Privacy Policy

Controller: Tecsteps GmbH, Breitscheidstr. 42, 16321 Bernau bei Berlin, Germany, represented by Fabian Wesner, registered at Amtsgericht Frankfurt (Oder), HRB 18540, VAT ID DE341723281. Contact for privacy matters: contact@tecsteps.com.

Account data

From GitHub or Google OAuth we process name, email, avatar, and provider user id. Legal basis: contract.

Infrastructure data

Cloud credentials (encrypted at rest), server and daemon metadata, and environment variables (encrypted) are processed solely to operate the service. Legal basis: contract. A hosted server stays Free up to 4 daemons; above that the hosted fee is €5/month per Pro server as described in Pricing.

Logs

Structured operational logs (request summaries, lifecycle events, errors) with user, server, and daemon ids are shipped to Axiom Co. (processor). Retention follows the Axiom dataset policy. Secrets are redacted before shipping. Legal basis: legitimate interest (operations and security).

Processors

Hetzner (the user's own contract for servers; Hetzner DNS for preview hostnames), Axiom (logs), GitHub (OAuth), and later Stripe (billing) and Google (OAuth). This list is updated when a processor is activated.

Cookies

Session and XSRF cookies only. No tracking or ads cookies. Preview domains set only the preview-access cookie.

Agent credentials

Agent credentials are never stored or proxied by daemons.run. They are authenticated inside the user's daemon.

Your rights

You have GDPR rights of access, rectification, erasure, portability, objection, and complaint to a supervisory authority. "Destroy everything" in Settings deletes all infrastructure records.