Privacy Policy

How we collect, use, and protect your data

Introduction

Kubeadapt ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Kubernetes cost optimization platform.

Last updated: December 2, 2025

Information We Collect

Cluster Performance Data

We collect the following metrics from your Kubernetes clusters:

  • Resource utilization metrics (CPU, memory, storage)
  • Pod and node configurations
  • Namespace-level resource allocation
  • Cost-related metrics and billing data
  • Deployment and workload metadata

Account Information

When you create an account, we collect:

  • Name and email address
  • Company information
  • Authentication credentials (securely hashed)
  • Payment information (processed through secure third-party providers)

Usage Data

We automatically collect certain information when you use our service:

  • Log data (IP address, browser type, access times)
  • Device information
  • Feature usage patterns
  • Performance metrics

How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide and maintain our cost optimization platform
  • Recommendations: To generate personalized cost optimization insights and recommendations
  • Platform Improvement: To analyze usage patterns and improve our service
  • Communication: To send service updates, security alerts, and support messages
  • Support: To respond to your requests and provide customer assistance
  • Security: To detect and prevent fraud, abuse, and security incidents

Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA)
  • Security Audits: Regular security assessments and penetration testing
  • Monitoring: 24/7 security monitoring and incident response
  • Compliance: SOC 2 Type II certified infrastructure

Data Retention

We retain your data according to the following policies:

  • Account Data: Retained while your account is active and for 90 days after deletion
  • Metrics Data: Retained for 13 months for trend analysis
  • Backup Data: Retained for 30 days in secure backups
  • Legal Requirements: May be retained longer if required by law or legal obligations

You can request data deletion at any time by contacting our support team.

Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

  • Service Providers: Trusted partners who assist in service delivery (hosting, analytics)
  • Legal Obligations: When required by law, court order, or government regulations
  • Business Transfers: In connection with mergers, acquisitions, or asset sales

All third parties are bound by strict confidentiality agreements and security requirements.

Your Rights

Under GDPR and CCPA, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Correct inaccurate or incomplete data
  • Deletion: Request deletion of your personal data ("right to be forgotten")
  • Portability: Export your data in a machine-readable format
  • Objection: Object to processing of your data for certain purposes
  • Restriction: Request restriction of data processing
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@kubeadapt.io

Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and preferences
  • Analyze usage patterns and improve performance
  • Provide personalized content and features

You can control cookie preferences through your browser settings. See our Cookie Policy for more details.

International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Privacy Shield frameworks where applicable
  • Equivalent data protection safeguards

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

  • Email notification to your registered address
  • Prominent notice on our platform
  • Updated "Last Modified" date

Contact Us

For questions about this Privacy Policy or our data practices:

Kubeadapt Privacy Team

Email: privacy@kubeadapt.io

General: authors@kubeadapt.io