LOFT / CONTAINER CLOUD

Loft privacy notice

Loft is Container Labs’ workspace for cloud services. This notice describes the initial Loft account and sandbox billing service. Contact will@containerlabs.io with privacy questions or requests.

Information used by Loft

When you sign in with Google, Loft receives your Google account identifier, verified email address, and name. Loft uses your Google identifier to recognize your existing platform identity where applicable. Loft stores your account, workspace memberships, and session records to sign you in and control access to your workspaces. Sharing an identity with another Container Labs app does not automatically grant access to that app’s workspaces.

If you use card setup, Stripe collects the card details on its hosted page. Loft stores the associated Stripe customer and setup identifiers, plus the card brand, last four digits, and expiration date. Loft does not receive your full card number or security code. Billing currently operates in Stripe sandbox mode: use test card details only. Adding a test card does not charge you or start a subscription.

Our hosting and infrastructure providers may process technical request information, such as IP addresses, timestamps, and errors, to deliver and secure the service. Loft uses a necessary sign-in nonce cookie and a session cookie. Sessions expire after seven days; expiration does not itself delete the stored session record.

How information is used and processed

We use this information to authenticate you, create and manage workspaces, enforce membership and billing permissions, save your billing setup, and operate and troubleshoot Loft. The current service uses Google for sign-in, Vercel for web hosting, Google Cloud for the API, Neon for database storage, and Stripe for card setup. These providers process information needed for their respective functions under their own terms and privacy policies.

Retention and requests

Account, workspace, and billing-reference records remain stored while needed to operate your account and manage the service. Infrastructure logs and backups follow the applicable provider and service configurations. You can request access, correction, or deletion by emailing will@containerlabs.io. We may need to verify your identity and account authority before acting on a request; deletion may be limited by security, legal, or recordkeeping requirements.

Changes

We will update this notice when Loft’s data practices change, including before introducing materially different paid services or data processing.