[LEGAL_DOCUMENTATION]

Privacy Policy

Effective Date: February 12, 2026 | Last Updated: February 12, 2026

At Opskernel, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our cloud-based autonomous agent services. Please read this policy carefully to understand our practices regarding your information.

01

Information We Collect

Account Information

When you create an account with Opskernel, we collect your email address, name, and authentication credentials. For Google OAuth sign-ins, we receive your Google profile information.

Usage Data

We automatically collect information about your interactions with our service, including deployment logs, API usage, compute instance metrics, and error reports to improve service performance.

Payment Information

Payment data is processed securely through Stripe. We do not store full credit card information on our servers. We retain transaction records and subscription status for billing purposes.

Bot Configuration Data

We store bot tokens, model preferences, and deployment configurations that you provide to enable your cloud agent functionality.

02

How We Use Your Information

Service Provision

We use your information to provision and maintain your cloud instances, process deployments, and provide technical support.

Billing and Payments

Your payment information is used to process subscriptions, manage invoices, and handle refund requests in accordance with our terms.

Service Improvement

Anonymized usage data helps us optimize performance, identify bugs, and develop new features for the platform.

Communications

We may send you service-related notifications, billing alerts, and important security updates. Marketing communications are opt-in only.

03

Data Storage and Security

Infrastructure

Your data is stored on secure cloud infrastructure with industry-standard encryption at rest and in transit. We use Supabase for database management and DigitalOcean for compute instances.

Access Control

We implement strict access controls and authentication mechanisms. Only authorized personnel have access to production systems, and all access is logged.

Data Retention

We retain your account data for as long as your account is active. Deployment logs are retained for 90 days. Upon account deletion, personal data is permanently removed within 30 days.

Backups

We maintain encrypted backups of critical data to ensure service continuity and disaster recovery. Backups are stored securely and deleted according to our retention schedule.

04

Data Sharing and Disclosure

Third-Party Services

We share data with essential service providers: Stripe for payments, DigitalOcean for infrastructure, and Supabase for database services. These partners are contractually bound to protect your data.

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, property, or safety of our users.

No Sale of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

05

Your Rights and Choices

Access and Correction

You can access and update your account information through the dashboard at any time. Contact us for assistance with data requests.

Data Portability

You have the right to request a copy of your data in a machine-readable format.

Account Deletion

You may delete your account through the dashboard settings. This will permanently remove your personal data, though some transaction records may be retained for legal compliance.

Cookie Preferences

Our service uses essential cookies for authentication and session management. You can control non-essential cookies through your browser settings.

06

International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

07

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

08

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email or prominent notice on our website. Your continued use of the service after such changes constitutes acceptance of the updated policy.

09

Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your personal data, please contact us at: privacy@opskernel.com

Document ID: PRIV-POL-2026-02-12

This privacy policy is governed by applicable data protection laws including GDPR and CCPA. For jurisdiction-specific rights and information, please contact our privacy team.