Privacy Policy

Effective date: March 1, 2026

This Privacy Policy explains how the Canine open source project ("Canine", "we", "us", or "our") collects, uses, and shares information about you when you use the Canine platform at canine.sh and any related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and a hashed password. If you sign up via a third-party OAuth provider (GitHub, GitLab, or Bitbucket), we receive basic profile information from that provider in accordance with the permissions you grant.

Cluster and Infrastructure Data

To deploy applications on your behalf, we store the kubeconfig credentials and connection details for Kubernetes clusters you connect to the Service. This data is encrypted at rest and is never shared with third parties except as required to operate the Service.

Application and Deployment Data

We store information about the projects, services, environment variables, build configurations, and deployment history associated with your account. Environment variables and secrets are encrypted at rest.

Usage Data

We collect information about how you interact with the Service, including pages visited, features used, actions performed, and timestamps. This helps us understand how the Service is used and how to improve it.

Technical Data

We automatically collect technical information when you access the Service, including your IP address, browser type and version, operating system, referring URLs, and device identifiers. This information is used for security, fraud prevention, and service reliability purposes.

Communications

If you contact us by email or through the Service, we retain those communications to respond to your inquiry and to improve our support quality.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and manage your account.
• Process deployments, builds, and other operations on your behalf.
• Send transactional emails such as account confirmation, password reset, and deployment notifications.
• Send product updates and announcements (you may opt out at any time).
• Monitor for security threats, abuse, and unauthorized access.
• Analyse usage patterns to improve the Service and fix bugs.
• Comply with legal obligations.

3. Analytics and Tracking

We use third-party analytics tools including Google Analytics and PostHog to understand how users interact with the Service. These tools may use cookies and similar tracking technologies. The data collected is aggregated and used to improve the Service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and support security features. Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or are deleted. You can configure your browser to refuse cookies, though some features of the Service may not function correctly without them.

5. Information Sharing

We do not sell your personal information. We share your information only in the following circumstances:

• Service providers: We share data with trusted third-party vendors who help us operate the Service (e.g., cloud hosting providers, email delivery services). These vendors are contractually bound to protect your data and use it only as directed by us.
• Legal compliance: We may disclose your information if required to do so by law, court order, or a valid request from a government authority.
• Protection of rights: We may disclose information to protect the rights, property, or safety of Canine, our users, or the public.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution. Deployment logs and build artifacts may be retained for a shorter period in accordance with our standard data lifecycle policies.

7. Data Security

We take the security of your data seriously. We use industry-standard measures including encryption in transit (TLS), encryption at rest for sensitive data (kubeconfig credentials, environment variables, secrets), and access controls to limit who within Canine can access your data. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

If you discover a security vulnerability in the Service, please disclose it responsibly by emailing security@canine.sh.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to certain exceptions.
• Portability: Request a machine-readable export of your data.
• Objection: Object to processing of your data for certain purposes.
• Opt-out: Unsubscribe from marketing emails at any time via the link in any such email.

To exercise any of these rights, contact us at privacy@canine.sh. We will respond within 30 days.

9. International Data Transfers

Canine operates primarily in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We take steps to ensure that such transfers comply with applicable data protection laws, including the use of standard contractual clauses where required.

10. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@canine.sh.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will notify registered users via email or a prominent notice within the Service. Your continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:
privacy@canine.sh