Privacy Policy
Last updated: October 29, 2026
On this page
This policy explains what data Kirelta ("we") collects when you use kirelta.com and api.kirelta.com, and how we handle it.
1. What we collect
| Data | Purpose |
|---|---|
| Name, email, hashed password | Account creation & login |
| API keys (hashed) | Authenticating your API requests |
| Model data you send us (rows/features) | Computing drift and calibration signals. Not kept once the response is sent, except as described in section 5. |
| Fitted models: statistics of your baseline and, for each column on its own, the values set aside to calibrate it, sorted | Scoring your later data against the baseline you fitted |
| CSV files you upload as a baseline | Rebuilding a baseline from an earlier upload |
| Usage metrics (requests, latency) | Billing, reliability, abuse prevention |
2. How we use it
Solely to operate the Service: authenticate you, compute the statistics you request, bill usage-based plans, and respond to support requests. We do not sell your data.
3. Storage & security
Data is stored in a managed database. Passwords are salted and hashed with an industry-standard key-derivation function; API keys and email verification tokens are stored only as one-way hashes, never in plain text. All traffic uses HTTPS. Access to production systems is restricted to the operator.
4. Third parties
- Hosting: Railway (application & database), Cloudflare (DNS, static site).
- Email: Resend (transactional email — verification, password reset), when enabled.
- Billing: Paddle, as merchant of record for paid plans, when enabled.
Each processes only the minimum data needed for their function and is bound by their own privacy terms.
5. Retention
We keep account and usage data while your account is active. Fitted models are kept until you refit them under the same name or delete your account. Uploaded CSV files: your most recent per model, by plan (Free 1, Pro 5, Business 20, Enterprise 50). Rows queued for a background fit: until the fit finishes or fails. A retried request’s response: 10 minutes. Readings: 90 days. The Trust & Security page lists exactly what a fitted model holds. Deleting your account deletes all of this at once, leaving only a receipt that a workspace was deleted: its internal id and the time. Billing records are kept by Paddle, our merchant of record, as the law requires.
6. Your rights
You can download your data, or delete your account and with it your data, yourself in Settings at any time. You may also request access to, correction of, or deletion of your personal data by emailing our contact address. We will respond within a reasonable timeframe.
7. Cookies
The dashboard keeps you signed in with your browser’s session storage, which is cleared when you close the tab; your theme and language choices are kept in local storage on your device. We do not use advertising or tracking cookies.
8. Changes
We may update this policy; material changes will be notified by email or in-app.
9. Contact
Privacy questions: our contact address.