Privacy Policy
1. Introduction and Scope
This Privacy Policy explains how CloudScale Technologies Inc. ("we", "us", or "our") collects, uses, discloses, and safeguards personal information when you visit or interact with https://cloudscale.example.com or utilize CloudScale Workspace (collectively, the "Services").
We are committed to maintaining the confidentiality, integrity, and security of your personal data. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue access and use of our Services immediately.
2. Information We Collect
2.1 Information Provided Voluntarily by You
We collect personal information that you intentionally provide when registering for an account, subscribing to features, completing web forms, or communicating with customer care.
- Personal Identifiers: Full name, email address, postal address, and telephone number.
- Account Credentials: Usernames, encrypted passwords, authentication tokens, and security challenge responses.
2.2 Information Collected Automatically
When you navigate or interact with our Services, our servers and automated telemetry tools record technical connection data:
- Device Telemetry: Operating system version, browser family, screen resolution, device brand/model, and unique hardware identifiers.
- Log & Network Data: Internet Protocol (IP) address, referring URL, pages viewed, time stamps, access frequency, and clickstream navigation patterns.
2.3 Sensitive Personal Information
We do not intentionally collect or process sensitive personal data such as biometric identifiers, genetic information, health or medical records, racial or ethnic origins, religious or political beliefs, or government identification numbers.
3. How We Use Information and Lawful Bases for Processing
Under European data protection laws (including the General Data Protection Regulation / Regulation (EU) 2016/679 and UK Data Protection Act 2018), CloudScale Technologies Inc. processes personal information only when an established lawful basis applies.
| Purpose of Processing | Data Categories Involved | Lawful Basis (GDPR Art. 6) |
|---|---|---|
| Delivering core application functionality, account authentication, and customer service | Personal Identifiers, Account Credentials | Performance of a Contract (Art. 6(1)(b)) |
| Processing subscription payments, billing invoices, and tax compliance | Billing Information, Transaction Logs | Contractual Necessity & Legal Obligation (Art. 6(1)(c)) |
| Platform security, intrusion prevention, bot detection, and bug diagnosis | Device Telemetry, Network Logs, IP Addresses | Legitimate Interests (Art. 6(1)(f)) |
| Sending transactional notifications, service updates, and operational notices | Contact Email, Personal Identifiers | Performance of a Contract (Art. 6(1)(b)) |
| Optional marketing newsletters, product feature surveys, and promotional announcements | Contact Email, Stored Preferences | Consent (Art. 6(1)(a)) |
4. Cookies and Automated Tracking Technologies
Our Services utilize HTTP cookies, web beacons, and browser local storage to maintain session states and analyze platform performance.
- Strictly Necessary: Essential for cryptographic security, authenticated sessions, and core platform delivery.
- Analytics & Performance: Measuring visitor traffic, page load performance, error diagnostics, and feature adoption.
- Functional: Remembering user preferences such as theme, layout, and language selections.
4.1 Browser Privacy Signals (Do Not Track & Global Privacy Control)
While our Services do not alter standard responses to legacy browser "Do Not Track" (DNT) header signals due to absence of a unified industry standard, we fully recognize and honor valid Global Privacy Control (GPC) opt-out signals transmitted by supported browsers in compliance with applicable consumer privacy regulations.
5. Third-Party Service Providers and Disclosures
We do not sell your personal data. We disclose personal information only to trusted third-party service providers bound by Data Processing Agreements (DPAs) requiring adherence to strict confidentiality and security standards.
Categories of service providers engaged by CloudScale Technologies Inc. include:
- Service Partner: Stripe
- Service Partner: AWS
- Service Partner: Cloudflare
- Service Partner: PostHog
- Service Partner: SendGrid
- Service Partner: Sentry
6. International Data Transfers
Personal information collected by CloudScale Technologies Inc. may be stored and processed in United States or any other jurisdiction where we or our third-party infrastructure partners maintain server operations.
When transferring personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries not recognized as providing an adequate level of data protection, we implement appropriate contractual safeguards, including standard contractual clauses (SCCs) approved by the European Commission (Implementing Decision (EU) 2021/914) or adherence to the EU-U.S. Data Privacy Framework (DPF).
7. Data Retention and Information Security
For the duration of active account membership plus 30 days after cancellation, or up to 7 years for financial transaction records required by tax regulations.
- TLS 1.3 cryptographic transit encryption
- AES-256 encryption at rest for all database volumes
- Role-based access control (RBAC)
- Mandatory Multi-Factor Authentication (MFA) for administrative access
- Continuous vulnerability scanning and automated patch deployment
8. Your Statutory Privacy Rights
Depending on your geographic location and applicable local privacy statutes, you may exercise specific rights regarding your personal information by contacting us at privacy@cloudscale.example.com. We will verify your identity and respond within the statutory timeframe (typically 30 days under GDPR, 45 days under CCPA).
8.1 European Economic Area (EEA) and UK Data Subject Rights
If you reside within the European Union, European Economic Area, or United Kingdom, you possess the following statutory rights under GDPR Articles 15 through 22:
- Right of Access (Art. 15): Request confirmation of processing and obtain a copy of your personal data.
- Right to Rectification (Art. 16): Request correction of inaccurate, incomplete, or outdated personal data.
- Right to Erasure / 'Right to Be Forgotten' (Art. 17): Request permanent deletion of personal data where retention is no longer justified.
- Right to Restriction of Processing (Art. 18): Request suspension of data processing under contested accuracy or legality.
- Right to Data Portability (Art. 20): Receive personal information in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing at any time.
- Right to Lodge a Complaint (Art. 77): Lodge a complaint with a supervisory data protection authority in your EU member state.
8.2 California Consumer Privacy Disclosures (CCPA / CPRA)
Under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA / CPRA), California residents are entitled to specific statutory disclosures and consumer rights:
- Right to Know: Request disclosure of categories and specific pieces of personal information collected in the preceding 12 months.
- Right to Delete: Request deletion of personal information collected directly from you, subject to statutory exceptions.
- Right to Correct: Request correction of inaccurate personal data maintained in our records.
- Right to Non-Discrimination: We will never deny services, charge different prices, or provide an altered service level for exercising your privacy rights.
- Notice of No Sale or Sharing: We do not sell your personal information, nor do we share your personal data with third parties for cross-context behavioral advertising.
9. Children's Privacy Protection
Our Services are not directed to individuals under the age of 16. We do not knowingly solicit or collect personal information from children under 16. If we learn that personal data of a minor under 16 has been collected without verified parental consent, we will take immediate steps to permanently purge such data from our databases.
If you are a parent or legal guardian and believe that your child has submitted personal information to us without consent, please contact us immediately at privacy@cloudscale.example.com.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our operational practices, regulatory mandates, or legal obligations. When material updates are made, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, displaying a prominent notice within our application or sending an email notification.
Your continued access or use of our Services following the posting of an updated Privacy Policy constitutes your acceptance of the revised practices.
11. Contact Information and Data Protection Officer
If you have questions, comments, or wish to exercise any statutory rights regarding this Privacy Policy, please contact our data protection team:
- Organization: CloudScale Technologies Inc.
- Website: https://cloudscale.example.com
- Privacy Inquiries Email: privacy@cloudscale.example.com
- Mailing Address: 100 Innovation Way, Suite 400, San Francisco, CA 94105