Last updated: February 1, 2026

Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (hashed). If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe).

Server Data: The RackPlane agent reports system metrics (CPU, memory, disk, network usage), container/VM status, and service health back to the control plane. This data is used to display dashboard information and enable features like drift detection and autoscaling.

Usage Data: We collect basic usage analytics such as pages visited, features used, and API calls made. This helps us improve the product.

Log Data: We log API requests, authentication events, and errors for security and debugging purposes.

2. How We Use Your Information

To provide, maintain, and improve the RackPlane service
To display server metrics, service status, and health information in your dashboard
To process payments and manage your subscription
To send transactional emails (account verification, password resets, billing receipts)
To detect and prevent fraud, abuse, and security incidents
To respond to support requests
To generate aggregated, anonymized analytics about product usage

3. Data Storage & Security

All data is stored in encrypted-at-rest PostgreSQL databases. Secrets managed through RackPlane are encrypted with AES-256-GCM before storage. All communication between the agent and control plane uses gRPC with mutual TLS (mTLS).

We do not store your server passwords, SSH keys, or any credentials used to access your infrastructure. The agent binary runs on your servers and communicates outbound only — no inbound ports are required.

4. Data Sharing

We do not sell your data. We share data only with:

Stripe — for payment processing
Infrastructure providers — for hosting the control plane (compute and database)

We may disclose information if required by law or to protect our rights and safety.

5. Data Retention

Account data is retained for as long as your account is active. Server metrics and logs are retained based on your plan tier (7 days for Starter, 90 days for Pro, custom for Enterprise). Audit logs follow the same retention policy.

When you delete your account, we remove all associated data within 30 days, except where retention is required by law.

6. Your Rights

You can access, update, or delete your account data at any time from the dashboard settings. You can also request a full export of your data or account deletion by contacting privacy@rackplane.io.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

8. Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes by email or through the dashboard. Continued use of the service after changes constitutes acceptance.

9. Contact

For privacy-related questions, contact privacy@rackplane.io.