Privacy Policy

Toolbox Anonymous offers NeoSpaxe. Dodo Payments acts as our merchant of record and collects your billing identity and payment method when you add one.

What NeoSpaxe Stores

To authorize preview stages and track stack life billing, NeoSpaxe stores the bare minimum metadata required:

• The Dodo Payments customer email associated with your license.
• A one-way cryptographic hash of your license key (NEOSPAXE_LICENSE_KEY).
• The stage name, generated stack code, heartbeat timestamps, and fee record for each stack life.

What NeoSpaxe Never Stores

We built NeoSpaxe specifically so you don’t have to trust a third-party SaaS with your cloud keys:

• We do not store your raw license key in plaintext.
• We do not receive, inspect, or store a copy of your AWS credentials (AWS_ACCESS_KEY_ID or AWS_SECRET_ACCESS_KEY).
• We do not store your application source code or a directory of your teammates.

CI Execution & Transactional Email

The NeoSpaxe engine image (ghcr.io/toolboxanonymous/neospaxe-engine:latest) runs directly inside your CI provider. Transactional emails (such as deploy/remove notices or 24-hour and 72-hour open stack reminders) are sent strictly to the verified customer email Dodo Payments has on file for that license—a CI workflow cannot choose or override the recipient address.