Privacy Policy
Effective date: March 16, 2026 Last updated: October 1, 2026
This privacy policy explains how lucity.cloud ("Lucity", "we", "us") collects, uses, and protects your data.
Operator: zeitlos.software Inh. Christian Blättler CHE‑439.475.468 Mattenhofstrasse 5, 3007 Bern, Switzerland
Contact: privacy@lucity.cloud
1. What We Collect
Account Data
When you sign up, we collect:
- Email address and display name (via our authentication service)
- GitHub account details (username, user ID, email address, avatar) when you sign in with GitHub, and access to the repositories you connect for builds
- Billing information (name, billing address, payment method) processed by Stripe
Usage Data
When you use the platform, we process:
- Project and deployment metadata: project names, environment configurations, build logs, deployment status
- Resource consumption: CPU, memory, disk, and egress usage for billing
Analytics
We use Rybbit(opens in a new tab) (self-hosted) for website analytics. Rybbit is cookie-free, does not collect personal data, and does not track users across websites. No cookie consent banner is required.
What We Do Not Collect
- We do not read or store your application source code beyond what is needed during the build process
- We do not use cookies for tracking
- We do not build advertising profiles
- We do not sell your data
2. How We Use Your Data
- Provide the service: run your workloads, manage deployments, process builds
- Billing: calculate resource usage, process payments, send invoices
- Communication: service notifications, security alerts, billing updates
- Improve the platform: aggregated, anonymized usage patterns
3. Data Processing and Storage
The platform core, your workloads, and their databases run on Hetzner Cloud in Nuremberg, Germany. Object storage buckets are hosted on OVHcloud in Gravelines, France, and database backups on OVHcloud in Paris, France. Both are in the European Union.
Our infrastructure services (authentication, container registry, deployment tooling, analytics) are self-hosted within our own cluster. The third parties listed below are the only external processors that handle data on our behalf.
Third-Party Processors
| Provider | Purpose | Data Shared | Privacy Info |
|---|---|---|---|
| Stripe | Payment processing | Name, email, billing address, payment method | stripe.com/privacy(opens in a new tab) |
| Hetzner | Core infrastructure hosting (EU) | Platform data, workloads, and databases | hetzner.com/privacy-policy(opens in a new tab) |
| OVHcloud | Object storage and database backups (EU) | Files you store in buckets; backups of your databases | ovhcloud.com/en/personal-data-protection(opens in a new tab) |
| Bunny | Edge network for applications and public buckets | Requests to and responses from your applications and public buckets, including visitor request metadata (IP address, user agent) | bunny.net/privacy(opens in a new tab) |
| Anthropic | Internal operations and incident investigation | Platform metadata and logs needed for an investigation, such as project names, resource usage, and service logs | anthropic.com/legal/privacy(opens in a new tab) |
Stripe may process data outside the EU and maintains EU Standard Contractual Clauses for international transfers. Anthropic processes data in the United States under EU Standard Contractual Clauses and does not use it to train models. Bunny operates a global edge network, so requests to applications and public buckets may be processed at edge locations outside the EU, and publicly served bucket content may be cached there. We do not share data with any other third parties.
Data Your Applications Process
For your account and billing data, we are the data controller, and this policy describes how we handle it. For personal data that your applications process about your own end users, you are the controller and we act only as your processor, running your workloads on your instructions. That relationship is governed by our Data Processing Agreement. We do not access, use, or disclose that data except as needed to operate the platform.
4. Data Retention
- Account data: retained while your account is active. Deleted within 30 days of account deletion.
- Build artifacts and logs: retained while the associated project exists.
- Billing records: retained for 10 years as required by Swiss law (OR Art. 958f).
- Analytics data: aggregated and anonymous; no personal data retained.
5. Your Rights
Under the Swiss Federal Act on Data Protection (nDSG/FADP) and the EU General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data (platform data is ejectable by design)
- Object to processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, email privacy@lucity.cloud.
6. Security
We protect your data with:
- TLS for connections to the platform and WireGuard encryption between cluster nodes
- Database backups stored with a different provider than primary hosting
- Role-based access control
- Isolated tenant workspaces (namespace-level separation in Kubernetes)
7. Children
Lucity is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us.
8. Changes
We may update this policy. Material changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance.
9. Contact and Supervisory Authority
For privacy questions: privacy@lucity.cloud
If you believe your data protection rights have been violated, you may lodge a complaint with:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)(opens in a new tab)
- EU: Your local data protection authority