How we handle your data.

• The marketing site uses Google Analytics — only after you click Accept in the consent banner. Decline and nothing is sent to Google.
• The Kuberly product runs inside your cloud account. Your application data, secrets, and infra state never leave it. We operate via a scoped IAM role you can revoke.
• We don't sell data. We don't run ad tracking. We don't share anything with third-party data brokers.
• You can email [email protected] at any time to access, export, or delete data we hold about you.

Nowhere on our side. That's the architecture, not a marketing line. When you become a customer, Kuberly provisions infrastructure inside an AWS, GCP, or Azure account that you own. The OpenTofu + Terragrunt code is committed to your Git provider (GitHub, Bitbucket; GitLab coming). Secrets live in your cloud's native secrets manager (AWS Secrets Manager, GCP Secret Manager, Azure Key Vault). Logs and metrics live in your VPC.

Our autopilot operates the platform via a least-privilege, cross-account IAM role you grant us. The role can be revoked at any time from your cloud console — that revokes our access immediately and irreversibly. We do not maintain shadow copies of your state, logs, or application data outside your account.

The marketing site at https://kuberly.io can collect:

• Analytics events — page views, scroll depth, and click events via Google Analytics 4 (measurement ID set per environment). Only after you Accept the consent banner. Your IP address is anonymized by Google. Decline and the GA loader never even downloads.
• Contact email — when you email [email protected] we keep the email so we can reply and follow up.
• Demo bookings — when you click "Book a demo" you're routed to a HubSpot scheduling page. HubSpot collects whatever fields you fill in (name, email, company). We use that data only to run the meeting and follow up. HubSpot's privacy policy applies on their domain.
• Server logs — our hosting (AWS) records standard access logs (IP, user-agent, timestamp, path). Retained for 30 days, used only for security and debugging.

We don't drop cookies until you give consent. The only thing the site writes to your browser before consent is a single localStorage entry — kuberly-analytics-consent — which records your decision so we don't ask again.

If you click Accept, Google Analytics sets its own first-party cookies (_ga, _ga_*) for session and visitor counting. You can clear them at any time from your browser, and clearing localStorage will re-show the consent banner.

• Google Analytics 4 — traffic measurement on this site. Loaded only after consent. Google's privacy policy.
• HubSpot — demo scheduling. HubSpot's privacy policy.
• AWS — hosts this marketing site (and the platform you operate, if you're a customer). AWS privacy notice.
• Your Git provider — if you're a customer, your IaC repo lives in GitHub or Bitbucket (your account). Their terms apply to that repo.

We don't ship data to advertising networks, retargeting platforms, or data brokers.

You can ask us to access, correct, export, or delete any data we hold about you. Send the request to [email protected] and we'll respond within 30 days (usually much faster).

If you're in the EU/UK, you have the rights described in the GDPR (access, rectification, erasure, restriction, portability, objection). If you're in California, you have the rights described in the CCPA/CPRA (know, delete, correct, opt out of sale — we don't sell). Same email handles both.

For analytics specifically: clicking Decline in the consent banner (or clearing your browser storage and clicking it on next visit) is the fastest opt-out — no email required.

• Analytics events — retained by Google for the period configured in our GA property (default 14 months).
• Server access logs — 30 days.
• Customer correspondence — kept while you're a customer plus the period required for accounting and tax (typically 7 years), then deleted.
• Customer infra data — never held by us. See section 02.

Kuberly is a developer-tools product. We don't market to or knowingly collect data from anyone under 16. If you believe a child has sent us data, email us and we'll delete it.

We update this notice when our data practices change. The "Last updated" date at the top reflects the most recent revision. For material changes that affect your rights, we'll surface a notice on the site.

Privacy questions or requests: [email protected].

Kuberly · Production AWS, in your account.

← Back to home