1. Introduction & Scope
Cirrolane Inc. (“Cirrolane”, “we”, “us”) is committed to preserving the confidentiality, integrity, and availability of our users' and customers' data. This Privacy Policy details how we collect, process, and protect information when you access the Cirrolane platform, use our APIs and CLI tools, or interact with our services.
2. Customer Code & Data Ownership
Your source code, container images, environment secrets, and data stored in Cirrolane databases remain 100% your exclusive property. Cirrolane does not train machine learning models on customer code without explicit consent, and our systems engineers cannot inspect confidential workloads without customer authorization.
3. Information We Collect
- Account Information: Name, work email address, billing contact details, and authentication identifiers provided during registration.
- Operational Telemetry: Anonymized metrics including HTTP request counts, bandwidth egress volumes, latency percentiles, and runtime error rates necessary to maintain cluster stability and generate transparent billing.
- Audit Logs: Cryptographic activity logs recording CLI invocations, deployment approvals, and IAM key changes for security auditing.
4. Data Encryption & Security Standards
All customer data in transit is protected using TLS 1.3 with strict forward secrecy. Data at rest is encrypted using AES-256-GCM with customer-controlled or KMS-managed envelope keys. Hardware isolation is enforced on all multi-tenant hosts.
5. GDPR & Global Privacy Rights
Users in the European Economic Area (EEA), the United Kingdom, and jurisdictions with equivalent data privacy regulations possess rights to data access, rectification, portability, and deletion. To exercise your rights, contact our Data Protection Officer at dpo@cirrolane.dev.