Privacy Policy
DollarBox is operated by Unicorn Operations Limited, Ireland.
What we collect
- Account data: email address, hashed password, first name, last name.
- Billing data: handled entirely by Stripe. We store your Stripe customer ID; we do not store card numbers.
- Session data: a server-side session cookie is set when you log in. It is strictly necessary. No analytics cookies.
- Access logs: IP addresses and user agents for security monitoring (retained for 30 days).
- Container metadata: names, images, status, IPv6 addresses of containers you deploy.
- Organization metadata: organization names, slugs, billing emails, and membership roles.
- Referral attribution: if you arrive through a referral link, we store the referral code in your anonymous server-side session for up to 30 days so we can attribute the signup. If you then create an account, we record which organization referred which — the two organizations and the dates, kept alongside the billing records the reward is paid against. We never tell a referrer who signed up through their link.
What we don't collect
No analytics. No tracking pixels. No fingerprinting. No marketing data. No third-party advertising.
Where your data lives
Our servers are hosted in the EU (Hetzner, Germany). Stripe processes payment data under their own privacy policy. Kubernetes resources are provisioned in the same EU data center.
Your rights (GDPR)
Right of Access (Article 15)
You have the right to request a copy of all personal data we hold about you. You can request this directly through your account settings at any time. We will compile your data and provide a secure download link via email within 30 days. Data is provided in JSON format and includes your account information, organizations, containers, volumes, and access logs.
Right to Rectification (Article 16)
You have the right to correct inaccurate personal data. Please email [email protected] with your correction request.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data. You can initiate this through your account settings. Upon confirmation:
- Your email address is immediately anonymized (replaced with a non-identifiable placeholder)
- All other personal data (containers, volumes, organizations, access logs) is permanently deleted within 30 days
- Your Stripe customer record is deleted (best effort)
Automated Decision Making
We do not use automated decision making or profiling based on your personal data.
Data retention
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account data | While account is active + 30 days after deletion request | Contract (Terms of Service) |
| Email address | Anonymized immediately upon deletion request | GDPR Article 17 |
| Access logs | 30 days | Legitimate interest (security) |
| Closed organizations | 30 days after closure | GDPR Article 17 |
| Billing records | 7 years | Irish tax law (Legal obligation) |
| Referral attribution (which organization referred which) | Kept with the billing records the reward is paid against: 7 years | Irish tax law (Legal obligation) |
| Referral code in an anonymous session | Up to 30 days, or until you sign up | Legitimate interest (attributing a referral you asked for) |
| Container metadata | Deleted with container or account | Contract |
| Persistent volume contents | Destroyed when you delete the volume, and on account closure or erasure | Contract |
| Volume backups (paid add-on) | Your chosen retention, from 1 to 30 nightly backups. Deleted when you disable backups for that volume, and on account closure or erasure. See the note below on suspended accounts | Contract |
Note: Billing records cannot be deleted sooner than 7 years due to tax compliance requirements. This data is retained by Stripe and our billing system separately from your account.
Note on suspended accounts and backups: while an account is past due or suspended we stop taking new backups and stop pruning old ones, so the backups already held are retained — and still charged for — until the account is active again. Closing the account, or requesting erasure, deletes them from backup storage.
Security measures
- Traffic to the control panel and the Kubernetes API is encrypted in transit (TLS)
- Persistent volumes and their off-site backups are not encrypted at rest — encrypt in your application if your data requires it
- Access is controlled via role-based access control (RBAC)
- IP addresses in admin security events are pseudonymized (SHA-256); IP addresses recorded against GDPR audit-log entries and data-export requests are stored in full, as evidence for the request itself
- We maintain records of all data processing activities (Article 30)
- Regular security audits and vulnerability scanning
Sub-processors
We use the following third-party processors:
| Processor | Purpose | Data involved |
|---|---|---|
| Hetzner (Germany) | Servers, and the Storage Boxes holding off-site volume backups | Everything you deploy and store, including backups of your volumes |
| Stripe (US) | Payments and invoicing | Billing data, under Standard Contractual Clauses (SCCs) |
| Cloudflare | DNS, the public website, and edge proxying for our own hostnames | Request metadata, including IP addresses |
| Mailjet | Sending transactional email | Your email address and the message content |
| Migadu | Our inbound mailboxes | Anything you send us by email |
| Axiom | Application log ingest and retention | Application logs, which can include IP addresses |
International data transfers
- Our infrastructure is hosted in the EU (Hetzner, Germany)
- Stripe (US-based) processes payment data under Standard Contractual Clauses (SCCs)
- Processors outside the EU handle personal data under Standard Contractual Clauses
Contact
For privacy questions or to exercise your rights:
- Email: [email protected]
- Data Protection Officer: [email protected]
Changes
This policy was last updated on 16 September 2026, to record what the referral programme collects and how long it is kept.