Legal

Privacy Policy

How okyra and this website handle data: the software runs on your machines and sends nothing to us, and this website sets no cookies and runs no analytics.

Last updated 14 October 2026

DRAFT. This page is a draft under legal review and is not yet in force. Questions: stavros.thalassinos@sthlabs.net.

1. Who we are

okyra is made and sold by Stavros Thalassinos, trading as STH Labs, a sole proprietor in Greece, at Thesi Alonaki, Prodromos, 84400 Paros, Greece. Stavros Thalassinos is the data controller for the personal data described here, under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Greek Law 4624/2019.

Privacy questions: stavros.thalassinos@sthlabs.net.

2. The okyra software

okyra runs on your own machines, VMs or containers. It sends no data to us: it has no telemetry, no crash reporting and no HTTP client. Its only network connection is the local DevTools WebSocket to the browser it starts. That browser loads the pages your agent opens, under your control.

okyra uses a throwaway browser profile, not your own. Page content, cookies and screenshots stay on the machine where okyra runs; we never receive them.

A licence key contains your company name, plan, runner allowance, licence ID and the issue and expiry dates. okyra checks it offline on your machine. Nothing about the check is sent to us.

3. This website

This website is a static site. It sets no cookies, runs no analytics and loads no third party scripts or fonts. The small script on the page only reveals sections as you scroll and runs the savings calculator in your browser; the numbers you type into the calculator never leave your browser.

Our hosting provider receives the technical data every web request carries (IP address, browser user agent, the page requested and the time) to deliver the page and protect the service, and keeps it in its logs for a short time. We do not use those logs to identify you.

4. Buying a licence

Online checkout is not open yet. When it opens, card payments will be handled by Stripe, and we will receive the name, company, email address, billing address and VAT number you give at checkout, and the plan you bought. We will never see your full card number.

Until then, licences are sold by invoice or payment link after a conversation with us. In every case we use your details to issue invoices, to sign your licence key and to send it to you by email, and to keep the business records Greek tax law requires. Today each licence key is signed and emailed by hand from our own business mailbox, stavros.thalassinos@sthlabs.net.

For annual and Enterprise plans billed by invoice, we use the details on the order form for the same purposes.

Legal bases: performing our contract with you (GDPR Article 6(1)(b)) and our legal obligations to keep tax records (Article 6(1)(c)).

5. When you email us

If you write to us, we use your email address and message to answer you, and keep the conversation as long as it is useful for support or the business relationship. Legal basis: our legitimate interest in answering the people who contact us (Article 6(1)(f)).

6. Who processes data for us

  • Vercel Inc. hosts this website.
  • Google Cloud EMEA Limited (Ireland) provides our business email through Google Workspace, including the mailbox licence keys are sent from.
  • Stripe Payments Europe, Limited (Ireland) processes payments, invoices and tax calculation. Stripe is our payment processor, not a merchant of record. It handles our payment links and invoices, and online checkout once that opens.
  • Resend (Plus Five Five, Inc.) will send licence key emails automatically once automatic delivery is live. Not in use yet.

Some of these providers are based in the United States. Where personal data leaves the European Economic Area, the transfer relies on the EU US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

7. How long we keep data

Invoices and the records behind them are kept for as long as Greek tax law requires. Support emails are kept as long as they are useful for the business relationship, then deleted. We keep nothing from this website ourselves.

8. Your rights

You can ask for access to, correction of, or deletion of your personal data, ask us to restrict or stop processing it, and ask for a copy in a portable format, within the limits the GDPR sets. Write to stavros.thalassinos@sthlabs.net. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr) or the authority where you live.

9. Changes

If what okyra or this website does with data changes, we update this page and the date at the top before the change takes effect.