Privacy policy

This page explains what personal data we collect when you visit kapacitor.ai or request preview access, why we collect it, where it lives, and how to get rid of it. We have tried to write this in plain English first and lawyer second.

Who we are

Kurrent, Inc. operates Kapacitor and is the data controller for the purposes of GDPR and equivalent laws. Contact for anything in this policy, including subject access and deletion requests: privacy@kurrent.io.

What we collect

1. Access-request form

When you submit the access-request form, you give us:

Your email address
Your team’s GitHub organization

Legal basis: our legitimate interest in evaluating preview applicants, and (once we reply) the steps taken at your request before entering into a contract.

Where it goes: the form posts to Google Forms and lands in a Google Sheet owned by the Kapacitor team. It is not synced to any CRM, marketing tool, or third party.

Retention: if we don’t move forward with your request, we delete the entry. If we do, the entry is kept for the duration of our working relationship and removed afterwards on request.

2. Analytics

If you click Accept on the cookie banner, we load PostHog, which records page URL, referrer, viewport, browser, OS, and a coarse country/region inferred from your IP (the raw IP is discarded at ingest). PostHog assigns an anonymous identifier so repeat visits can be told apart from new ones.

Submitting the access-request form fires a single access_request_submitted event with no properties — no email, no organization, no identifiers.

Legal basis: your consent. You can withdraw it any time from the cookie policy page.

Where it goes: PostHog’s EU ingest (eu.i.posthog.com) and EU-hosted storage. We don’t enable session replay, heatmaps, autocapture, or any third-party advertising integrations.

Retention: PostHog’s default retention applies (currently seven years for events). We do not query analytics data that is older than is useful for product decisions.

3. Hosting and request logs

The site runs on Cloudflare Workers. Cloudflare receives standard HTTP request metadata (IP, user agent, requested URL, timestamps) to serve and protect the site. We don’t use Cloudflare Analytics; the request logs are processed by Cloudflare on our behalf under their data-processing terms.

Legal basis: legitimate interest in operating and protecting the website.

Who we share data with

We use the following sub-processors. We do not sell personal data, and we do not share it for advertising.

Google LLC — Google Forms and Google Sheets, for the access-request form.
PostHog Inc. — analytics, EU region.
Cloudflare, Inc. — hosting and request handling.

International transfers

Kurrent, Inc. is based in the United States. PostHog analytics data stays in the EU. Google Forms / Sheets data may be processed in the United States; the Google Workspace terms include the EU Standard Contractual Clauses as the transfer mechanism. Cloudflare operates a global network and may route requests through nodes outside your country.

Your rights

If your data is covered by GDPR or UK GDPR, you have the right to:

Ask what we hold about you (access)
Correct anything wrong (rectification)
Have it deleted (erasure)
Restrict or object to processing
Have it ported to another provider
Withdraw consent for analytics, at any time, with no effect on access requests already submitted
Complain to your local supervisory authority

To exercise any of these, email privacy@kurrent.io. We aim to respond within 30 days.

Changes

If we change this policy in a way that affects you, we will update the “last updated” date at the top and, where the change is material, give visible notice on the site.