Shipown is a cross-platform Electron desktop application that deploys and operates web applications on Linux servers you own. It gives you the workflow of a managed deployment platform — connect a source, build, get a live URL, roll back — while the servers and the data stay yours.

How is Shipown different from Vercel or Netlify?

Managed platforms run your app on their runtime and their account. Shipown deploys to a server you already rent or own, over plain SSH, and installs no agent to do it. You keep the smooth workflow without handing over the infrastructure.

What can it deploy today?

Three runtimes. Node applications run by PM2 — Next.js, Nuxt, Remix, SvelteKit, NestJS, Fastify and plain Express. Static sites served by Nginx, including Vite with React or Vue, Astro and plain HTML. And Docker, from a Dockerfile or a compose file, which covers any language that ships in a container. Python, Go, Rust, PHP, Ruby, Java and .NET have no native runtime here; deploy them in a container.

Does Shipown need Docker?

No. Node applications run directly under PM2 and static sites are served by Nginx, on a server with no Docker at all. If you do use Docker, Shipown deploys to it as well — a Dockerfile or a compose file, with releases, health checks and rollback — and manages the containers already on the server: every container inspected, published and internal ports mapped, CPU and memory gauges, crash loops called out, start, stop, restart, a shell inside the container, and its logs. It can also install Docker on a server that has none.

Where does it deploy to?

A Linux server you can reach over SSH — a VPS, a cloud VM, or a box in your office. Ubuntu, Debian, the RHEL family and Alpine are handled. Your own computer is where a project comes from, not somewhere Shipown deploys to.

Are my SSH keys or environment variables uploaded anywhere?

No. SSH private keys, passwords, passphrases, environment variable values, source code and project files never leave your machine for licensing or telemetry. Credentials are held by the Electron main process and are never exposed to the interface. The one exception is one you opt into: the AI terminal sends its conversation to the AI provider you pick.

Where does the AI terminal send my server’s data?

Only to the provider you choose (DeepSeek, Anthropic Claude, or OpenAI), and only while you actively interact with it. The AI operator sends your prompt and the terminal outputs of the commands it runs under your own encrypted API key. Shipown does not intercept or store this telemetry. Destructive commands (reboots, rm -rf, firewall changes, stopping SSH) are never executed automatically without your explicit confirmation.

Can I roll a bad deployment back?

Yes. Every deploy lands in its own release directory, and the live pointer moves only after the build and the health check pass. A deploy that fails restores the previous release by itself, and you can switch back to an earlier release later from the app.

Does it deploy automatically when I push?

No. Shipown tells you when a branch has moved ahead of what a server is running, and how many commits are waiting, but a person still presses deploy. Automatic deployment on push is not part of this beta.

Is Shipown open source?

No. Shipown is a commercial product and its source is not published. What runs on your servers is plain SSH and shell — nothing is installed to phone home — but the desktop application itself is licensed, not open.

Is Shipown free, and how do I get access?

The beta is invite-only. An administrator issues a revocable licence key with an expiry and a device limit — typically two machines per key. Activation is checked server-side, and keys can be extended, revoked, or have a device slot freed.

Which platforms does the desktop app run on?

Windows, as an .exe installer, and Linux, as a .deb for Debian and Ubuntu. Both come from the same download server the app updates from, so the file on the invite page and the file an update fetches are the same file. macOS is not published yet.

Last updated 15 September 2026

Privacy policy

Shipown is a desktop app that deploys to servers you own. We collect what licensing, payments and support need, and nothing from your servers or your code. This page lists all of it.

We collect

Your licence details, the email and contact details you give us, basic device information, and hashed hardware identifiers used only for licensing.

We never collect

SSH keys or passwords, environment variable values, source code, project files, or what runs on your servers.

We never

Sell your data, show you ads, or use tracking or advertising cookies.

1. What we collect and why

Data	Where it comes from	Why
Licence key	Desktop app, when you activate	To check that the key is valid. Our server stores only a hash of it.
Random installation ID	Desktop app	To tell your installations apart and enforce the device limit on your licence.
Hashed hardware identifiers	Desktop app, when you activate	To count devices and to allow one free trial per computer. See “Hardware identifiers” below.
App version, operating system (Windows, macOS or Linux), CPU architecture	Desktop app	Support, compatibility and deciding which update to offer.
Activation and last-seen times	Desktop app	To show the devices on your licence and end sessions that are no longer used.
Seat email and name	Desktop app, on team licences only	To know which person holds each seat.
Name, email, mobile number, address, company	Invite form on this website	To issue your trial key and contact you about it.
Name, email, company	Checkout on this website	To issue your licence and send it to you.
A bug report or suggestion you send, with the app version and platform it came from	Desktop app, only when you press Send report	To fix what you told us about, and to reply to you. You are not asked for an address: an activated copy sends the last four characters of its licence key, which is how we know whose report it is and where an answer goes. Nothing about your servers is sent with it: no hostnames, no SSH users, no keys, no project names.
Order ID, payment ID, amount, payment status	Razorpay or Dodo Payments, whichever took the payment	To match a payment to its licence, and for accounting and tax.
IP address	Installer downloads	To limit downloads to 8 per address every 24 hours. It is not linked to your licence.
Page speed measurements	This website	To keep the site fast. Only the measurement and the page path; no cookies or identifiers.

2. Hardware identifiers

When you activate a licence, the desktop app reads a few identifiers that belong to your computer rather than to the app, so they stay the same if you reinstall:

Windows: the motherboard UUID, the motherboard serial number, and the Windows installation ID (MachineGuid).
macOS: the hardware UUID and the serial number.
Linux: the motherboard UUID and serial number where the system allows reading them, and the machine ID in /etc/machine-id.

Before anything leaves your computer, each value is combined with a fixed Shipown value and passed through SHA-256, a one-way hash. We receive only the hashes. We cannot turn them back into serial numbers. Placeholder values that some manufacturers ship on many machines are ignored.

We use them for two things only:

counting the devices on your licence, and
allowing one free trial per computer. If a computer has already used a free trial, a new trial key will not activate on it, even with a different email address. Paid and team licences are not affected.

They are not used for advertising or to follow you anywhere else. The app sends them only when it activates a licence, including when it activates again after losing its session. If you think a computer was blocked by mistake, for example one you bought second-hand, email us.

3. What stays on your computer

Server profiles, SSH keys and passwords, your GitHub connection, AI provider keys and your licence session are stored in the app’s data folder on your computer. They are not sent to us. Secrets such as the licence session and AI keys are encrypted with your operating system’s secure storage when it is available.

4. Services the app contacts for you

Some features connect straight from your computer or your server to another service. We do not see that traffic, and that service’s own privacy policy applies:

Your servers, over SSH, to deploy and manage your apps.
GitHub, if you connect an account or deploy from a repository.
Your AI provider (Anthropic, OpenAI or DeepSeek, whichever key you add), if you add your own API key and use the AI terminal. The conversation, including command output from your server, goes to that provider under your key.
Docker’s download servers, from your server, if you ask the app to install Docker.

The app also contacts our licence and update server at eztooflow.in. The update check sends no personal data beyond what any web request carries, such as your IP address.

5. Payments

Payments in India are handled by Razorpay. Payments from anywhere else are handled by Dodo Payments, who sell the licence as merchant of record — they bill you in their own name, add the sales tax your country charges and send you the invoice.

Either way, your card, UPI or bank details go to them and never reach us. What we are told is the order or session ID, the payment ID, the amount, the currency and whether the payment succeeded. For an international payment we are also told the country you gave, because that is what decides the tax on your invoice.

6. Who else sees your data

Razorpay, to take payments made in India.
Dodo Payments, to sell and invoice licences bought from outside India.
The hosting providers that run our servers.
Authorities, where the law requires it.

We do not sell or rent personal data to anyone.

7. How long we keep it

Licence, device and seat records, and the history of changes to a licence: while the licence exists.
Hashed hardware identifiers from a free trial: after the trial ends too, because that is what stops the same computer starting another trial. You can ask us to delete them; that computer is then treated as new.
Invite form details: with the licence they created.
Purchase records: as long as Indian tax and accounting law requires.
Download IP addresses: only for the rolling 24-hour download limit.

8. Your rights

You can ask us for a copy of your data, to correct it, or to delete it. Email hello@pushops.dev from the address on your licence. We reply within 30 days. Deleting your data ends any licence tied to it. These rights apply under India’s Digital Personal Data Protection Act, 2023, and under the GDPR where it applies to you. You can also complain to your data protection authority.

9. Security

Traffic between the app, this website and our servers uses HTTPS. Licence keys are stored only as hashes. Licence sessions are signed so they cannot be forged, and access to the admin tools is restricted.

10. Children

Shipown is a tool for developers and is not meant for anyone under 18.

11. Changes

When this policy changes, the date at the top changes. If a change affects what the app collects, we will say so in the app’s release notes.

12. Contact

Questions or requests: hello@pushops.dev. See also pricing and downloads.