Skip to content
LeafDot
Find a name

Privacy policy

Last updated 22 September 2026

What we collect, why, and who sees it. We collect only what's needed to register and look after your domains.

  1. 01What we collect

    Account details (name, email, phone, address) you give us; registrant, admin and technical contact details for each domain; billing records; and support conversations.

    For Deploy: the repositories you connect (accessed only to build and deploy them), build output, environment variables (encrypted at rest), and request logs for your deployments, kept for a limited period for debugging and abuse prevention.

    Basic technical data such as IP address and browser type when you use our site or dashboard, used for security and to keep the service running.

  2. 02Why we collect it

    To register and manage your domains, build and serve your deployments, take payments, send invoices, renewal reminders and service emails, answer support requests, prevent fraud and abuse, and meet legal and registry obligations.

  3. 03Who we share it with

    Registries and upstream registrars, which need registrant data to register a domain. Infrastructure and CDN providers that run and serve your deployments, under confidentiality obligations. Payment processors (SSLCommerz), which handle card and mobile-banking payments — we never see or store your full card details. Authorities, when legally required.

    We do not sell your personal data.

  4. 04Public WHOIS

    Some registrant data may appear in public WHOIS/RDAP lookups, depending on the registry. Where the registry allows it, WHOIS privacy replaces your personal details with proxy details. Country-code extensions like .com.bd follow their registry's publication rules.

  5. 05Emails we send

    Service emails (invoices, receipts, renewal reminders, security notices) are part of the service. They may contain tracking links used to confirm delivery and engagement, for example whether an invoice was viewed.

  6. 06How long we keep it

    For as long as your account is active, and afterwards for as long as registry rules and financial record-keeping laws require.

  7. 07Your choices

    You can view and update most information from your dashboard. To request a copy or deletion of your data, email hello@leafdot.com. Some data cannot be deleted while a domain is registered, because the registry requires it.

  8. 08Security

    Data is transmitted over HTTPS, sensitive credentials are encrypted at rest, and staff access is limited to what their role requires.

Questions about this policy? Email hello@leafdot.com.