This policy is effective as of January 1, 2026
Alto9 ("we," "us," or "our") operates the Kube9 platform, which includes our VS Code extension, desktop application, web portal, operator, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.
We are committed to protecting your privacy. This Privacy Policy applies to all users of Kube9, including users of our free tier, paid subscriptions, and open source components. By using our Services, you agree to the collection and use of information in accordance with this policy.
Important: We do not collect, transmit, or store your Kubernetes cluster data, secrets, credentials, or resource configurations. All cluster data analysis occurs locally on your machine (for VS Code extension and Desktop) or within your cluster (for the Operator). We only collect telemetry and usage data as described in this policy.
We collect information that you provide directly to us and information that is automatically collected when you use our Services. We do not collect your Kubernetes cluster data, secrets, credentials, or resource configurations.
When you create an account, subscribe to our Services, or contact us, we may collect:
Account Information: Email address, username, password (stored securely), and subscription status
Payment Information: Billing address, payment method details (processed by third-party payment processors), and transaction history
Communication Data: Information you provide when contacting us for support, feedback, or inquiries
Profile Information: Any optional profile information you choose to provide
When you use our Services, we automatically collect telemetry data to improve our Services, diagnose issues, and understand usage patterns. This includes:
Usage Statistics: Features used, frequency of use, error rates, and performance metrics
Device and System Information: Operating system, application version, hardware specifications, and browser information
Crash Reports: Error logs, stack traces, and diagnostic information when the application encounters errors
Session Data: Session duration, pages or features accessed, and navigation patterns
What We Do NOT Collect: We do not collect your Kubernetes cluster data, resource configurations, secrets, credentials, kubeconfig files, or any sensitive cluster information. All cluster data analysis occurs locally on your machine or within your cluster.
We use cookies and similar tracking technologies to track activity on our Services and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.
We use cookies for authentication, session management, analytics, and to improve user experience. For more information about our use of cookies, please see our Cookie Policy.
We use the information we collect for various purposes, including:
To Provide and Maintain Our Services: To deliver, operate, and maintain the Kube9 platform, process transactions, and manage your account
To Improve Our Services: To analyze usage patterns, identify issues, and enhance functionality based on telemetry data
To Communicate With You: To send you service-related notifications, respond to your inquiries, and provide customer support
To Ensure Security: To detect, prevent, and address technical issues, fraud, or security threats
To Comply With Legal Obligations: To meet legal requirements, respond to legal processes, and protect our rights
For Business Purposes: To conduct analytics, research, and business development activities
We do not use your information for advertising purposes or to sell your data to third parties.
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
Service Providers: We may share information with third-party service providers who perform services on our behalf, such as payment processing, hosting, analytics, and customer support. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
With Your Consent: We may share your information with your explicit consent or at your direction.
We do not share your Kubernetes cluster data, as we do not collect it. All cluster data remains on your machine or within your cluster.
You have certain rights regarding your personal information, which may vary depending on your location:
Access: You can request access to the personal information we hold about you
Correction: You can request correction of inaccurate or incomplete information
Deletion: You can request deletion of your personal information, subject to legal and contractual obligations
Data Portability: You can request a copy of your data in a structured, machine-readable format
Opt-Out: You can opt out of certain data collection, such as telemetry, through application settings (where available)
Account Management: You can update or delete your account information through your account settings
To exercise these rights, please contact us at hello@alto9.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
Our Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.
Account information is retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or business purposes.
Telemetry data is typically retained for a period necessary to analyze trends and improve our Services, generally not exceeding 24 months unless required for security or legal purposes.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
Encryption of data in transit using TLS/SSL protocols
Secure storage of passwords using industry-standard hashing algorithms
Regular security assessments and updates
Access controls and authentication mechanisms
Monitoring and logging of security events
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
Your Responsibility: You are responsible for maintaining the security of your account credentials, kubeconfig files, and API keys. Do not share these with unauthorized parties.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to these countries.
We take appropriate safeguards to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it. This includes implementing standard contractual clauses or other legal mechanisms as required by applicable law.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "effective as of" date. Material changes will also be communicated via email or through our Services where appropriate.
Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at hello@alto9.com
Alto9
Florida, United States