Privacy Policy
Last updated: March 15, 2026
Introduction
Medulla provides Kubernetes upgrade intelligence, helping platform teams evaluate, simulate, and safely execute infrastructure upgrades. This Privacy Policy explains how we collect, use, and protect your information when you use our platform. We are committed to safeguarding the data you entrust to us and being transparent about our practices.
Information We Collect
We collect information you provide directly, including your name, email address, and organization details when you create an account. As you use Medulla, we collect usage data such as cluster configurations, upgrade history, simulation results, and confidence scores. We also automatically collect technical data including your IP address, browser type, device information, and access timestamps to maintain security and improve our service.
How We Use Your Information
We use your information to provide and improve the Medulla platform, including generating risk assessments, confidence scores, and upgrade recommendations for your Kubernetes clusters. Your data helps us communicate relevant information about upgrades, maintenance windows, and service updates. We also analyze aggregated usage patterns to enhance the accuracy of our intelligence engine and improve the overall user experience.
Cookies and Tracking
Medulla uses essential cookies for authentication, including secure httpOnly cookies for session management. We do not use third-party tracking cookies or sell your browsing data to advertisers. We may use minimal analytics to understand service usage patterns and improve performance, but this data is never shared with third parties for marketing purposes.
Third-Party Services
We work with trusted infrastructure providers for hosting and service delivery, and payment processors for subscription billing. These providers are contractually obligated to protect your data and use it only for the services they provide to us. We do not sell, rent, or share your personal data or cluster information with any third parties for their own purposes.
Data Retention
Account data is retained for as long as your account remains active. Upgrade history, simulation results, and confidence metrics are retained to support trend analysis and long-term upgrade planning. Upon request for account termination, we will delete your personal data and cluster information within 30 days, except where retention is required by law.
Your Rights
You have the right to access, correct, or delete your personal data at any time. You may export your cluster data, simulation results, and upgrade history through the Medulla dashboard. You can opt out of non-essential communications while continuing to receive critical service notifications. To exercise any of these rights, contact us at privacy@medulla.dev.
Security
We protect your data with encryption in transit and at rest. Our platform enforces row-level security to ensure strict tenant isolation, meaning your cluster data is never accessible to other organizations. We conduct regular security assessments and follow industry best practices to safeguard the integrity and confidentiality of your information.
Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you via email at the address associated with your account. Continued use of Medulla after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@medulla.dev. We will respond to your inquiry within a reasonable timeframe.