Privacy policy

Data controller

Onicost, in Paris, determines the processing related to accounts, user relationships, billing and Service security. For data the Customer connects or collects from its environments for its own use, the Customer determines the purpose; Onicost processes that data to provide the requested functions.

For questions about your data, its retention or to exercise your rights, write to contact@onicost.com.

Data processed

• Account data: identifier (subject) assigned by the identity provider, e-mail address and name, organizations, roles and invitations, including the invited person’s e-mail address;
• Cluster telemetry: CPU and memory usage samples for containers and nodes, requests and limits, and an inventory of nodes, namespaces, workloads and volumes with their labels. The agent reads neither Secrets nor ConfigMaps and sends no annotations, environment variables or container logs;
• Cloud accounts: billing read credentials, encrypted at rest, and providers’ billing lines; a separate action identity if the Customer activates cloud Scheduler;
• Scheduler: rules, targeted resources, schedules, time zones, exceptions, wake-up requests, requester identity, resource states and execution history needed for simulation and actions;
• Billing: name, billing address, VAT number and payment method, collected and stored by Stripe. Onicost keeps the Stripe customer identifier, subscription status and measured usage, never card data;
• Notifications: notification preferences and a sending log for service e-mails, per member;
• Technical logs: IP address, date, request and response code.

The Customer chooses cluster, namespace and workload names and labels. It takes care not to put personal data in them that is unnecessary for its use of the Service.

Purposes and legal bases

• Providing the Service (accounts, organizations, cost measurement and estimation, recommendations, reports, exports, simulation and execution of activated Scheduler rules): performance of the contract, article 6.1.b of the GDPR;
• Billing the subscriptions and keeping the accounts: performance of the contract and legal obligations, article 6.1.c;
• Securing the Service, preventing fraud and diagnosing incidents: legitimate interest of Onicost, article 6.1.f;
• Sending the service e-mails (invitations, billing notices, alerts, weekly recap; the last two can be turned off): performance of the contract, article 6.1.b;
• Answering the requests sent to the contact address: legitimate interest of Onicost.

Onicost sells no data, uses none for advertising and takes no automated decision with legal effects.

Retention periods

Viewable history depends on the plan: 31 days with Free, 13 months with Team. This access window does not by itself describe when data is technically deleted.

The documented technical settings provide for the following periods. They are configurable and do not constitute a verification of production settings:

• Hourly usage and costs, allocation and inventory: 13 months; Scheduler action history: 13 months;
• Minute-level usage samples: 30 days; readings in transit in the message queue: 7 days;
• Cloud account billing lines and invoices: 25 months;
• Usage samples used to bill the subscription: 400 days; sending log for service e-mails: 30 days;
• Account and organization data: kept to manage the account and Service, then covered by the requested deletion processes;
• Subscription invoices: 10 years under applicable accounting obligations;
• Application logs: volume-based rotation, with 5 files of 20 MB per container in the versioned configuration; their calendar lifetime therefore depends on activity. The internal ClickHouse query_log and part_log logs expire after 7 days in that configuration.

Deleting an organization or cluster starts an asynchronous process that is retried for 15 days. This retry window is not a guarantee of global deletion within 15 days. Some data must be retained for applicable obligations.

Backups have a separate cycle from active data. The documented local backup setting is 14 days; copies to object storage depend on their own retention configuration. These defaults do not establish the periods actually applied in production. To find out which settings apply to your data, contact contact@onicost.com.

Recipients and processors

The data of an organization is available only to its members, according to their role, and to the people at Onicost who need it to run the Service. The data of each organization is isolated from that of the others. Onicost uses these processors:

• Scaleway SAS (France): hosting of the website, the application, the databases and the identity provider, in the Paris region, and sending of the e-mails (Transactional Email, Paris);
• Stripe Payments Europe, Limited (Ireland): payment and billing of the subscriptions.

The identity provider that manages the accounts is operated by Onicost itself, at Scaleway.

Transfers outside the European Union

The main Service and its data are hosted at Scaleway in the Paris region (France). This hosting location does not mean that no provider processes data outside the European Union.

Stripe may transfer data outside the European Union, including to the United States, under the mechanisms and safeguards described in its privacy policy.

Security

Exchanges go through HTTPS. The access to the cloud accounts is encrypted at rest, the agent tokens are kept as hashes only, and the isolation between organizations is enforced by the database itself.

Your rights

Subject to the GDPR’s conditions, you have rights of access, rectification, erasure, restriction, portability and objection regarding your data, and the right to give instructions on what happens to it after your death.

To exercise them, write to contact@onicost.com. You do not need to sign in. Information to verify your identity may be requested where necessary. You will normally receive a response within one month; the GDPR allows a two-month extension depending on the complexity and number of requests, with notice within the first month.

If you consider that your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), www.cnil.fr.

Cookies and local storage

The public site includes no audience measurement tool, advertising tool or marketing pixel. The storage described below supports the site’s operation and preferences you request. Browser local storage and session storage are distinct from HTTP cookies.

• localStorage.language and localStorage.layout_version: remember language and theme after your explicit choice; no application expiry, until you clear them in the browser;
• localStorage.onicost.cookie-notice-version: remembers only dismissal of the information notice, without an individual identifier; no application expiry, until browser storage is cleared or the notice version changes;
• localStorage.organization: keeps the active organization in the signed-in application; removed when the context no longer has an organization, otherwise until cleared or replaced;
• sessionStorage.onicost: OIDC state and tokens managed by the authentication library;
• sessionStorage.onicost.return-url and sessionStorage.onicost.account-action: return after sign-in or an account action, deleted on return; sessionStorage.onicost.relogin-at: protection against a sign-in loop. These values last for the tab’s session, with earlier removal depending on the flow.

Sign-in uses the Keycloak identity provider and payment opens at Stripe. Their HTTP cookies are separate from the public site’s storage. The names and lifetimes of the cookies they actually set have not been verified in production; no assumed inventory is assigned to them here.

The “Got it” button dismisses information; it is not consent to advertising trackers. The permanent “Cookies” footer link reopens the information. Navigation remains available if browser storage is unavailable. You can clear storage in your browser settings; this may reset preferences or sign-in.

The CNIL explains the distinction between information, necessary storage and trackers requiring consent in its cookies and trackers guidance.