Privacy Policy

Last updated: October 2026

This page is available in several languages. In case of any discrepancy between a translation and the English version, the English version prevails.

1. Introduction

At KanuniLabs, we respect your privacy. This policy explains how we collect, use, and protect your personal data across our website and software products. By using our services, you agree to this policy.

2. Information We Collect

When you create an account, purchase a license, or open a support ticket, we may collect your name, email address, GitHub profile data (if authenticating via GitHub), and IP address.

3. Payment Processing

We do not store your credit card details. All payments and invoicing for our Enterprise licenses are securely handled by our Merchant of Record, Paddle. Your payment information is subject to Paddle’s Privacy Policy.

4. Support Data

When you submit a support ticket, we collect the details you provide (including code snippets, logs, or project details) solely to assist you. This data is kept confidential and retained only as long as necessary to resolve your issue.

5. Your Rights (GDPR & KVKK)

Depending on your location, you have the right to access, rectify, or erase your personal data (Right to be Forgotten). You can also opt-out of our marketing or announcement emails at any time. To exercise these rights, contact us at [email protected].

6. Cookies & Analytics

We use a small number of cookies: an essential cookie that remembers your language preference, and a session cookie when you sign in to the dashboard. Optional analytics (Google Analytics) runs only if you accept it in the cookie banner — you can change your choice at any time via "Cookie settings" in the footer. We do not use advertising or cross-site tracking cookies.

7. Where Your Data Lives & Sub-processors

Our website and database are hosted on servers in the European Union (Hetzner, Germany), with traffic protected by Cloudflare. We share data only with the providers needed to run the product: Paddle (payments, as Merchant of Record), Resend (transactional email), Google Workspace (our business email), GitHub (optional sign-in), Cloudflare (CDN & security) and Google Analytics (optional, consent-based). Account and license data is retained for as long as your account exists, and deleted or anonymized on request.

8. Business Contacts We Email First

From time to time we send a first email to a business contact, such as a software company or a newsletter author, at an address the organization publishes so that people can contact it. We do this because we think our products may be relevant to their work, and our basis is our legitimate interest in reaching business users of software like ours. We do not buy contact lists or collect personal addresses from code repositories. Every such email contains a personal link to a page on this website; one click on the button there adds your address to a do-not-contact list, and we will not write to you again. You can also reply “stop” or write to [email protected]. We keep an address on our outreach list only as long as it is useful to the conversation, and delete it on request. The do-not-contact list is the exception: it holds only the addresses of people who asked us to stop, and we keep it for as long as we send outreach, because deleting an entry would mean writing to that person again.