Privacy

Who is responsible

Picaporte Labs, Spain, is the controller of the personal data described on this page. For anything about your data, write to pro@kubelatch.com.

This website

This site sets no cookies, runs no analytics and loads no scripts, and nothing on it comes from another site. The server that hosts it keeps access logs: your IP address, the date, the page requested and your browser’s user agent. They are kept for 30 days, to keep the site secure and working, and then deleted. The legal basis is our legitimate interest in the security of the site.

The documentation at docs.kubelatch.com works the same way, with no cookies and no analytics. Its scripts run only in your browser, for search and to remember your choice of light or dark mode in your browser’s local storage, which never leaves it.

When you buy Pro or start a trial

Payments, trials and the customer portal run on Stripe, which acts as our processor under its own privacy policy, at stripe.com/privacy. Through it we receive your billing name, e-mail address, billing address and tax identification number. Your card details go only to Stripe; we never see them.

We use these data to provide your subscription, issue your License Keys and invoices, and meet our tax obligations. The legal basis is the contract and our legal obligations. We keep them while the subscription lasts and, after it, as long as Spanish tax and commercial law requires (generally six years).

E-mails we send

License Keys and notices about your subscription are sent from pro@kubelatch.com through Resend, which acts as our processor. Resend keeps delivery logs (address, subject, date and delivery status) for 30 days.

The licensing service

The service that issues License Keys, at licensing.kubelatch.com, logs each key it issues: the license identifier, the Stripe customer identifier, the Seats, the expiry date and the e-mail address it was sent to, and it also logs the e-mail address on each end-of-subscription notice, the e-mail address typed into each key request together with the client IP address it came from, and the client IP address of refused webhook deliveries. These logs are kept with the hosting logs, for 30 days. The key itself, and the subscription it comes from, stay in Stripe.

The product

kubelatch collects nothing for us. It calls no service of Picaporte Labs: the License Key is verified offline, and there is no telemetry. The audit records, identities and permissions that kubelatch handles live in your own database, in your own infrastructure. You are the controller of those data, and we have no access to them.

If you send us logs or other data to get support, we use them only to answer your request, and delete them once they are no longer needed for it.

Your rights

Under the GDPR you can ask us for access to your data, its rectification or erasure, its portability, and the restriction of its processing, and you can object to it. Write to pro@kubelatch.com; we answer within one month. If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

Profiling and transfers

We do no profiling and take no automated decisions about you, and we never sell or share your data for advertising. Your data stay in the European Union, except for what Stripe and Resend process outside it, which they do under the European Commission’s standard contractual clauses.

Changes

If this policy changes, we publish the new version on this page with its date, and tell Pro customers by e-mail about any change that affects them.