Privacy Policy
Last updated: 2026-05-09
Information we collect
We collect (a) account information you provide (email, name); (b) payment metadata via Stripe (we never see card numbers); (c) deployment metadata (domains, regions, deployment status, log lines); and (d) usage analytics for service improvement.
How we use it
To provide and improve the service, process payments, communicate service updates, prevent abuse, and comply with legal obligations. We do not sell personal data.
Third parties
We share data only with service providers required to deliver the product: Stripe (payments), Hetzner / DigitalOcean (VPS hosting), Cloudflare (DNS, CDN), AWS / Google Cloud (object storage, email delivery), and a domain registrar of your selection.
Your rights
You can access, correct, export, or delete your personal data at any time from your dashboard or by emailing [email protected]. We respond within 30 days.
Your rights under Thai PDPA / สิทธิของคุณภายใต้ พ.ร.บ.คุ้มครองข้อมูลส่วนบุคคล
Krilo Labs is the Data Controller. As a data subject under the Thai Personal Data Protection Act B.E. 2562 (PDPA), you have the right to: access your personal data; request correction; request deletion; object to processing; restrict processing; receive your data in a portable format; withdraw consent; and lodge a complaint with the Personal Data Protection Committee (PDPC). Legal basis for processing is contract performance and legitimate interest (account security, fraud prevention). Retention period: account data is retained while your account is active and for 30 days after cancellation. Data Controller contact: [email protected].
Your rights under GDPR (for EU residents)
If you reside in the European Union, you have the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing under the General Data Protection Regulation. Legal basis: contract performance (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)). Data Protection Officer contact: [email protected].
Children
Our service is not directed at individuals under 16. We do not knowingly collect data from children.
Changes to this policy
We will notify users of material changes by email at least 14 days before they take effect.
Contact
Privacy questions: [email protected]