Privacy policy

Updated on 2026/10/15

1. Data controller

The data controller is PCKT, LLC, a limited liability company organized under the laws of the State of Delaware, United States. For privacy-related inquiries, contact us at contact@pckt.sh.

For privacy requests, please use the support portal available from your account.

2. Personal data we collect

We only collect the data that is needed to operate the service, including:

  • account data such as your name, email address, and hashed password;
  • authentication and security data, including multi-factor authentication metadata;
  • billing and accounting data required to manage subscriptions, invoices, and payments;
  • support data that you submit through tickets or other support channels;
  • technical and usage data, including request timestamps, target domain, status codes, bandwidth usage, and related logs;
  • analytics and event data used to understand service usage and improve the product.

We process personal data for the following purposes:

  • to provide and operate the service;
  • to authenticate users and protect accounts;
  • to process payments and manage subscriptions;
  • to prevent fraud, abuse, and unauthorized access;
  • to provide support and troubleshoot technical issues;
  • to comply with accounting, tax, and other legal obligations;
  • to measure product usage and improve the service.

Where required by law, we rely on one or more of the following legal bases:

  • performance of a contract;
  • compliance with legal obligations;
  • legitimate interests, such as security and fraud prevention;
  • consent, where consent is required for a specific processing activity.

4. Retention

We keep personal data only for as long as needed for the relevant purpose.

  • Account data is kept for the duration of your active account and up to 2 years after closure, unless a longer retention period is required by law or a dispute requires us to keep the data longer.
  • Detailed usage logs are retained for 60 days for security, debugging, and abuse prevention, then deleted or aggregated.
  • Billing and accounting records are kept for the period required by applicable accounting and tax laws.
  • Support records are kept for as long as needed to resolve the request and maintain service records.

5. Recipients and processors

We share data only with service providers that help us operate Packet, under appropriate contractual safeguards.

  • Stripe for payment processing;
  • self-hosted support tooling for ticket handling;
  • self-hosted analytics tooling, including Umami, for product analytics and event measurement;
  • infrastructure and hosting providers used to run the service, including EU-based infrastructure where applicable.

If a provider transfers data outside the EEA, we use appropriate safeguards required by law.

6. Cookies and similar technologies

We may use strictly necessary cookies or similar technologies to keep the site functioning.

If we use non-essential cookies or similar traceurs, we will provide the information and choices required by applicable law.

7. Your rights

Under the GDPR, you may have the right to:

  • access your personal data;
  • rectify inaccurate data;
  • erase your data in certain circumstances;
  • restrict processing in certain circumstances;
  • object to processing based on legitimate interests;
  • receive your data in a portable format where applicable;
  • withdraw consent, where processing is based on consent.

To exercise these rights, contact us through the support portal in your account. We may need to verify your identity before acting on a request.

8. Complaint authority

If you believe your rights have not been respected, you may lodge a complaint with the CNIL in France or with the competent data-protection authority in your country of residence.

9. Security

We implement technical and organizational measures intended to protect personal data against unauthorized access, disclosure, alteration, or loss. These measures include access controls, password hashing, and operational monitoring.

10. Changes

We may update this policy when our practices or legal obligations change. The current version is the one published on this page.