Privacy Policy
Last updated: February 2026
1. Who We Are
STOA Platform is an open-source API management project maintained by CAB Ingenierie, a French consulting company. This policy covers the website gostoa.dev and associated services (portal.gostoa.dev, console.gostoa.dev, docs.gostoa.dev).
2. Data We Collect
Website analytics: We use Vercel Analytics to collect anonymous, aggregated page view data. No cookies are set. No personal data is collected by analytics.
Newsletter: If you subscribe to our newsletter (via Buttondown), we store your email address to send updates. You can unsubscribe at any time.
Portal / Console accounts: When you create an account on portal.gostoa.dev, we collect your email and name via Keycloak (self-hosted authentication). This data is stored on European infrastructure (OVH, France).
Contact forms: Emails sent to hello@gostoa.dev, demo@gostoa.dev, or sales@gostoa.dev are processed by our team and not shared with third parties.
3. How We Use Your Data
- Provide and improve the STOA Platform services
- Send product updates (newsletter subscribers only)
- Respond to demo requests and support inquiries
- Generate anonymous usage statistics
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Data Storage & Security
All platform data is hosted on European infrastructure (OVH GRA9, Hetzner FSN1). Authentication is managed by self-hosted Keycloak. Secrets are managed via self-hosted Infisical. No data is stored on US-based cloud providers for production services.
5. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to processing
To exercise these rights, contact us at privacy@gostoa.dev.
6. Cookies
gostoa.dev does not use tracking cookies. Vercel Analytics is cookie-free. Authentication sessions on portal/console use secure, HTTP-only session cookies strictly necessary for the service.
7. Contact
For privacy-related questions: privacy@gostoa.dev
CAB Ingenierie — France