Privacy Policy
Version: August 2026
English translation: the German version is the legally authoritative one. Full notice at the foot of this page.
Related documents: use of the services is governed by our Terms of Service; for hosted services, the Data Processing Agreement (DPA) applies.
1. Controller
Lanisce, razvoj programske opreme, d.o.o.
Trnovo 44A, 5252 Trnovo pri Gorici, Slovenija
E-mail: privacy@kubehz.io
2. What data we collect
2.1 Registration and user account
- E-mail address: for account creation and communication
- Password: stored as a cryptographic hash (bcrypt)
2.2 Cluster metadata
- Cluster name, Kubernetes version, node count, component status
- Heartbeat data (for registered/managed clusters)
- No workload data, no container images, no secrets
2.3 Access logs
- IP address: stored in server access logs for 7 days
- User agent, timestamps: for security and error analysis
2.4 Payment data
- Payments are processed by an external payment provider
- We do not store credit card numbers or bank details
- We store: the chosen contribution, payment status, timestamps
3. Legal basis
| Processing | Legal basis |
|---|---|
| Account creation, cluster provisioning | Art. 6(1)(b) GDPR (performance of a contract) |
| Access logs, security | Art. 6(1)(f) GDPR (legitimate interest) |
| E-mail notifications | Art. 6(1)(b) GDPR (performance of a contract) |
4. Recipients
| Recipient | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting infrastructure | Germany (FSN1/NBG1) |
| Revolut Bank UAB | Card payment processing for paid tiers | Lithuania (EU) |
| MINDBAZ SAS (“Sweego”) | Sending account and notification e-mail (delivery of the message and its recipient address) | France (EU) |
No recipients other than those listed above. No Google Analytics. No advertising networks. No social media trackers.
5. Retention periods
| Data | Retention period |
|---|---|
| Account data | As long as the account is active |
| Cluster metadata | As long as the cluster is registered |
| Access logs | 7 days |
| After account deletion | All data deleted, planned within 14 days, at the latest within 30 days |
| Backups (disaster recovery only) | Data deleted from the live systems can remain in encrypted backups for at most 90 days; backups are read only to restore the service, and deletions are re-applied on restore |
6. Your rights
You have the following rights under the GDPR:
- Access (Art. 15): what data we have stored about you
- Rectification (Art. 16): correction of inaccurate data
- Erasure (Art. 17): deletion of your data
- Restriction (Art. 18): restriction of processing
- Data portability (Art. 20): export of your data
- Objection (Art. 21): objection to processing
Contact for data protection requests: privacy@kubehz.io
7. Automated decision-making
No automated decision-making or profiling takes place.
8. Cookies
The website sets no cookies. Signing in and the dashboard store the following:
i18n_redirected is set on your first visit from your browser’s language, before you choose one. No tracking cookies. No advertising cookies. No outside company sets storage on any kubehz domain. No cookie banner required (ePrivacy Directive / ZEKom-2: storage strictly necessary for a requested service).
More information: Cookie Policy
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority:
Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia)
Dunajska cesta 22, 1000 Ljubljana, Slovenija
https://www.ip-rs.si
This is an English translation provided for convenience. The German version of this privacy policy is authoritative. For questions, contact privacy@kubehz.io.