Privacy Policy

Kumo is self-hosted first. Your workloads and their data run on a server you operate, and the Kumo software is designed not to phone home. This page explains what that means in practice and the little the marketing site collects.

What this covers

This policy covers two separate things:

• The Kumo software you install and run on your own infrastructure.
• This marketing website, where you can read about Kumo and reach out to us.

It does not cover the data your own applications collect from your own users — that is yours to govern.

Data on your own server

When you run Kumo, everything it manages lives on the infrastructure you control:

• Application data, virtual machine disks, and database contents stay on your server. They are not copied to us.
• Secrets and environment variables you mark as secret are encrypted at rest before they are stored.
• The Kumo control plane is designed not to send your workload data or usage back to us. You are the operator and the data controller for anything running on your box.

Because you host it, you are responsible for backups, access control, and the security of the server Kumo runs on.

The marketing site

This website collects only what you volunteer:

• When you use a "Book a demo" or contact link, your email client opens a message addressed to us. If you send it, we receive your email address and whatever you write, and we use it only to reply and arrange a demo.
• We do not ask you to create an account to read these pages.

Contact

Questions about this policy or your data? Email hans@dalang.io.

This is a plain-language starting draft, not legal advice. Replace it with text reviewed by your own counsel — and reflecting your actual data practices and jurisdiction — before relying on it in production.