Privacy Policy
This policy explains what personal data okokumo collects, why, and your rights over it. For customers acting as GDPR data controllers, see also our Data Processing Agreement.
What we collect
- Account data: email address, hashed password (bcrypt — never stored or logged in plaintext), optional name.
- Organization data: organization name, member roles.
- Alert-channel configuration: destination email addresses, webhook/Slack URLs you configure.
- Billing data: handled directly by Stripe as an independent processor/controller — we never see your card details.
- Usage analytics: via Plausible, a cookieless, privacy-first analytics tool — no cookie banner is needed because no personal identifiers or cross-site tracking is used.
Why we process it
To provide the Service (account access, monitoring, alerting), to bill you for paid plans, to respond to support requests, and to improve the product via aggregate, non-identifying usage analytics.
Where it's stored
On Scaleway infrastructure located in France. See our Security & data page for the full list of sub-processors and technical measures.
How long we keep it
For the lifetime of your account, then deleted or anonymized within a reasonable delay after account deletion — except where French or EU law requires longer retention (e.g. invoicing records, generally 10 years under French commercial law).
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request erasure ("right to be forgotten").
- Request a portable export of your data.
- Object to or restrict certain processing.
- Lodge a complaint with your national data protection authority (CNIL in France).
To exercise any of these rights, contact us using the details in our legal notices.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated to active account owners in advance where reasonably possible.