1. Introduction

Nauthera ("we", "us", or "our") operates the website nauthera.io (the "Site"). This Privacy Policy explains how we collect, use, and protect your personal information when you visit the Site or interact with our services.

Nauthera is an open-source, self-hosted Kubernetes-native identity provider. We do not operate a SaaS platform — the software runs entirely in your own infrastructure. This policy covers only the data we collect through this website.

2. Information We Collect

2.1 Information you provide

• Waitlist & contact forms: When you sign up for our waitlist or contact us, we collect your email address and any other information you voluntarily provide.

2.2 Information collected automatically

• Log data: Our hosting providers (Vercel and Cloudflare) automatically collect standard server log information, including your IP address, browser type, referring URL, pages visited, and timestamps.
• Cookies & similar technologies: We use essential cookies required for the Site to function. We do not use advertising or third-party tracking cookies.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide support
• Send you product updates and announcements if you opted in (e.g. via the waitlist)
• Monitor and improve the Site's performance and security
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Third-Party Services

We rely on the following third-party providers to operate the Site. Each processes data in accordance with their own privacy policies:

• Vercel — Hosting and deployment. May process server logs and request metadata.
• Cloudflare — DNS, CDN, and DDoS protection. May process IP addresses and request metadata.
• Resend — Transactional and marketing email delivery. Processes email addresses for waitlist and notification emails.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Waitlist email addresses are retained until you unsubscribe or request deletion.

6. Data Security

We implement reasonable technical and organisational measures to protect your personal information, including TLS encryption in transit and restricted access controls. However, no method of transmission or storage is completely secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, or to object to or restrict its processing. To exercise any of these rights, contact us at privacy@nauthera.io.

8. International Transfers

Your data may be processed in countries other than your own. Our service providers (Vercel, Cloudflare, Resend) operate globally and may transfer data to the United States or other jurisdictions. We ensure appropriate safeguards are in place where required.

9. Children's Privacy

The Site is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected such data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact

If you have any questions about this Privacy Policy, please contact us at privacy@nauthera.io.