Documentation

Straight answers.

Everything here is also in the documentation. If a question's missing, ask us — good questions become new entries.

Candor Deploy

Do I need to know servers, Docker or Linux?

No. Connect a GitHub repo and we work out how to build it. Your app needs to do one thing: listen on the port we give it in PORT (8080 by default). If you already have a Dockerfile you want us to use, you can opt in.

Will my app work?

Node.js, Python, Go, Ruby, PHP, Rust and static sites are detected automatically. Anything else can bring its own Dockerfile. Builds get up to 2 CPU cores, 2 GB of memory and 15 minutes.

Is my app safe here?
  • Each app runs in its own container with its own memory.
  • Databases can be reached only from your own apps, never from the internet.
  • Settings are stored as secrets and never printed in logs.
  • We check that every push notice really came from GitHub before we build.
  • DDoS filtering sits in front of every app, and you can add rate limits and IP rules.
  • Report a security problem through our disclosure policy at /security/.
What happens if Candor goes down?
  • Your apps run on our servers, so if we have an outage, your apps are affected until we fix it. There’s nothing for you to do, because fixing it is our job.
  • We promise 99.9% monthly uptime, and if we miss it, you get a credit of 10–100% of that month’s fee (SLA).
  • A failed deploy never takes your site down, because the old version keeps serving.
  • Each app runs as a single copy today, so if it crashes or its server fails, it’s down until it restarts.
Where does it run?
  • On servers we rent from OVHcloud and run ourselves.
  • Your apps, your databases and the platform itself run in OVH US-East (Vint Hill, Virginia).
  • If your data must stay in one country, check the subprocessors page or ask us.
What do you store?
  • Your account and billing details. Card numbers stay with Stripe, never with us.
  • Your projects and their settings.
  • Your environment variables, kept as secrets.
  • Build logs for each deploy, trimmed to the last 2,000 lines.
  • Your databases and files, as part of running your app.
  • Your code itself stays in your GitHub repo. We fetch it fresh for each build.
Who else sees my data?
  • Stripe for payments, Cloudflare for DDoS filtering if you choose it, and OVHcloud for the servers. Every company that touches your data is listed on the subprocessors page.
  • We don’t run third-party analytics on our site.
How do I leave?
  • Your code is a normal GitHub repo, built with an open build tool or your own Dockerfile. Nothing about it is Candor-shaped.
  • Download your Postgres and MySQL databases as SQL anytime; your code stays in your GitHub.
  • Cancel from the portal any time.
Who answers when I need help?

An engineer who runs the platform, not a script reader. A site-down ticket gets a first reply within 1 hour, 9am–6pm ET on weekdays. Everything else gets a reply within one business day. We never upsell in a support chat.

Billing & Renewals

Will my price go up at renewal?

Your rate stays the same unless we notify you of a change at least 30 days before your renewal, as described in section 3 of our Terms of Service. This is not a permanent price guarantee.

Do you have a money-back guarantee?

Yes — every new hosting plan comes with a 30-day money-back guarantee. If you’re not satisfied for any reason within 30 days of your initial purchase, contact us and we refund your hosting fees in full. Domain registrations are the exception (the fee goes to the registry immediately and the domain remains yours to transfer). Details: Refund Policy.

How do I cancel?

From the client area, or by emailing hello@candorhost.com from your account’s email address. By default service continues through the end of your paid billing period; you can also request immediate cancellation. See the Refund Policy. Details: Cancellation.

Plans & Limits

Can I change plans later?

Yes — upgrade or downgrade from the client area at any time, with renewals subject to the notice provisions in section 3 of our Terms. If you’re not sure what fits, ask in chat; per Candid Support we don’t upsell inside support conversations, so you’ll get a straight answer.

SSL & Security

Is SSL included?

Yes — free Let’s Encrypt certificates are issued and renewed automatically for every site and domain alias. HTTPS is enforced: plain-http requests redirect, and our own properties ship HSTS.