1. Introduction
Kernel Lab ("we", "us", or "our") operates the Kernel Lab platform, accessible at kernellab.org. This Privacy Policy explains how we collect, use, and protect your information when you use our binary analysis services.
By using Kernel Lab, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We collect the following categories of information:
- Account data: Email address and password hash when you register.
- Usage data: IP address at registration (for free tier enforcement), upload counts, and analysis history.
- Uploaded files: Binary files you submit for analysis. These are stored temporarily and automatically deleted after 24 hours.
- Analysis results: PDF reports generated from your uploaded files, stored and accessible from your dashboard.
- Payment data: Cryptocurrency transaction IDs and invoice records processed via NowPayments. We do not store credit card or wallet information.
3. How We Use Your Information
- To provide and maintain the Kernel Lab service
- To enforce tier-based upload quotas
- To generate AI-powered binary analysis reports
- To process subscription payments
- To prevent abuse and enforce rate limits
- To improve our analysis capabilities
4. Uploaded File Handling
Files you upload for analysis are processed in an isolated sandbox environment. Files are:
- Stored on our servers only for the duration of analysis
- Automatically deleted 24 hours after upload
- Never executed in a live environment — only statically analyzed
- Never shared with third parties
- Deduplicated by SHA-256 hash to prevent redundant processing
5. Third-Party Services
We use the following third-party services that may process data on our behalf:
- Anthropic / Claude API — AI model used to generate analysis reports. File metadata and extracted strings may be sent to Anthropic's API.
- NowPayments — Cryptocurrency payment processor. Governed by NowPayments' own privacy policy.
- Google OAuth — Optional authentication method. Governed by Google's privacy policy.
6. Data Retention
- Uploaded binary files: deleted within 24 hours
- Analysis reports (PDFs): retained while your account is active
- Account data: retained until account deletion
- Access logs: retained for 30 days for security purposes
7. Security
We implement industry-standard security measures including encrypted connections (TLS), bcrypt password hashing, and JWT-based authentication with rotating refresh tokens. However, no method of transmission over the Internet is 100% secure.
8. Your Rights
You may:
- Request deletion of your account and associated data
- Export your analysis history from your dashboard
- Request information about what data we hold about you
To exercise these rights, contact us at Discord: discord.gg/AZmgS2UDjk.
9. Cookies
Kernel Lab uses localStorage (not cookies) to store authentication tokens. No tracking cookies or advertising cookies are used.
10. Children's Privacy
Kernel Lab is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date above. Continued use of the service constitutes acceptance of the updated policy.
12. Contact
Questions about this Privacy Policy should be directed to: Discord: discord.gg/AZmgS2UDjk