Introduction

KWatch ("we", "us", "our") is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swiss data protection law.

This policy explains what data we collect, why we collect it, and how you can exercise your rights.

Data collected

• Account information — e-mail address, display name, hashed password.
• OpenStack credentials — encrypted at rest (AES-256) and used solely to query your cloud infrastructure.
• Usage data — session cookies, language and currency preferences.
• Cost data — cached temporarily from the OpenStack / CloudKitty APIs to display your dashboard.

Purpose of processing

• Authenticate you and manage your account.
• Query OpenStack APIs on your behalf to display cost and resource data.
• Send transactional e-mails (verification, password reset, invitations).
• Remember your preferences (language, currency, selected project/region).

Data retention

Account data is retained for as long as your account exists. Cost cache data is refreshed periodically and old entries are automatically purged. You may delete your account at any time from the Preferences page.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.

To exercise any of these rights, please contact us via the contact page.

Hosting

This application is hosted on Infomaniak infrastructure in Switzerland, which benefits from strong data protection regulations.

Data controller

Kevin Allioli
contact@kwatch.cloud