Privacy Policy

Last updated: August 4, 2026

1. Overview

This Privacy Policy explains how Kasmada collects, uses, and shares information when you use our websites, APIs, and hosting platform (the “Service”).

2. Information we collect

• Account data — email address, authentication credentials, and profile settings you provide
• Operational data — apps you create, config vars, deploy metadata, build logs, and cluster health signals needed to run the Service
• Security artifacts — API token metadata (not full secrets after creation), SSH public keys, and access logs
• Usage data — approximate resource usage, request metadata, and diagnostic events for reliability and abuse prevention

3. How we use information

We use information to:

• Provide, secure, and improve the Service
• Authenticate you and process deploys and builds
• Monitor platform health and investigate incidents
• Communicate about account, security, and product changes
• Comply with law and enforce our Terms

4. Sharing

We do not sell personal information. We may share data with infrastructure providers that process it on our behalf (for example compute, storage, email), with advisors under confidentiality, or when required by law. Aggregated or de-identified metrics may be used for operations and product planning.

5. Retention

We retain account and operational data while your account is active and for a reasonable period afterward for backups, audits, and legal obligations. Soft-deleted apps may be recoverable for a limited window before permanent removal.

6. Security

We use administrative and technical measures appropriate to a hosting platform, including access controls and encrypted transport where applicable. No method of transmission or storage is fully secure; protect your tokens and keys carefully.

7. Your choices

You can update account email and password in Settings, revoke API tokens, and remove SSH keys. You may request account deletion by contacting support. Some logs may be retained for security and compliance after deletion.

8. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children.

9. International processing

Depending on where we operate infrastructure, your information may be processed in regions other than your own. We take steps consistent with applicable law when transferring data.

10. Changes

We may update this Policy and will post the revised version here with an updated date. Continued use of the Service after changes means you acknowledge the updated Policy.

11. Contact

Privacy questions: [email protected].

Terms of Service / Privacy Policy