Privacy Policy

1. Information We Collect

We collect the minimum information necessary to provide the Service:

• Phone number — used for OTP authentication. Stored as a hashed value.
• Wallet address — used for SIWE authentication and on-chain deposit verification.
• Deployment metadata — namespace names, container image references, domain configurations, and deployment settings.
• Billing data — credit balances, transaction history, and payment records.
• API usage logs — API request metadata for security, debugging, and abuse prevention.

2. How We Use Your Information

• Authenticate your identity and secure your account
• Provision and manage infrastructure resources
• Process payments and maintain billing records
• Detect and prevent abuse or fraudulent activity
• Debug issues and improve the Service
• Communicate service updates or critical notices

We do not sell your personal information. We do not use your data for advertising or marketing purposes.

3. Third-Party Services

We use the following third-party services to operate the platform:

• Twilio — SMS delivery for OTP verification. Your phone number is shared with Twilio for this purpose.
• Payment processor — Credit card payment processing. Payment details are handled entirely by our payment processor and are not stored on our servers.
• Cloudflare — DNS, CDN, and SSL certificate provisioning for deployment domains.
• Amazon Web Services — Infrastructure hosting (EKS, EC2, EBS). Deployments run on AWS infrastructure in the US East (Virginia) region.

Each third-party service has its own privacy policy. We encourage you to review them.

4. Blockchain Data

If you authenticate via wallet or make on-chain deposits, your wallet address and transaction data are publicly visible on the blockchain. This is inherent to blockchain technology and outside of our control. We store wallet addresses and transaction hashes to verify deposits and maintain billing records.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on AWS infrastructure. We implement industry-standard security measures including encrypted connections (TLS), Kubernetes network policies, and role-based access control. API keys are stored as hashed values — the original key is shown only once at creation.

6. Data Retention

• Account data is retained as long as your account exists.
• Deployment data (container volumes) is deleted 1 day after service suspension due to zero balance. Deployment configurations are retained.
• Billing records are retained for accounting and legal compliance purposes.
• API logs are retained for up to 90 days for security and debugging purposes.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to legal retention requirements)
• Export your deployment configurations

To exercise these rights, contact us at [email protected].

8. Cookies & Tracking

We use essential cookies for authentication session management. We do not use third-party analytics, advertising trackers, or non-essential cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at [email protected].