Legal

Privacy Policy

Last updated: June 2, 2026

Who we are

CaaS is operated by Exempli Gratia Indonesia("we", "us"). This policy explains what data we collect when you use our website and container hosting service, and how we handle it.

Data we collect

Account data: your email address, and (optionally) name and company, provided when you sign up or sign in with Google or GitHub. From OAuth providers we receive only your email, basic profile name, and provider account ID.

Authentication data: one-time email login codes (stored only as a hash) and session tokens (stored as HttpOnly cookies). We never store passwords — the service is passwordless.

Usage data: deployment metadata and resource metrics (CPU, RAM, storage) for the apps you deploy, plus basic security logs (IP address, timestamps) for abuse prevention.

How we use it

To authenticate you, provision and operate your deployments, show usage metrics, prevent abuse, and communicate service-related information. We do not sell your personal data.

Third parties

We rely on Google and GitHub (sign-in), Cloudflare Turnstile (bot protection), and our own infrastructure (Dokploy, Proxmox) to run the service. Each processes data only as needed to provide their function.

Retention & your rights

We keep account data while your account is active. You may request access to, correction of, or deletion of your data by contacting us. Login codes expire within 10 minutes and are single-use.

Contact

Questions about this policy? Email privacy@caas.app.