Privacy Statement

The Dekglas Minimal-Data Promise

At Dekglas LLC, we build tools for infrastructure, not tools for surveillance. Our privacy statement is intentionally brief because our data collection footprint is strictly limited to what is required to operate our business and validate software licenses.

The Lumaft Software

Community Edition (Free): The Community Edition of the Lumaft container image makes zero outbound calls. It does not phone home, it does not track feature usage, and it does not transmit diagnostic data back to us.

Connected Licensed Editions (Business and Enterprise): If you activate a Business or Enterprise edition of Lumaft using a license key, the software will periodically connect to our license servers to validate your active subscription and your tier's specific feature entitlements. This validation process transmits only your license key, a randomized instance ID, your subscription tier level, and your IP address.

Enterprise Advanced Security: The Enterprise Advanced Security edition is activated by a signed offline license document rather than a license key, and it makes zero outbound calls to Dekglas — like the Community Edition, it never connects to our license servers or any other Dekglas service.

Your Data Stays Yours: Regardless of the edition or tier you use, Lumaft never transmits your infrastructure metrics, configuration files, database connections, or the contents of your local SQLite database back to Dekglas. We have no access to them.

The Dekglas Website & Purchases

Website Analytics: Our marketing website currently uses no analytics at all — no analytics cookies, no tracking, and no audience measurement. If we ever adopt privacy-respecting, anonymized analytics, we will update this policy before enabling them, and we will never use intrusive cross-site tracking or marketing cookies.

Account Sign-in: When account purchasing is enabled, Amazon Cognito hosts registration and sign-in. We use your verified email address and account identifier to associate you with your subscription. The licensing service does not receive your password. The separate sign-in service uses essential session cookies.

Essential Browser Storage: Sign-in uses a one-use verification record in your browser tab, valid for ten minutes. Checkout and account recovery store retry identifiers and their applicable terms version in that tab. Checkout also stores your selected plan. These session-storage records contain no email address, access token, payment details, or license key. Account access tokens and collected license keys are held in page memory; they are not saved in browser storage. Copying or downloading a license key saves it only when you choose to do so.

Billing Information: If you purchase a Licensed Edition tier, we collect the necessary information to process your transaction (name, email, company, and payment details). Payment processing is handled entirely by our secure, PCI-compliant third-party payment provider, Stripe; Dekglas does not store your raw credit card numbers.

Trial Eligibility: When you request a card-required Business trial, Stripe collects your card through its hosted setup page. We retain your verified email and a Stripe-provided card fingerprint to recognize a card that has already been used for a trial. These records enforce one trial per account, email, or card; we do not receive or store your card number. Card setup does not start a paid subscription, and the trial does not charge or become paid automatically. A separate purchase is required for paid access.

Account Recovery: If you request access through a replacement sign-in, we retain its verified account identifier and email, your consent, and the support review record to verify ownership and prevent unauthorized transfers. Approval retires the old sign-in and its active connected license keys. Billing contact synchronization completes before the replacement sign-in receives billing access. Purchase history remains intact.

Information You Provide to Us

The only other personal data we hold is the data you actively choose to send us. If you email us for support, sales, or inquiries, we will retain your email address and the contents of your message solely for the purpose of communicating with you. We do not sell or rent your contact information. We use service providers for account sign-in, payments, and email delivery, and share the information needed to provide those services.

Changes to This Policy

If our data practices change, we will update this policy and detail exactly what is collected and why.