Privacy Policy

1. The short version

Kubexer is a tool you point at your own Kubernetes clusters using your own credentials; the desktop app communicates directly with your clusters from your device. We collect only the minimal account information needed to run your account and billing, we do not sell your personal data, and your kubeconfigs and cluster credentials are encrypted on your device. If you enable sync, we store only an encrypted copy that we cannot read — we cannot see your clusters or their contents.

2. Information we collect

• Account information: when you register we store your name, email address, optional mobile number, account type/role, account status, and account audit timestamps (created, updated, and deleted dates). Each account has a system-generated unique identifier. We do not collect personal information beyond these account fields.
• Authentication: we use a cookie containing a signed token with your identifier, email, name, role, and an expiry time, to keep you signed in.
• Billing information: payments are processed by our payment provider, Stripe. We never receive or store your full payment-card details. We store only billing records and Stripe references (customer, invoice, and payment identifiers) needed to manage your subscription.
• Optional kubeconfig sync: if you choose to sync kubeconfigs across your devices, we store an encrypted copy of each kubeconfig you select, a label you assign, and a one-way fingerprint (hash) used only to detect changes. The kubeconfig content is encrypted such that Kubexer cannot read it or use it to access your clusters.
• Usage & device data: like most websites, we and our analytics provider (Google Analytics) may collect standard technical data such as IP address, browser and device type, pages viewed, and timestamps, to operate and improve the Service.
• Security data: we use Google reCAPTCHA on sign-in and certain forms to prevent abuse; that is subject to Google's terms.

3. What we do NOT collect or access

• We do not read your kubeconfigs or cluster credentials, and we cannot access your clusters.
• Cluster resources you view in the desktop app are fetched directly from your clusters to your device; that data is not routed through or stored on Kubexer's servers.
• We do not store payment-card numbers.
• We do not sell or rent your personal information.
• We do not collect personal information beyond the account fields listed above.

4. How we use information

To create and manage your account; authenticate you; provide, maintain, and improve the Service; process subscriptions and payments; provide support; ensure security and prevent abuse; and comply with legal obligations.

5. Legal bases

Where applicable, we process data to perform our contract with you, for our legitimate interests in operating and securing the Service, to comply with law, and/or with your consent (which you may withdraw at any time).

6. How we share information

We share data only with service providers acting on our behalf, including Stripe (payments), Google (analytics and reCAPTCHA), and GitHub (which hosts desktop application downloads). We may disclose information where required by law or to protect our rights. We do not sell personal data.

7. Data retention

We keep account and billing data for as long as your account is active and as needed for legal, tax, and accounting purposes. Deleted records may be retained in soft-deleted or backup form for a limited period.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To request deletion, see our Data Deletion Policy or contact us. We will respond as required by applicable law.

9. Security

We use technical and organizational measures to protect data, including encryption of synced kubeconfigs and signed authentication tokens. However, no method of transmission or storage is completely secure, and you are responsible for safeguarding your credentials, devices, and account.

10. Cookies

We use a strictly necessary authentication cookie and, in production, analytics cookies. You can control cookies through your browser settings.

11. International transfers

Your information may be processed in countries other than your own; where required we rely on appropriate safeguards.

12. Children

The Service is not directed to, and may not be used by, anyone under 18 (or the age of majority in your jurisdiction). We do not knowingly collect data from children.

13. Changes to this Policy

We may update this Policy; material changes will be posted here with a new "Last updated" date. Continued use of the Service means you accept the updated Policy.

14. Contact

Questions about this Policy can be sent to privacy@kubexer.com ([Legal Entity Name]).