Privacy Policy

Last updated: October 2026

1. Data Controller

NeverHalt Cloud Infrastructure (direct contact: [email protected] and [email protected]).

2. Information We Collect

• Account email and cryptographic credentials (managed via secure PBKDF2 Web Crypto authentication).
• OAuth identity tokens from verified providers (Google & GitHub) strictly limited to identity verification with zero access to source code or personal files.
• Billing details (processed entirely by Stripe; payment card information never passes through or touches our servers).
• Agent runtime metadata and encrypted environment variables stored with AES-256-GCM tenant isolation.

3. Purpose of Processing

Data is processed strictly to provide cloud runtime orchestration, compute isolation, billing operations, and essential operational communications.

4. Legal Basis

Contract execution (GDPR Art. 6.1.b) and legitimate interest for maintaining security and service availability.

5. User Rights

You have full rights under GDPR/CCPA to access, rectify, export, or permanently delete your account data and runtime storage by contacting [email protected].

6. Retention and Erasure

Data is retained while your subscription is active. Upon account deletion, all container images, persistent disk volumes, and encrypted secrets are purged within 30 days.