: messages you send us and our replies.

2. Uploaded files

Files you upload are stored in private object storage under unguessable random keys. They are readable only by the account that uploaded them and by the service components that must handle them. Files are never served directly from the public web root and are never published.

To produce a result, your file is transmitted to our third-party decoding provider, PHPDecode (phpdecode.site), which processes it and returns the recovered source. That transfer is inherent to the service: if you do not want a file processed by a third-party service, do not upload it.

Uploaded PHP is never executed by Dezender.

3. Retention and deletion

• Uploaded input files are deleted after a short retention window once processing has finished.
• Recovered results are deleted at the end of the retention window shown on the job page, currently 240 hours after a job completes.
• You can delete a job's stored files sooner by removing the job from your dashboard.
• Expired sessions, used authentication tokens and rate-limit counters are purged automatically.

4. Why we process data (lawful bases)

• To perform our contract with you: providing accounts, processing jobs, delivering results and billing.
• For our legitimate interests: securing the service, preventing abuse, diagnosing faults and keeping records of privileged actions.
• To comply with legal obligations: keeping financial records where the law requires it.

5. Sharing

We share data only with the processors needed to run the service: the decoding provider, the payment provider, the object storage host, the transactional email provider, and the hosting infrastructure. Each is used for the specific function described here.

We do not sell personal data, and we do not publish customer filenames or job results for marketing or search optimisation.

6. Security

Passwords are stored as scrypt hashes with per-user salts. Session tokens are random and stored only as hashes. Uploads are content-validated, archives are inspected for traversal, symlinks and decompression bombs, and access to another customer's job is refused on the server.

7. Your rights

Subject to applicable law you may request access to your personal data, correction of inaccurate data, deletion of your data, restriction of processing, or a portable copy of the data you provided. Contact support@dezender.in and we will respond within the period required by law.

If you believe we have handled your data unlawfully you may complain to your local data protection authority.

8. Changes

Material changes to this policy will be published here with a new effective date.